Good day All,
Welcome back!!!
Recently we had Windows 2012 which was online in Console but unable to RDP to Server and we started to see this below error in system logs
Event ID: 1057
Description:
The RD Session Host Server has failed to create a new self signed certificate to be used for RD Session Host Server authentication on SSL connections. The relevant status code was Keyset as registered is invalid.
Troubleshooting steps:
1. Server was rebooted
2.Tried stopping and resetting NIC
3.Tried adding new NIC
4.recreated RDP-TCP Listener
Solution:
1. Please got to folder C:\ProgramData\Microsoft\Crypto\RSA
2. Rename Folder Machinekeys to something as machinekeys_old
3.Restart the Remote desktop Service
After Service restart we able to RDP to Server.
Now after fixing RDP what we encountered was IISAdmin Service wouldn't start.So we tried different articles suggesting that we give permissions nothing worked.. so on further investigation we found that IISADMIN is looking for file which starts with C23 so we went back to old machine key folder then copied all the C23 files and copied to new machine key folder then IISAdmin service started to work.
Well we thought that's it. then Application team which had Sharepoint complained that Application pool related to Sharepoint that is Security Token Service App pool would start and then would fail.
We did some search with no luck so we just said lets replace the old machine key folder so we went ahead and replaced the old machine key folder and everything started to work with sharepoint and i know we lost RDP to Server..
On further investigation we found that RDP Service is creating a file something like this “f686aace6942fb7f7…” so we deleted this file in exsisting machine key folder and copied it from the new machine key folder which had RDP working.
So now RDP and all IIS Application was working fine.....
If anyone looking for what machinekeys folder contains well google would be a place to start..
Also for some reason this didn't work for me, may be it would help someone so sharing this as well...
https://blogs.technet.microsoft.com/askperf/2014/10/22/rdp-fails-with-event-id-1058-event-36870-with-remote-desktop-session-host-certificate-ssl-communication/
Hopefully this helps someone ,until next one everyone have good day!!!!!!!!!!!!!!!!
Welcome back!!!
Recently we had Windows 2012 which was online in Console but unable to RDP to Server and we started to see this below error in system logs
Event ID: 1057
Description:
The RD Session Host Server has failed to create a new self signed certificate to be used for RD Session Host Server authentication on SSL connections. The relevant status code was Keyset as registered is invalid.
Troubleshooting steps:
1. Server was rebooted
2.Tried stopping and resetting NIC
3.Tried adding new NIC
4.recreated RDP-TCP Listener
Solution:
1. Please got to folder C:\ProgramData\Microsoft\Crypto\RSA
2. Rename Folder Machinekeys to something as machinekeys_old
3.Restart the Remote desktop Service
After Service restart we able to RDP to Server.
Now after fixing RDP what we encountered was IISAdmin Service wouldn't start.So we tried different articles suggesting that we give permissions nothing worked.. so on further investigation we found that IISADMIN is looking for file which starts with C23 so we went back to old machine key folder then copied all the C23 files and copied to new machine key folder then IISAdmin service started to work.
Well we thought that's it. then Application team which had Sharepoint complained that Application pool related to Sharepoint that is Security Token Service App pool would start and then would fail.
We did some search with no luck so we just said lets replace the old machine key folder so we went ahead and replaced the old machine key folder and everything started to work with sharepoint and i know we lost RDP to Server..
On further investigation we found that RDP Service is creating a file something like this “f686aace6942fb7f7…” so we deleted this file in exsisting machine key folder and copied it from the new machine key folder which had RDP working.
So now RDP and all IIS Application was working fine.....
If anyone looking for what machinekeys folder contains well google would be a place to start..
Also for some reason this didn't work for me, may be it would help someone so sharing this as well...
https://blogs.technet.microsoft.com/askperf/2014/10/22/rdp-fails-with-event-id-1058-event-36870-with-remote-desktop-session-host-certificate-ssl-communication/
Hopefully this helps someone ,until next one everyone have good day!!!!!!!!!!!!!!!!
Thank you, Naveen. I used your solution just last week.
ReplyDeletejust worked for me, thanks so much!
ReplyDeleteThank you..That just worked !!!
ReplyDeleteThank you, it works !
ReplyDeleteThank you, this helped us out
ReplyDeleteThat was helpful. Thank you!
ReplyDeleteThanks a lot, worked for me!
ReplyDeleteThanks a lot Naveen for your detailed solution, I was struggling since two days to resolve this and after following your solution it worked for me.
ReplyDeleteSorry can you please explain your sentence "so we deleted this file in exsisting machine key folder and copied it from the new machine key folder which had RDP working.". There are two folders now, MachineKeys and MachineKeys_Old. So delete f686.. file from which folder? And copy from and to which folder?
ReplyDeleteoutstanding, worked like a charm
ReplyDelete