question

CraigGarland-2854 avatar image
0 Votes"
CraigGarland-2854 asked AlexZhu-MSFT edited

VDI RDP External to Internal through gateway An Authentication error has occurred 0x607

Hi Guys,

Hope someone can help me with this issue.

I have a VDI RDP enviroment setup with external user connecting via a VDI Gateway to internal VDI computer. Everything has been working well for the last two years.

We have a requirement to enforce RDP to not use selfsign certificates. As such I have pushed CA signed certificate to client computer. Then created a group policy to assign the CA signed certificate to RDP connections. This works for internal connections without an issue.

The issue comes when I try to connect from external via the gateway and using the RDP webfile. I keep geting a error: "An Authentication error has occurred (Code: 0x607):

If I manually configure the gateway to connect then I can connect without an issue.

I found a few possible fixes searching the web but none of the fixes work or are suitable.

The main fix is delete Reg key SSLCertificateSHA1Hash. I don't have this key so cannot delete it.
See link:https://social.msdn.microsoft.com/Forums/en-US/1475e899-ba16-48e6-ad10-b9fb28abc95e/2016-rds-deployment-with-authentication-error-code-0x607-when-users-connect-from-offsite?forum=winserverTS

Other poeple have suggested reducing the security level which again would not be a suitable fix.

It is interesting to note that this issue only happens using the RDP Web File. If I manually configure the gateway I can connect without an issue.

If anyone has any suggestion I would love to hear them.

Craig

windows-10-hyperv
5 |1600 characters needed characters left characters exceeded
Toggle Comment visibility. Current Visibility: Visible to all users

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

CraigGarland-2854 avatar image
0 Votes"
CraigGarland-2854 answered

Hi

Just an update that might interest someone who get the same issue.

I found if you Modify the 'use redirection server name' from 1 to 0 you are then able to connect. This can be change in the RDP file of you can change it by editing the customerRDPProperty. Unfortunately every time to make a change to the collection or even reboot server the value is rolled back to 1.

Powershell to change value.
Set-RDVirtualDesktopCollectionConfiguration -CollectionName <CollectionName> -ConnectionBroker <ActiveBroker> -CustomRdpProperty "use redirection server name:i:0 ndisplayconnectionbar:i:1" **Note** you need n between each value to create a new line.

Craig

5 |1600 characters needed characters left characters exceeded
Toggle Comment visibility. Current Visibility: Visible to all users

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.