Obtain a new certificate from your CA and ensure the server configuration is correct

InsightVM
1

I need a little more assistance with Solution ID: tls-untrusted-ca (Obtain a new certificate from your CA and ensure the server configuration is correct)
We have mixture of servers where they have expired certificates as well as untrusted certificates yet some show as Remediated and some Unresolved.
Any ideas?

2

Check if they are on port 3389. We see a lot of these for RDP. The problem we have is I don’t know how to do an exception for just that port until we can convert RPD to use a valid cert from our CA

3

Thanks for the reply.
I can confirm every one of them are on 3389.
We have used GPO to create an RDP template which works.
Just that what R7 sees does not make any sense.

4

Make sure you get a good authenticated scan on the device as well.