If Windows cannot create a new certificate, you may need to clear the certificate key store. For Azure VMs: Use the "Run Command" feature in the Azure Portal. For Local Servers: Run PowerShell as an Administrator. Execute the following command to rename the key folder:
On the computer (the one you’re trying to connect to ), open PowerShell as Administrator .
By following this comprehensive guide, you should be able to diagnose and resolve the 0x904 error and restore your RDP connection.
Restart routers and modems at both ends. Solution 4: Re-allow RDP in Firewall
This public link is valid for 7 days and shares a thread, including any personal information you added. This link or copies made by others cannot be deleted. If you share with third parties, their policies apply. Can’t copy the link right now. Try again later.
The most common root cause of 0x904 after an installation is a . In 2018, Microsoft released patches for a critical vulnerability (CVE-2018-0886) nicknamed “CredSSP Remote Code Execution.” These patches introduced three encryption levels: Vulnerable , Mitigated , and Force Updated . If your client machine received a post-patch update, but the remote server did not (or vice versa), the encryption handshake fails. Error 0x904 is often the silent flag raised by the client when the server refuses the newer, more secure encryption level.
The most common cause of error 0x904 is an on the host machine. These certificates sometimes fail to renew automatically, causing the connection to drop immediately. How to fix it:
Use PowerShell to verify the RDP port (3389) is actually reachable: Test-NetConnection [ServerIP] -Port 3389 5. Disable Network Level Authentication (NLA) for Testing
An expired or broken self-signed certificate on the host machine is the single most common culprit behind error 0x904. When it fails, you must clear out the bad data and force Windows to create a fresh secure listener.
This article provides a comprehensive guide to understanding and fixing the error, including installation fixes and network-related troubleshooting. What Causes the 0x904 RDP Error?
: Download the latest Microsoft Remote Desktop client from the Microsoft Store. Step-by-Step Troubleshooting Guide 1. Verify Remote Desktop Settings (Host PC)
If you encounter this error on an Azure Virtual Machine, the certificate store might be corrupt.
If you still encounter issues, try:
Windows generates a temporary self-signed certificate for the Remote Desktop Service ( TermService ). If this certificate expires and fails to auto-renew, the client will drop the TLS tunnel.
Ensure both "Remote Desktop" and "Remote Desktop Connection" are checked for both Private and Public networks. Summary of Fixes Possible Cause Fix Action Corrupted Certificate Store Rename MachineKeys folder Windows Home Ed. Outdated RDP Wrapper Update rdpwrap.ini & restart services VPN/Remote Network instability Check VPN bandwidth and stability General Firewall blocking Allow RDP in Windows Defender Firewall
: Freshly installed firewalls or endpoint protection suites (such as Bitdefender) often flag the initial encrypted RDP payload as an anomaly and forcefully tear down the socket connection. Step-by-Step Fixes for RDP Error Code 0x904
By following this comprehensive guide, you should be able to resolve Remote Desktop Connection error code 0x904 and establish a successful remote connection to your Windows machine.
If Windows cannot create a new certificate, you may need to clear the certificate key store. For Azure VMs: Use the "Run Command" feature in the Azure Portal. For Local Servers: Run PowerShell as an Administrator. Execute the following command to rename the key folder:
On the computer (the one you’re trying to connect to ), open PowerShell as Administrator .
By following this comprehensive guide, you should be able to diagnose and resolve the 0x904 error and restore your RDP connection.
Restart routers and modems at both ends. Solution 4: Re-allow RDP in Firewall
This public link is valid for 7 days and shares a thread, including any personal information you added. This link or copies made by others cannot be deleted. If you share with third parties, their policies apply. Can’t copy the link right now. Try again later. i remote desktop connection error code 0x904 install
The most common root cause of 0x904 after an installation is a . In 2018, Microsoft released patches for a critical vulnerability (CVE-2018-0886) nicknamed “CredSSP Remote Code Execution.” These patches introduced three encryption levels: Vulnerable , Mitigated , and Force Updated . If your client machine received a post-patch update, but the remote server did not (or vice versa), the encryption handshake fails. Error 0x904 is often the silent flag raised by the client when the server refuses the newer, more secure encryption level.
The most common cause of error 0x904 is an on the host machine. These certificates sometimes fail to renew automatically, causing the connection to drop immediately. How to fix it:
Use PowerShell to verify the RDP port (3389) is actually reachable: Test-NetConnection [ServerIP] -Port 3389 5. Disable Network Level Authentication (NLA) for Testing
An expired or broken self-signed certificate on the host machine is the single most common culprit behind error 0x904. When it fails, you must clear out the bad data and force Windows to create a fresh secure listener. If Windows cannot create a new certificate, you
This article provides a comprehensive guide to understanding and fixing the error, including installation fixes and network-related troubleshooting. What Causes the 0x904 RDP Error?
: Download the latest Microsoft Remote Desktop client from the Microsoft Store. Step-by-Step Troubleshooting Guide 1. Verify Remote Desktop Settings (Host PC)
If you encounter this error on an Azure Virtual Machine, the certificate store might be corrupt.
If you still encounter issues, try:
Windows generates a temporary self-signed certificate for the Remote Desktop Service ( TermService ). If this certificate expires and fails to auto-renew, the client will drop the TLS tunnel.
Ensure both "Remote Desktop" and "Remote Desktop Connection" are checked for both Private and Public networks. Summary of Fixes Possible Cause Fix Action Corrupted Certificate Store Rename MachineKeys folder Windows Home Ed. Outdated RDP Wrapper Update rdpwrap.ini & restart services VPN/Remote Network instability Check VPN bandwidth and stability General Firewall blocking Allow RDP in Windows Defender Firewall
: Freshly installed firewalls or endpoint protection suites (such as Bitdefender) often flag the initial encrypted RDP payload as an anomaly and forcefully tear down the socket connection. Step-by-Step Fixes for RDP Error Code 0x904
By following this comprehensive guide, you should be able to resolve Remote Desktop Connection error code 0x904 and establish a successful remote connection to your Windows machine. Execute the following command to rename the key