{"id":21801,"date":"2021-10-19T12:39:42","date_gmt":"2021-10-19T10:39:42","guid":{"rendered":"http:\/\/159.69.82.204\/win\/?p=21801"},"modified":"2021-10-19T12:39:42","modified_gmt":"2021-10-19T10:39:42","slug":"windows-10-update-fix-fr-smartcard-authentifizierung-bei-remote-desktop-und-yubikey-probleme","status":"publish","type":"post","link":"https:\/\/borncity.com\/win\/2021\/10\/19\/windows-10-update-fix-fr-smartcard-authentifizierung-bei-remote-desktop-und-yubikey-probleme\/","title":{"rendered":"Windows 10 Update: Fix for Remote Desktop Smartcard Authentication (also YubiKey) issues"},"content":{"rendered":"

\"Windows\"[German<\/a>]As part of the October 2021 patchday wrap-up, I'd like to bring up a second topic in addition to the post Microsoft confirms Windows network printing issue after October 2021 updates<\/a>. Microsoft has announced that the smartcard authentication issue with remote desktop connections has been fixed with the October 2021 updates via a rollback. At the same time, I've seen reports here on the blog that the October 2021 security update for Windows 10 will break YubiKey authentication, which should also be fixed.<\/p>\n

<\/p>\n

YubiKey authentication broken<\/h2>\n

\"\"Following the release of the October 2021 security updates (see Patchday: Windows 10-Updates (October 12, 2021)<\/a>), several administrators have come forward in comments within my German the blog describing how YubiKey authentication is no longer working. IT Guy wrote<\/a>:<\/p>\n

\n

Unfortunately, the update has broken the RDP login via Yubikey.
After uninstalling KB5006670 the login is possible again.<\/p>\n<\/blockquote>\n

And the user with the alias CloudKasper added:  <\/p>\n

\n

ditto here, …. Do they actually check their own dog food?
especially here Yubikey with MS AD Enterprise CA, no third party software.<\/p>\n<\/blockquote>\n

According to this user, the problem also affects Windows Hello. In a second comment<\/a> he wrote: <\/p>\n

\n

I have not found a solution yet. It seems to affect Windows Hello as well.
A quick test yesterday at our end showed that it doesn't affect RDP clients in the same domain, only RDP clients that have no domain affiliation (in our case, a Surface that is not logged into the domain). So far the sample is too small for reproducibility.<\/p>\n

But there must be a lot of admins out there who use the constellation Yubikey smartcard certificate with MS CA.<\/p>\n<\/blockquote>\n

In a recent comment, CloudKasper notes (thanks for that) that Microsoft has confirmed this and links to the post Smartcard authentication might fail when attempting to connect using Remote Desktop<\/a> in the Windows 10 status area for version 21H1.  <\/p>\n

Smartcard authentication with Remote Desktop<\/h2>\n

The post Smartcard authentication might fail when attempting to connect using Remote Desktop<\/a> published by Microsoft in the Windows 10 status area for version 21H1 addresses the addressing problem when using smartcards. It mentioned Remote Desktop (but should also affect Windows Hello, as mentioned above). Microsoft writes about this:<\/p>\n

\n

After installing KB5005611<\/a> or later updates, when connecting to devices in an untrusted domain using Remote Desktop, connections might fail to authenticate when using smart card authentication. You might receive the prompt, \"Your credentials did not work. The credentials that were used to connect to [device name] did not work. Please enter new credentials.\" and \"The login attempt failed\" in red.<\/p>\n<\/blockquote>\n

Update KB5005611<\/a> is the September 30, 2021 preview update. After installing KB5005611 or newer updates, smart card authentication may fail when connecting to devices in an untrusted domain with Remote Desktop. Users receive a message \"Your credentials did not work. The credentials used to connect to [device name] did not work. Please enter new credentials.\" and \"The login attempt failed\" in red font. The following systems are affected if the updates have been installed: <\/p>\n