Configure TLS 1.3 for use RDP Windows server 2022 and Client Windows 11

Question

Configure TLS 1.3 for use RDP Windows server 2022 and Client Windows 11

I currently have the registry entries configured, however when executing the rdp connection to the server it marks an Internal Error

Answer 1

Hello

You can force the Windows RDP client to use TLS 1.3 on Windows Server 2022. However, it seems that the RDP client only advertises TLS 1.2, even though Edge uses TLS 1.3. According to Microsoft documentation, TLS 1.3 should be enabled by default on Windows Server 2022.

Another user on Microsoft Q&A reported an error when trying to use RDP with TLS 1.3: "A fatal error occurred while creating a TLS client credential. The internal error state is 10013". This error occurs when the client and server cannot agree on a mutual cipher to use to establish a secure connection. If you are having connectivity issues with a specific resource or internet site, for example, then you should review your TLS/SSL settings.

https://learn.microsoft.com/en-us/answers/questions/514240/use-tls-1-3-for-rdp-%28windows-server-2022%29

https://learn.microsoft.com/en-us/windows/win32/secauthn/protocols-in-tls-ssl--schannel-ssp-

Answer 2

In our testing with Windows 2022 Datacenter Edition on AWS, RDP does not support TLS 1.3. Other services like IIS and LDAPs are able to support TLS 1.3 just fine. We are waiting for Microsoft to add TLS 1.3 support to RDP.