can't log into remote desktop. SSL error.
We did a windows update over the weekend and one of our servers now won't allow us to rdp into it. It's the domain controller in a Win 2012 environment. We run a number of servers and a RD connection broker to allow remote clients to use our software. That part of the infrastructure works fine. I've checked the 3rd party created certificate for the farm (issued in the last couple of months) and it appears to be fine.
What we can't do is get onto the domain controller remotely for admin purposes.
The server logs show an error.
A fatal error occurred when attempting to access the SSL server credential private key. The error code returned from the cryptographic module is 0x8009030D. The internal error state is 10001.
This is most likely the problem. A look on the internet says that the problem is with the private key for the certificate. However what I don't know is where the certificate for RDP resides for a single server and how to repair the problem. The certificate we use for the farm does not name this server explicitly since it doesn't directly participate in the farm login process. So it must have an internally generated certificate. I'm just not sure where and how to go about creating and storing a new one.
What we can't do is get onto the domain controller remotely for admin purposes.
The server logs show an error.
A fatal error occurred when attempting to access the SSL server credential private key. The error code returned from the cryptographic module is 0x8009030D. The internal error state is 10001.
This is most likely the problem. A look on the internet says that the problem is with the private key for the certificate. However what I don't know is where the certificate for RDP resides for a single server and how to repair the problem. The certificate we use for the farm does not name this server explicitly since it doesn't directly participate in the farm login process. So it must have an internally generated certificate. I'm just not sure where and how to go about creating and storing a new one.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.