Windows XP SP3 connect to Remote Desktop 2012 R2 - certificate error

Hi all!
I have Terminal Farm: 3 servers - Remote desktop session host 2012 R2(RDSH) and 2 servers - Remote Desktop Connection Broker(RDCB)
I try connect to this farm from Windows XP SP3 with KB WindowsXP-KB969084
and I get error
‘The connection has been terminated because an unexpected server authentication certificate was received from the remote computer.’
All certificate from connection broker I have already installed on XP machine.
I try to connect to one of the three servers RDSH directly, and connect successfull.
I try to connect to one of the two servers RDCB directly, and get same error
'The connection has been terminated because an unexpected server authentication certificate was received from the remote computer.’
I try connect to this farm(or directly to RDSH) from Windows 7/8/8.1 and haven't issues, all work perfectly!
It is possible connect to Farm with balancing by RDCB from Windows XP?
RDP file here:
redirectclipboard:i:1
redirectprinters:i:1
redirectcomports:i:0
redirectsmartcards:i:1
devicestoredirect:s:*
drivestoredirect:s:*
redirectdrives:i:1
session bpp:i:32
prompt for credentials on client:i:1
server port:i:3389
allow font smoothing:i:1
promptcredentialonce:i:1
videoplaybackmode:i:1
audiocapturemode:i:1
gatewayusagemethod:i:2
gatewayprofileusagemethod:i:1
gatewaycredentialssource:i:0
full address:s:NL-S-RDCB01.CONTOSO.COM
gatewayhostname:s:rdgw.contoso.com
workspace id:s:NL-S-RDCB01.CONTOSO.COM
use redirection server name:i:1
loadbalanceinfo:s:tsv://MS Terminal Services Plugin.1.USA01
use multimon:i:1
alternate full address:s:NL-S-RDCB01.CONTOSO.COM

I received free trial certificate from COMODO with DNS name of RDCB farm.
I installed to RDCB SSO from console, and checked from Windows XP, and gave same error.
I have captured trafic by netmon while mstsc connecting to server with real certificate and with self signed certificate.
windows xp 172.19.7.232
server rdcb 172.19.5.110
(172.19.5.13 DC , 172.19.5.60 - proxy server )
arhive has 2 file cap, error and success.
http://1drv.ms/1qq5xk7
I don't understand what is wrong.
error session
success session
XP openssl test
error
C:\OpenSSL-Win32\bin>openssl s_client -state -connect nl-s-rdcb01n1.ao.nlmk:3389
WARNING: can't open config file: /usr/local/ssl/openssl.cnf
Loading 'screen' into random state - done
CONNECTED(0000074C)
SSL_connect:before/connect initialization
SSL_connect:SSLv2/v3 write client hello A
SSL_connect:SSLv3 read server hello A
depth=1 C = US, O = "Thawte, Inc.", CN = Thawte SSL CA
verify error:num=20:unable to get local issuer certificate
verify return:0
SSL_connect:SSLv3 read server certificate A
SSL_connect:SSLv3 read server key exchange A
SSL_connect:SSLv3 read server done A
SSL_connect:SSLv3 write client key exchange A
SSL_connect:SSLv3 write change cipher spec A
SSL_connect:SSLv3 write finished A
SSL_connect:SSLv3 flush data
SSL_connect:SSLv3 read finished A
Certificate chain
0 s:/C=RU/ST=RUSSIAN FEDERATION/L=Lipetsk/O=JSC NLMK/OU=IT Department/CN=*.nlmk.ru
i:/C=US/O=Thawte, Inc./CN=Thawte SSL CA
1 s:/C=US/O=Thawte, Inc./CN=Thawte SSL CA
i:/C=US/O=thawte, Inc./OU=Certification Services Division/OU=(c) 2006 thawte, Inc. - For authorized use only/CN=thawt
e Primary Root CA
Server certificate
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
subject=/C=RU/ST=RUSSIAN FEDERATION/L=Lipetsk/O=JSC NLMK/OU=IT Department/CN=*.nlmk.ru
issuer=/C=US/O=Thawte, Inc./CN=Thawte SSL CA
No client certificate CA names sent
SSL handshake has read 2870 bytes and written 489 bytes
New, TLSv1/SSLv3, Cipher is ECDHE-RSA-AES256-SHA384
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
SSL-Session:
Protocol : TLSv1.2
Cipher : ECDHE-RSA-AES256-SHA384
Session-ID: CF39000092092535BFAC5569F795FE1EB5F728A51709A1AC4EDE46C94DB79973
Session-ID-ctx:
Master-Key: 94F9E13C9413CBD4D1035DE764E80998BA488B57286812653268B4667DB2B4282FF077C7287A178C58BDF58AE1F89845
Key-Arg : None
PSK identity: None
PSK identity hint: None
SRP username: None
Start Time: 1416399131
Timeout : 300 (sec)
Verify return code: 20 (unable to get local issuer certificate)
sucess connect
C:\OpenSSL-Win32\bin>openssl s_client -state -connect nl-s-rdcb01n1.ao.nlmk:3389
WARNING: can't open config file: /usr/local/ssl/openssl.cnf
Loading 'screen' into random state - done
CONNECTED(0000074C)
SSL_connect:before/connect initialization
SSL_connect:SSLv2/v3 write client hello A
SSL_connect:SSLv3 read server hello A
depth=0 CN = nl-s-rdcb01n1.ao.nlmk
verify error:num=20:unable to get local issuer certificate
verify return:1
depth=0 CN = nl-s-rdcb01n1.ao.nlmk
verify error:num=21:unable to verify the first certificate
verify return:1
SSL_connect:SSLv3 read server certificate A
SSL_connect:SSLv3 read server key exchange A
SSL_connect:SSLv3 read server done A
SSL_connect:SSLv3 write client key exchange A
SSL_connect:SSLv3 write change cipher spec A
SSL_connect:SSLv3 write finished A
SSL_connect:SSLv3 flush data
SSL_connect:SSLv3 read finished A
Certificate chain
0 s:/CN=nl-s-rdcb01n1.ao.nlmk
i:/CN=nl-s-rdcb01n1.ao.nlmk
Server certificate
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
subject=/CN=nl-s-rdcb01n1.ao.nlmk
issuer=/CN=nl-s-rdcb01n1.ao.nlmk
No client certificate CA names sent
SSL handshake has read 1294 bytes and written 489 bytes
New, TLSv1/SSLv3, Cipher is ECDHE-RSA-AES256-SHA384
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
SSL-Session:
Protocol : TLSv1.2
Cipher : ECDHE-RSA-AES256-SHA384
Session-ID: C826000075668AD271F512CAE83D0E4E8F68F572E06626AB2FE582398766882D
Session-ID-ctx:
Master-Key: 7C2122CD86FE59A47DDFB8C2E9DC0537AF8FEAF47A18BD14C1F0812AEFEBF0EB0DCDBF78920FD6E672809EDC001F37EE
Key-Arg : None
PSK identity: None
PSK identity hint: None
SRP username: None
Start Time: 1416399014
Timeout : 300 (sec)
Verify return code: 21 (unable to verify the first certificate)

Similar Messages

Easy print not working on a 64 bit Windows 8.1 client with Remote Desktop connection version 8.1

Easy print is not working on a 64 bit Windows 8.1 client with Remote Desktop connection version 8.1 . Printers dont get redirected when you connect to the terminal server. The server we are connecting to has Windows 2008 server. On 32 bit Windows
7 and windows XP clients Easy print is working fine and printers get redirected in terminal server.

I am having the exact same problem. Windows 7 works fine, but 8.1 will not redirect printers. Others said to check local policy terminal services settings and my setting are all set as they should.
I think Windows 8.1 is not telling the terminal server what printers it has.

Connection to Remote Desktop is keep dropping

Hello everybody,
I use my laptop to remote in to my office work station. So, what I do is I go through a portal, which authenticates me to login to my office work station. When I start working on it, my remote connection drops for every 3 (approx) minutes.
But the actual laptop wont loose WIFI connection.
As an example, If I am listening to Pandora on my laptop and connects to my office work station through a portal, I just looses my connection to portal and automatically it reconnects in in first of its 20 retries. But laptop never stops playing Pandora
music, so It never looses WIFI connection, for some reason it just drops the remote connection.
Laptop: Dell Inspiron 13Z
I never had this problem with my other DELL latitude laptop which runs Windows 7. It never drops connection to remote desktop. I am not sure whether it is IE 11 bug or Windows 8.1 bug or this crappy DELL inspiron 13 Z bug.
What I did so far.
Changed the adapter settings to never save power. Changed settings to never sleeps, hibernate.
Any help is truly appreciated. With out that remote in functionality this laptop is literally a brick.
Thanks in advance,

Hi,
Have you setup the printer redirect in RDP?
If so, please uncheck it for testing this issue.
Meanwhile, if this issue happened while using wireless connections, try to connect to internet via cable to see what’s going on.
For further research, please upload the event log related to your RDP here.
Look forward to your response.
Kate Li
TechNet Community Support

If I can connect using remote desktop, does it mean I can connect using ftp?

Hello everyone, I have a question about connection using ftp.
Normally when I want to connect through ftp, everything is provided such as the ftp name and username and password by my hosting service. But now I don't have all these details about a local server in my company office because the server is actually not hosting
any sites. It's just a server where documents are stored.
But I need a way to connect to this server through my web application.
All I know are:
It is possible to connect through remote desktop to that server
There is an ip address for that server ( The server machine is in my company office)
I have a username and password that allows me to access network drive on that server (I can do this only by directly plugging the cat5 cable to my laptop)
When I configure my outlook email using microsoft exchange server, this is how my settings look like (example.net.au is just for example sake):
Server: server1.example.net.au
User name: [email protected]
Does the ftp detail exist for this server? How do I find out?

Thanks for the reply, Dave. The problem is the admin is not working here anymore. I wonder if there is a way i could figure that out. Out of curiosity how do ftp details created? If I want to set up FTP details from scratch, what do I need?
Thanks
you need to ask anyone from your company who is familiar in your IT infrastructure.
starting FTP from scratch, is okay but security is one thing.
you might end up an FTP server that is free or open to the internet, make sure you exactly know what you are doing.
even though there's a lot of guide on the internet, make sure also you understand what you are following in the guide.
Please check with someone who is quite familiar on this kind of things.
Every second counts..make use of it. Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.
IT Stuff Quick Bytes

Can't connect to windows 7 machine using microsoft remote desktop connection

I am unable to connect from my home network to the Windows 7 Professional machine at my office, using either Microsoft Remote Desktop Connection (2.1.1) for Mac or the open source CoRD program.
When connected to the office network (which is running MS Small Business Server 2011 Standard) both CoRD and MS RDC will connect to my desktop machine just fine! (My MacBook Pro runs Mountain Lion.)
From my home network, MS RDC will complain that it cannot find the Windows computer if I just use the Windows computer name. If I use the Windows machine's iPV4 address, it works on it for a minute and then tosses up this error message:
Using the IP address of the Windows machine, CoRD just grinds away for a minute or so and then times out.
I should add that using Internet Exporer under Parallels from home, I can get a little closer to success (after fidding around with ActiveX controls for a bit). I will get to the Windows login screen, but then I am told that my user password is wrong (which makes no sense at all)!
Okay, geniuses, have at it, and thanks in advance!!

The genius for Microsoft products an be found onthe Microsoft forums for their Mac software:
http://answers.microsoft.com/en-us/mac

Cannot connect VIA Remote Desktop to Windows 8.1 on a virtual machine

I have Windows 8.1 Enterprise running in a Hyper-V VM. For some reason I cannot connect to the VM using remote desktop. I am using a Microsoft account and remote desktop is enabled and my account has access. I am able to see the VM under
networks and access shared folders. The error I am getting is "Remote Desktop can't connect to the remote computer....".
Any ideas?

My account has access to RDP. The firewall rule to allow RDP was missing the permission for public networks. After this change the RDP client can find the computer and I can get in. Yay!
Thanks for the tip to check the firewall.

How do I simulate a right-click in Windows when connected with Remote Desktop 8.0 for Mac OS X?

When connecting to a remote Windows 7 OS from Mac OS X 10.8.5 with Microsoft Remote Desktop 8.0.24091, I'm not able to simulate a right-click with the Apple magic mouse.
On an older version Microsoft Remote Desktop Client version 2.1.1, I can hold down shift+ctl on the Mac and click the magic mouse to simulate a right-click in Windows. With this new version RDP 8.0, I can't find any way to simulate a right-click,
other than to select "Swap mouse buttons" under settings, and then every click is a right-click and then I'm no longer able to left-click (which is even worse). I've tried several key combinations and nothing seems to work. Am I missing
something simple here with the new RDP 8.0 application, or is the right-click simulation not (yet) functional?
Any help is greatly appreciated, thanks!

In order to make use of the right-click inside an open session you have three options:
Standard PC two button USB mouse
Apple Magic Mouse: To enable right-click, clickSystem Preferences in the dock, click Mouse, and then enable Secondary click.
Apple Magic Trackpad or MacBook Trackpad: To enable right-click, click System Preferences in the dock, click Mouse, and then enable Secondary click.
Extracted from "Remote desktop Client on Mac: FAQ"
http://technet.microsoft.com/en-us/library/dn473006.aspx

How to run windows mobile device center via remote desktop

I am developing mobile application in Microsoft Visual Studio 2008. I connect to my computer via remote desktop and my operating system is Windows Server 2012 R2. In order to test the application, I use mobile device emulator. I can run device emulator but
there occurs a problem when I try to cradle the device. I found out that this is because wmdc cannot run via remote desktop. Is there any way to run wmdc via remote desktop? I searched other topics but there is no solution to this.
Note : WMDC works when I directly use the computer not with remote desktop.

Hi Omer,
Please check this thread to see if there is one solution may solve your problem.
http://stackoverflow.com/questions/3490910/emulator-not-connecting-to-windows-mobile-device-center-after-emulator-soft-rese
https://social.technet.microsoft.com/Forums/en-US/3d1f1a9a-7ca8-4408-a501-cc67843ffa16/remote-desktop-does-not-connect-to-wmdc?forum=winserverTS
Best regards,
SHu Hu
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

Connecting to Remote Desktop using proxy and Remote Desktop Gateway?

I have setup a Remote Desktop Gateway server using Windows Server 2012 R2. I am using the Remote Desktop Gateway as an intermediary between to provide the remote desktop session over 443 since 3389 is blocked at many client locations.
However, I ran into a problem with a client who's using a web proxy.
Is is possible to configure Remote Desktop to connect via web proxy? If so, how? If not does any one have any suggestions on how to provide a Remote Desktop session via 443 over proxy for situations where you don't control the client's PC or network? Does RemoteApps
allow for access via web proxy when using RD Gateway?
The error message is below:
Your computer can't connect to the remote computer because the web proxy server requires authentication. To allow unauthenticated traffic to an RD Gateway server through your web proxy server, contact your network administrator.
Thanks for any help!

Hi,
My suggestion is to setup a RD Web Access server and make it available for your clients via proxy.
Remote Desktop Web Access (RD Web Access)
http://technet.microsoft.com/en-us/library/cc731923.aspx
Thanks.
Jeremy Wu
TechNet Community Support

Can't connect via remote desktop

Hello,
I'm using a late 2009 iMac running 10.6.8 and an AirPort Extreme 802.11n (4th Generation) running 7.5.2. Before I bought the AEBS, I was able to utilize Microsoft Remote Desktop Connection over a secure VPN network to access my work computer, which runs Windows 7 Professional.
After getting the AEBS, the VPN network still connects perfectly, but the RDC times out every time. If using an RDC client on my iPhone through the VPN over 3G, it still connects, nothing has changed with my work computer.
I'm typing in the work computer's IP address in the RDC client, and I have port forwarding for port 3389 set up in AirPort Utility to my iMac's static IP of 10.0.1.8.
I've read other message boards and have done everything I think I need to do. So what am I missing?
Thanks very much!

This is not a solution it is a nasty work around, all of your network traffic including internet access is going to go over your vpn, I don't know about you but just because I have a vpn session and remote desktop running, should not mean that I can't do personal stuff on my local system without it going through my employers servers. How do you get Remote Desktop to route via the VPN connection without turning on "Send all traffic over VPN connection"?

L7580 net printer driver disappearing in Win 7-62 after connecting with Remote Desktop Connection

I have an Officejet Pro L7580 connected via ethernet. I've been using the driver released from Jan 2010, and whenever I connect to my Windows 7 Ultimate 64 computer via Remote Desktop Connection, the printer drivers for both the printer and the fax disappear. I have to constantly run the "add a device" window to add the printers back again.
Why do they disappear like that?
Fishanderson

OK after updating the Server and clients I am still having this issue :(
and just today after no sound problems for 6 days the sound dropped out on a couple of RDP sessions, yet the sound on the client itself worked fine when tested (minimise the RDP session).
It took the RDP sessions to be restarted to restore the sound within the session.
I have found similar (old) thread regarding this problem:
https://social.technet.microsoft.com/Forums/windowsserver/en-US/958fd891-6f55-432b-8268-a326ac6b2b2e/sound-in-remote-desktop-session-stops-working
but no one has informed about if as solution was ever found.

Connecting to Remote Desktop Published Apps through RD Web Access not working

Hello,
I have configured an RD Gateway server. My scenario is like I have a windows 2012R2 server with all RD components (Gateway, web access, connection broker, session host) configured, since this is for a poc. Externally I can access rd web access portal (https://<servername.domain.com>/rdweb)
and can connect to the target server using "Connect to a remote pc" tab without any issue.
But I can't connect to any published app from "Remote App and Desktop". The error I recieve is "unable to connect to remote pc. please provide the fully-qualified name......."
At the same time I can see below errors in event logs related to connection broker:
Error 802:
RD Connection Broker failed to process the connection request for user domain\Administrator.
Error: Element not found.
Event 1306:
Remote Desktop Connection Broker Client failed to redirect the user domain\Administrator.
Error: NULL
Error 1296:
Remote Desktop Connection Broker Client failed while getting redirection packet from Connection Broker.
User : domain\Administrator
Error: Element not found.
Googling I could see some posts related to these issues, mentioning about to check the network connectivity between RDCB and the target server. I can defenitely say it is fine and already mentioned I can connect to the same server using "connect to
remote pc" tab.
Just FYI, I have this server as Amazon EC2 instance and the domain is configured as Amazon directory service. Can someone please help me at the earliest.. This is pretty urgent as my tasks are pending due to this issue..
Vysakh

Hi,
I have seen similar issues with Essential role installed, if it’s installed on the terminal server, please remove it.
Please also ensure involved machines are fully patched and keep port 443 of the TS server open.
When external users connect to the Web Access page, are they able to see remote apps? If not, please check whether user assignment setting is configured correctly for remote apps.
Are users able to open remote apps from internal network?
Here are some related links below for you:
RDWeb URL Access Works Successful but cannot open Apps Externally only Internally
https://social.technet.microsoft.com/Forums/en-US/144a0543-7a7c-4899-a674-0fd29dacab7a/rdweb-url-access-works-successful-but-cannot-open-apps-externally-only-internally?forum=winserverTS
RemoteApp Internet
https://social.technet.microsoft.com/Forums/windowsserver/en-US/70a819de-3338-4427-a1c3-e38ef99dd4b3/remoteapp-internet?forum=winserverTS
Configuring RD web access for public/external access
https://social.technet.microsoft.com/Forums/windowsserver/en-US/4396d3e9-2ac5-4d0b-baba-25471498a349/configuring-rd-web-access-for-publicexternal-access?forum=winserverTS
Best Regards,
Amy
Please remember to mark the replies as answers if they help and un-mark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

Remote Desktop 2012 R2 - Can't get RD Gateway with RD Web Access working through just 443

I have one server (2012 r2 fully updated) running all remote desktop roles (RD Web Access, RD Gateway, RD Licensing, RD Connection Broker, RD Session Host) and a separate domain controller.
I have RD Web Access published to cloud.mydomain.co.uk and accessing cloud.mydomain.co.uk/RDWeb works fine.
I want to setup the environment so only port 443 is open from the outside (thus the RD Gateway is installed) and the user can login through RDWeb and click on an app to launch it.
If I leave port 3389 open along with 443 and log on to RDWeb and click the remote app, this works fine.
If I close 3389 on the external firewall and only leave open 443, I can connect AND login to RDWeb but I cannot open the connection
This is expected:
http://i.imgur.com/9j2HRqm.png
Error:
http://i.imgur.com/2LH2c7T.png
Digging in the event viewer yielded: http://i.imgur.com/M9uHm0o.png
Which led me to test change the following setting in the resource access policy, as a test:
http://i.imgur.com/FlGObFr.png
This still didn't work but yielded a different error in event viewer:
http://i.imgur.com/LkaCfU4.png
Now I suspect I have misconfigured something somewhere in terms of the last event where it suggests it can't connect to resource "cloud.mydomain.co.uk" I would have expected this to be the internal FQDN of my session host. Or, I am hitting some sort
of odd problem because I have all the roles on the same box.
Any assistance greatly appreciated. I'm keen to find the root cause behind this as I need to document this solution so don't want to invalidate by messing around too much with settings.

Hi Gavin,
If you use RD Gateway then you only need to open TCP port 443 and UDP port 3391 and forward them to your RD Gateway server. You may have RD Web Access (uses TCP port 443) and RDG running on the same server.
When an external client launches a RemoteApp they will connect to your RD Gateway via TCP port 443 and UDP port 3391, then the RDG will connect to your internal RDSH servers using TCP port 3389 and UDP port 3389 on behalf of the external client. In
this way the RDG will act as a middleman between your external users and your internal RDSH servers.
In Server Manager - Remote Desktop Services - Overview - Tasks - Deployment Properties you need to specify the external FQDN of your RD Gateway server. If you have RDWeb and RDG on the same server this would be the same FQDN that your users will use
for RDWeb. For example, if your users use https://rds1.yourdomain.com/rdweb to connect to your RD Web Access site, then you would enter rds1.yourdomain.com for the RD Gateway name in deployment properties.
(Above one Quoted from this thread answered by TP).
In addition please see that you have properly configured RD Rap & RD Rap policy under RD Gateway manager and also properly configured certificates to match server name.
Hope it helps!
Thanks.
Dharmesh Solanki
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Remote Desktop disconnects immediately. Error 4005; Windows logon process has unexpectedly terminated.

Hi, I have always been able to remote into my pc (Win 8.1) using remote desktop. Just recently this stopped working. Either I get a blank screen for about 10 seconds and then it closes or the connection closes immediately. Every time this happens I get error
4005 in the event log; Windows logon process has unexpectedly terminated. It seems the remote desktop stopped working after the last set of Windows updates were applied. But no other web searches indicates anyone else has had this problem recently. I've also
read the Windows Server document or error 4005 which suggests my registry may be corrupt or a service may be stopped but this does not seem to apply to my situation. I'm stumped and without being able to remote into my pc from my office I can't do my job.
Any suggestions would be greatly appreciated.
UPDATE: After installing a new required Windows update and a bunch of optional Windows updates (that I had been ignoring), the problem has been fixed. I'm guessing which ever Windows update broke Remote Desktop was fixed in the latest update(s).

Hi arzoo1,
So you have checked the steps mentioned in the article below?
Event ID 4005 — Windows Logon Availability
You may take a try with Dism /online /cleanup-image /resorehealth command and then check if issue insists.
For Windows Update related, please consider system restore or startup repair.
Try to boot into clean boot and then remote again to check if issue insists.
Best regards
Michael Shao
TechNet Community Support

Connecting to remote desktop?

Hi there,
Is it possible to connect to a remote network from my home Mac?
Its a Windows XP network at my workplace that offers remote networking, I have the IP and account details but Im not sure how to go about it?
If it is possible, how do I do it?
Thanks

If you are trying to connect to a Windows XP machine on a remote network (or even a local network), use the Microsoft Remote Desktop utility which comes with Microsoft Office 2004 and its also available as a free download from microsoft.com

Windows XP SP3 connect to Remote Desktop 2012 R2 - certificate error

Similar Messages

Maybe you are looking for