Skip to main content
An RDP connection can fail with “This could be due to CredSSP encryption oracle remediation” when the client and server have incompatible security updates or policy settings. CredSSP encryption oracle remediation error
  1. Install the applicable Windows security updates on the computer running your RDP client.
  2. Open your VPS through Start VNC → Open Console in the VPS Management Portal. This gives you a way to work on Windows when RDP is unavailable.
  3. Install the applicable Windows security updates on the VPS. Use a supported Windows release and restart when required.
  4. Retry Remote Desktop after both systems have completed their updates.
Microsoft recommends updating both client and server to restore a secure connection. See Microsoft’s CredSSP troubleshooting guide.

​
If you previously applied the registry workaround

Older instructions set AllowEncryptionOracle to 2. This selects the Vulnerable policy and permits insecure CredSSP compatibility; it is not a permanent fix. After updating both systems, restore the organization’s intended policy. On a personal, unmanaged client where this registry value was added solely for the workaround, remove that override from an Administrator Command Prompt:
If the value does not exist, there is no local override to remove. For a company-managed computer, ask the administrator to review the policy instead. Microsoft documents the protection levels in Encryption Oracle Remediation.

​
Still unable to connect?

Confirm the exact error message. A timeout, incorrect password, or locked account requires different troubleshooting. Use the RDP connection guide and include the error text and Windows versions when contacting support.
Last modified on October 4, 2026