
I moved them all to a subfolder so there were none left in the MachineKeys folder. What did finally work, I noticed that we had a bunch of crypto keys that looked like this:Ĭ:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\f686aace6942fb7f7ceb231212eef4a4_XXXXXXXX

I also deleted the Host Configuration’s RDP-Tcp connection object all together and restarted the Remote Desktop Services service. “HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server\RCM” > Certificate “HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server\RCM” > CertificateOld “HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server\WinStations” > SelfSignedCertificate In my case I had already tried a lot of the advice like deleting the self-signed certificate and rebooting (MMC/Certificates/Local Computer/Remote Desktop) And deleting these keys and restarting: The conditions you’ll probably also notice is that you can’t remote desktop into the server until you remove the “Allow connection only from computers running Remote Desktop with Network Level Authentication” checkbox in the Remote Desktop Session Host Configuration’s RDP-Tcp properties General Tab or from the System settings under the Remote tab by changing the radio button back to “Allow connections from computers running any version of Remote Desktop (less secure)”. The relevant status code was Key not valid for use in specified state” from source TerminalServices-RemoteConnectionManager in the System event log, you may have an issue with a lot of strange advice.

Mine has this besides it "cuLoadKeyEx: LoadKeys returned Key does not exist.If you receive Event ID 1057 – “The Terminal Server has failed to create a new self signed certificate to be used for Terminal Server authentication on SSL connections. I also read somewhere to run the certutil -key command to get the TSSecKeySet1 certificate thumbprint. Some Googling points to remove everything from the C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys folder and restarting, but I am reluctant because CRM also uses SSL certificates and don't want to mess that up.

The error code returned from the cryptographic module is 0x8009030D. The relevant status code was Access is denied.Ī fatal error occurred when attempting to access the SSL server credential private key. The RD Session Host Server has failed to create a new self signed certificate to be used for RD Session Host Server authentication on SSL connections.

In the event logs, I see 2 events that seem relevant. The error I get is "This computer can't connect to the remote computer." I have a 2012 R2 server for CRM that I can no longer RDP into.
