# Rcoky 10 Remote Desktop Cloud Images **URL:** \ **Category:** Rocky Linux Help & Support\ **Created:** [November 22, 2025, 2:16pm UTC](https://forums.rockylinux.org/t/rcoky-10-remote-desktop-cloud-images/19930 "2025-11-22T14:16:23Z")\ **Posts on this page:** 17\ **Page:** 1
**Author:** ![NolteG](https://sea2.discourse-cdn.com/flex020/user_avatar/forums.rockylinux.org/nolteg/32/4062_2.png) [@NolteG](https://forums.rockylinux.org/u/NolteG)\ **Post date:** [November 22, 2025, 2:16pm UTC](https://forums.rockylinux.org/t/rcoky-10-remote-desktop-cloud-images/19930/1 "2025-11-22T14:16:23Z")
I have a problem where I am unable to enable the remote login on cloud images after i install a gui. The Remote Login tab in Settings \> Desmote Desktop is locked and the unlock prompts for a password for a user named ADMINISTRATOR but this isn’t an account I created. I think this is related to the keyring and the first user not being the user I add to the keyring. trying to enable remote redktop with gsettings also gets ignored. Does anyone know how to fix this? ---
**Author:** ![0x0](https://avatars.discourse-cdn.com/v4/letter/0/6bbea6/32.png) [@0x0](https://forums.rockylinux.org/u/0x0)\ **Post date:** [November 22, 2025, 4:23pm UTC](https://forums.rockylinux.org/t/rcoky-10-remote-desktop-cloud-images/19930/2 "2025-11-22T16:23:45Z")
> [@NolteG](#): > > Remote Login tab in Settings \> Desmote Desktop is locked and the unlock prompts for a password for a user named ADMINISTRATOR but this isn’t an account I created. If you have only one privilieged user on that system and root account is locked, could you try first created “user” password on that ADMIN account ? ---
**Author:** ![NolteG](https://sea2.discourse-cdn.com/flex020/user_avatar/forums.rockylinux.org/nolteg/32/4062_2.png) [@NolteG](https://forums.rockylinux.org/u/NolteG)\ **Post date:** [November 22, 2025, 5:28pm UTC](https://forums.rockylinux.org/t/rcoky-10-remote-desktop-cloud-images/19930/3 "2025-11-22T17:28:37Z")
That was the first thing I tried and it didn’t work. ---
**Author:** ![0x0](https://avatars.discourse-cdn.com/v4/letter/0/6bbea6/32.png) [@0x0](https://forums.rockylinux.org/u/0x0)\ **Post date:** [November 22, 2025, 6:00pm UTC](https://forums.rockylinux.org/t/rcoky-10-remote-desktop-cloud-images/19930/4 "2025-11-22T18:00:08Z")
Check out this GRD guide: [Setup Headless Multi-User Sessions on Wayland with GNOME Remote Desktop in GNOME 48 - James North's Site](https://jamesnorth.net/post/grd-46-setup) If I recall correctly, installing freerdp on server and then setup connection to server with Remmina worked on R10 Server/Workstation. ---
**Author:** ![NolteG](https://sea2.discourse-cdn.com/flex020/user_avatar/forums.rockylinux.org/nolteg/32/4062_2.png) [@NolteG](https://forums.rockylinux.org/u/NolteG)\ **Post date:** [November 22, 2025, 10:18pm UTC](https://forums.rockylinux.org/t/rcoky-10-remote-desktop-cloud-images/19930/5 "2025-11-22T22:18:58Z")
Thank you for the advice. I will give this a try. ---
**Author:** ![NolteG](https://sea2.discourse-cdn.com/flex020/user_avatar/forums.rockylinux.org/nolteg/32/4062_2.png) [@NolteG](https://forums.rockylinux.org/u/NolteG)\ **Post date:** [November 23, 2025, 10:18am UTC](https://forums.rockylinux.org/t/rcoky-10-remote-desktop-cloud-images/19930/6 "2025-11-23T10:18:50Z")
That article helped, unfortunately the certficates that are generated are alsways invalid if I use the following command or it’s equivelent using openssl. sudo -u gnome-remote-desktop winpr-makecert -silent -rdp -n 170.XXX.XXX.XXX -path ~gnome-remote-desktop rdp-tls gregory@rocky10-cloud:~$ grdctl rdp set-tls-cert /var/lib/gnome-remote-desktop/rdp-tls.crt [10:10:53:855] [5104:000013f0] [ERROR][com.freerdp.crypto] - [x509\_utils\_from\_pem]: BIO\_new failed for certificate RDP server certificate is invalid. gregory@rocky10-cloud:~$ grdctl rdp set-tls-key /var/lib/gnome-remote-desktop/rdp-tls.key [10:11:07:381] [5115:000013fb] [ERROR][com.freerdp.crypto] - [x509\_utils\_from\_pem]: BIO\_new failed for certificate RDP server certificate is invalid. gregory@rocky10-cloud:~$ grdctl rdp enable [10:11:36:517] [5122:00001402] [ERROR][com.freerdp.crypto] - [x509\_utils\_from\_pem]: BIO\_new failed for certificate RDP server certificate is invalid. gregory@rocky10-cloud:~$ grdctl status [10:13:04:676] [5140:00001414] [ERROR][com.freerdp.crypto] - [x509\_utils\_from\_pem]: BIO\_new failed for certificate RDP server certificate is invalid. Overall: Unit status: active RDP: Status: enabled Port: 3389 TLS certificate: /var/lib/gnome-remote-desktop/rdp-tls.crt TLS fingerprint: (null) TLS key: /var/lib/gnome-remote-desktop/rdp-tls.key View-only: no Negotiate port: yes Username: (hidden) Password: (hidden) gregory@rocky10-cloud:~$ ---
**Author:** ![0x0](https://avatars.discourse-cdn.com/v4/letter/0/6bbea6/32.png) [@0x0](https://forums.rockylinux.org/u/0x0)\ **Post date:** [November 23, 2025, 2:16pm UTC](https://forums.rockylinux.org/t/rcoky-10-remote-desktop-cloud-images/19930/7 "2025-11-23T14:16:22Z")
What is SELinux set to ? ---
**Author:** ![NolteG](https://sea2.discourse-cdn.com/flex020/user_avatar/forums.rockylinux.org/nolteg/32/4062_2.png) [@NolteG](https://forums.rockylinux.org/u/NolteG)\ **Post date:** [November 23, 2025, 4:39pm UTC](https://forums.rockylinux.org/t/rcoky-10-remote-desktop-cloud-images/19930/8 "2025-11-23T16:39:17Z")
It’s set to permissive. I tried setting it to 0 and then tried with permissive and the same results. ---
**Author:** ![0x0](https://avatars.discourse-cdn.com/v4/letter/0/6bbea6/32.png) [@0x0](https://forums.rockylinux.org/u/0x0)\ **Post date:** [November 23, 2025, 5:54pm UTC](https://forums.rockylinux.org/t/rcoky-10-remote-desktop-cloud-images/19930/9 "2025-11-23T17:54:09Z")
I would remove created GRD certs and try again: grdctl --system status --show-credentials Init TPM credentials failed because Failed to initialize transmission interface context: tcti:IO failure, using GKeyFile as fallback. Overall: Unit status: active RDP: Status: enabled Port: 3389 TLS certificate: /var/lib/gnome-remote-desktop/.local/share/gnome-remote-desktop/certificates/rdp-tls.crt TLS fingerprint: #REDACTED TLS key: /var/lib/gnome-remote-desktop/.local/share/gnome-remote-desktop/certificates/rdp-tls.key Username: Password: ---
**Author:** ![0x0](https://avatars.discourse-cdn.com/v4/letter/0/6bbea6/32.png) [@0x0](https://forums.rockylinux.org/u/0x0)\ **Post date:** [November 23, 2025, 6:53pm UTC](https://forums.rockylinux.org/t/rcoky-10-remote-desktop-cloud-images/19930/10 "2025-11-23T18:53:29Z")
> [@NolteG](#): > > gregory@rocky10-cloud:~$ grdctl rdp set-tls-cert /var/lib/gnome-remote-desktop/rdp-tls.crt > [10:10:53:855] [5104:000013f0] [ERROR][com.freerdp.crypto] - [x509\_utils\_from\_pem]: BIO\_new failed for certificate > RDP server certificate is invalid. **`x509_utils_from_pem`, `BIO_new failed`** and **`RDP server certificate is invalid.`** It seems GRD cert/key must be in PEM format. ---
**Author:** ![iwalker](https://sea2.discourse-cdn.com/flex020/user_avatar/forums.rockylinux.org/iwalker/32/2599_2.png) [@iwalker](https://forums.rockylinux.org/u/iwalker)\ **Post date:** [November 24, 2025, 7:40am UTC](https://forums.rockylinux.org/t/rcoky-10-remote-desktop-cloud-images/19930/11 "2025-11-24T07:40:04Z")
Either that or it is generated in an old format that crypto-policies don’t allow due to it being less secure. ---
**Author:** ![NolteG](https://sea2.discourse-cdn.com/flex020/user_avatar/forums.rockylinux.org/nolteg/32/4062_2.png) [@NolteG](https://forums.rockylinux.org/u/NolteG)\ **Post date:** [November 24, 2025, 11:36am UTC](https://forums.rockylinux.org/t/rcoky-10-remote-desktop-cloud-images/19930/12 "2025-11-24T11:36:34Z")
Any ideas how to fix the crypto policies and generate the correct certificate? ---
**Author:** ![iwalker](https://sea2.discourse-cdn.com/flex020/user_avatar/forums.rockylinux.org/iwalker/32/2599_2.png) [@iwalker](https://forums.rockylinux.org/u/iwalker)\ **Post date:** [November 24, 2025, 11:47am UTC](https://forums.rockylinux.org/t/rcoky-10-remote-desktop-cloud-images/19930/13 "2025-11-24T11:47:44Z")
Take a look at the winpr command you used for generating the certificates and find out what the default generation format/cipher is. That will tell us if it’s supported or not. If it has generated old/legacy certificates with poor ciphers, etc, then much higher ones need to be generated rather then worsening the crypto policies. You don’t fix the crypto-policies, you fix the certificate you generated. ---
**Author:** ![NolteG](https://sea2.discourse-cdn.com/flex020/user_avatar/forums.rockylinux.org/nolteg/32/4062_2.png) [@NolteG](https://forums.rockylinux.org/u/NolteG)\ **Post date:** [November 24, 2025, 3:07pm UTC](https://forums.rockylinux.org/t/rcoky-10-remote-desktop-cloud-images/19930/14 "2025-11-24T15:07:50Z")
I got the RDP to work by doing the following: mkdir -p ~/.config/remote-desktop openssl req -newkey rsa:2048 -nodes -keyout ~/.config/remote-desktop/key.pem -x509 -days 365 -out ~/.config/remote-desktop/cert.pem -subj “/CN=gnome-remote-desktop” grdctl rdp set-tls-cert ~/.config/remote-desktop/cert.pem grdctl rdp set-tls-key ~/.config/remote-desktop/key.pem grdctl rdp disable-view-only grdctl rdp enable sudo dnf -y install gnome-remote-desktop freerdp gdm grdctl rdp enable-remote-control sudo systemctl --now enable gnome-remote-desktop.service sudo firewall-cmd --permanent --add-service=rdp sudo firewall-cmd --reload Reboot and the connection works. ---
**Author:** ![0x0](https://avatars.discourse-cdn.com/v4/letter/0/6bbea6/32.png) [@0x0](https://forums.rockylinux.org/u/0x0)\ **Post date:** [November 24, 2025, 3:16pm UTC](https://forums.rockylinux.org/t/rcoky-10-remote-desktop-cloud-images/19930/15 "2025-11-24T15:16:38Z")
Glad you managed to fix it and thanks for sharing your process with openssl ! BR ---
**Author:** ![NolteG](https://sea2.discourse-cdn.com/flex020/user_avatar/forums.rockylinux.org/nolteg/32/4062_2.png) [@NolteG](https://forums.rockylinux.org/u/NolteG)\ **Post date:** [November 24, 2025, 3:31pm UTC](https://forums.rockylinux.org/t/rcoky-10-remote-desktop-cloud-images/19930/16 "2025-11-24T15:31:23Z")
Thank you for all the support! ---
**Author:** ![system](https://us1.discourse-cdn.com/flex020/uploads/rockylinux/original/1X/91b7219eec10e30013422e4df76c1d898711a5d5.svg) [@system](https://forums.rockylinux.org/u/system)\ **Post date:** [January 23, 2026, 3:31pm UTC](https://forums.rockylinux.org/t/rcoky-10-remote-desktop-cloud-images/19930/17 "2026-01-23T15:31:48Z")
Closed on January 23, 2026, 3:31pm UTC This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.