{"id":12148,"date":"2026-04-19T22:53:42","date_gmt":"2026-04-20T03:53:42","guid":{"rendered":"https:\/\/www.rushworth.us\/lisa\/?p=12148"},"modified":"2026-04-20T15:20:05","modified_gmt":"2026-04-20T20:20:05","slug":"vexing-rdpsign-issue","status":"publish","type":"post","link":"https:\/\/www.rushworth.us\/lisa\/?p=12148","title":{"rendered":"Vexing RDPSign Issue"},"content":{"rendered":"<p>With recent Windows updates, users now get a big message saying &#8220;Caution: Unknown remote connection&#8221; when launching RDP sessions from our CyberArk server. Easy enough &#8211; I have an internal CA, I can generate a code signing certificate, so I can sign these RDP files.<\/p>\n<p>Except, in testing, I\u00a0<em>continually <\/em>got an error indicating rdpsign cannot find the certificate. It&#8217;s there. I have a private key. It&#8217;s a code signing certificate. An hour or so later, I realize the &#8220;sha256&#8221; value is actually the SHA-1 thumbprint. Which &#8230; not my first guess and really more of a &#8220;out of reasonable options, start trying silly things&#8221; guess.<\/p>\n<p>&#8220;$env:SystemRoot\\System32\\rdpsign.exe&#8221; \/v \/sha256 $hash256 $rdp<\/p>\n<p>Voila, &#8220;All rdp file(s) have been successfully signed.&#8221;<\/p>\n<p>Sigh &#8212; and, after all this work? I go from the red &#8220;unknown publisher&#8221; error to a yellow &#8220;yeah, you should think about this&#8221; banner.<\/p>\n<p><a href=\"https:\/\/www.rushworth.us\/lisa\/wp-content\/uploads\/2026\/04\/SignedRdp.jpg\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-12149\" src=\"https:\/\/www.rushworth.us\/lisa\/wp-content\/uploads\/2026\/04\/SignedRdp.jpg\" alt=\"\" width=\"542\" height=\"438\" srcset=\"https:\/\/www.rushworth.us\/lisa\/wp-content\/uploads\/2026\/04\/SignedRdp.jpg 542w, https:\/\/www.rushworth.us\/lisa\/wp-content\/uploads\/2026\/04\/SignedRdp-300x242.jpg 300w\" sizes=\"auto, (max-width: 542px) 100vw, 542px\" \/><\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>With recent Windows updates, users now get a big message saying &#8220;Caution: Unknown remote connection&#8221; when launching RDP sessions from our CyberArk server. Easy enough &#8211; I have an internal CA, I can generate a code signing certificate, so I can sign these RDP files. Except, in testing, I\u00a0continually got an error indicating rdpsign cannot &hellip;<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[30],"tags":[2188],"class_list":["post-12148","post","type-post","status-publish","format-standard","hentry","category-system-administration","tag-rdp-signing"],"_links":{"self":[{"href":"https:\/\/www.rushworth.us\/lisa\/index.php?rest_route=\/wp\/v2\/posts\/12148","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.rushworth.us\/lisa\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.rushworth.us\/lisa\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.rushworth.us\/lisa\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.rushworth.us\/lisa\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=12148"}],"version-history":[{"count":1,"href":"https:\/\/www.rushworth.us\/lisa\/index.php?rest_route=\/wp\/v2\/posts\/12148\/revisions"}],"predecessor-version":[{"id":12150,"href":"https:\/\/www.rushworth.us\/lisa\/index.php?rest_route=\/wp\/v2\/posts\/12148\/revisions\/12150"}],"wp:attachment":[{"href":"https:\/\/www.rushworth.us\/lisa\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=12148"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.rushworth.us\/lisa\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=12148"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.rushworth.us\/lisa\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=12148"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}