Certificate error when registering mobile device.

Problem

Registration failed

The certificate for this server is invalid.

You might be connecting to a server that is pretending to be “servername.domain” which could put your confidential information at risk.

OK

Solution

Check the registry in the following location for the list of functions.

Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Cryptography\Configuration\Local\SSL\00010003

They should be in this order:

RSA/SHA256

RSA/SHA384

RSA/SHA1

ECDSA/SHA256

ECDSA/SHA384

ECDSA/SHA1

DSA/SHA1

RSA/SHA512

ECDSA/SHA512

Reference links

Thread with registry path

https://forums.iis.net/t/1225015.aspx?My+web+IIS+server+event+log+is+full+with+schannnel+error

MS blog about issues with TLS 1.2 adn SHA 512

https://docs.microsoft.com/en-us/archive/blogs/silvana/schannel-errors-on-scom-agent

Cipher Suites in TLS/SSL (Schannel SSP)

https://docs.microsoft.com/en-us/windows/win32/secauthn/cipher-suites-in-schannel?redirectedfrom=MSDN

Related articles