VuGen RDP Script "Error: .. Failed to switch to secure connection"

[kkoerrentz]

Hi guys,

a few days ago a RDP script stopped working and outputs the following error message:

Error: Information relevant for customer support: LR Rdp Connect: Failed to switch to secure connection. [MsgId: MERR-202898]

I do not find any information about that error in VuGen documents or community.
I also cannot find any possibility to change security settings.

So what can be done to get the script re-running again?

Additional information:

Furthermore a re-recoring is not possible, too. If VuGen tries to connect via mstsc.exe the following error message occures:

If I start mstsc.exe "normally" the connection is possible.

Systems:
WindowsServer 2012
VuGen: 12.55
( BPM: 9.40)

Regards,
Kevin

[TinaZZZ]

Hi,

for replay, what's your runtime setting in "RDP" -> "Configuration" -> "supported encryption level"?  can you try with it set to "RDP"?

for re-recording, NLA needs to be disabled in target server.

[kkoerrentz]

Hi,

I tried several options. It worked with "CredSSP" before.
Now:
Error: Information relevant for customer support: LR Rdp Connect: Failed to switch to secure connection. [Time:2019-10-17 09:52:18]

"RDP" result:

Error: Connection reset by the server [Time:2019-10-17 09:49:05]

"SSL" result:

Information relevant for customer support: LR Rdp Connect: tX224ConnectionConfirmPacket.Recv() : failed
Error: Connection reset by the server [Time:2019-10-17 09:51:34]
There was an error while connecting to the RDP Server

[TinaZZZ]

Hi,

Please check in your server side if tls 1.0 disabled in 

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols

[kkoerrentz]

Yes, it is.
Customer is changing his security settings and disabling TLS 1.0 everywhere.

We are not able to take influence on these settings.

[kkoerrentz]

Hi,

here are the wireshark sniffets.

FYI:

Source IP:
16.175.18.231

DestIP:
17.248.11.34 (DNS: v998spwtv191096.v998dpv1.v998.intern )

[TinaZZZ]

Please raise a ticket to MF if change security policy is not possiable.