Home / server / Questions / 461264
Accepted
Brian Knoblauch
Asked: 2012-12-28 12:30:31 +0800 CST

How can I (securely) get remote desktop back?

  • 772

In order to make compliance with our PCI-DSS requirements, I was required to disable TLS 1.0 (apparently it has a flaw that was corrected in TLS 1.1 and higher). However, after doing so, remote desktop fails to connect to that server. Is there a way to connect to remote desktop servers without TLS? Perhaps configure remote desktop for a newer version of TLS?

windows-server-2008-r2

2 Answers

  1. Best Answer

    Did you got that solved? If not try the following:

    1. run the IIS Crypto from Nartac on the affected server (or do all the stuff the tool made by hand, thats also possible e.g. via regestry)
    2. leave TLS 1.0 enabled
    3. change the cipher in the list and disable all CBC cipher (the ones with CBC in it)
    4. restart the server.

    That should do the trick, as currently only the CBC cipher are affected by the breast attack.

    • 2

  2. Disable Large Send Offload for IPv4 on your NIC. If that fixes it, contact your server/NIC vendor for a fix.

    • 1