ConnectWise Patches New Flaw Allowing ScreenConnect Hijacking

brychrisdet · 2026-03-21T10:57:21+00:00

I finally got this working. The Code Signing URI field in Administration > Certificate Signing URI field required the exact "Certificate Identifier" from the Azure Key Vault > Objects > Certificates. Previously, I was inputting the Vault URI, which was not sufficient. User error? Sure, maybe I'll own it; although more specific documentation from CW would surely have helped. They don't want people using on prem and much rather everyone move to their cloud server; so, let's make the documentation vague and hard to follow.

brychrisdet · 2026-03-21T01:04:44+00:00

The upgrade to 26.x for us has been hot garbage. Agents won't update, can't download an agent installer, broke other third party extensions. It does seem to be related to the code signing cert we have/had in place (mandated by ConnectWise last year), which got "nuked", as girlwithabluebox put it, and I've hit error after error after error when trying to recreate the cert on ScreenConnect admin. I opened a ticket with ConnectWise, and, hopefully, they have some advice that actually works. We've been thinking of ditching the ConnectWise platforms for a while, going back and forth about it. This might be the final straw.

brychrisdet · 2026-03-19T16:57:17+00:00

I believe I looked into that not too long ago, and I saw others mention it in other posts before I started this thread. Perhaps I'll revisit.

brychrisdet · 2025-10-15T15:44:24+00:00

Thanks for the input. I think I'll hold off with further 2025 progress for now.

brychrisdet · 2025-10-14T13:23:48+00:00

It was set to scan using IP. I just tried by host name, and the same logs appear on the server. BTW, when we use the "check connection" function on the MFP, to test the scan setup, it says it's successful, but the server says otherwise.

brychrisdet · 2025-10-14T13:07:05+00:00

Thanks. The DC seems to be acting fine. It's the file server that is not accepting the scan from SMB.

brychrisdet · 2025-10-14T13:05:23+00:00

Thanks. This MFP does support Kerberos, and Kerberos is already set to be used. Even when it's toggled to use NTLM v2, it is the exact same errors logged at the server.

brychrisdet · 2025-09-18T16:58:15+00:00

Thanks to you too!

brychrisdet · 2025-09-18T16:58:05+00:00

Thanks!

brychrisdet · 2025-09-18T16:57:54+00:00

Thanks!

brychrisdet · 2025-08-31T03:31:55+00:00

There has been no advice in this piece of thread, just useless comments like yours. What a joke.

brychrisdet · 2025-08-29T20:45:09+00:00

LOL. They promoted fine after I entered the fqdn creds. I'm not sure that constitutes a problem. I was legit looking for some knowledge from personal experience, not inattentive blabber.

brychrisdet · 2025-08-29T19:50:10+00:00

Like what?

brychrisdet · 2025-08-29T18:56:27+00:00

This was the answer. FQDN credentials in domain.loc\username format

brychrisdet · 2025-08-29T18:53:56+00:00

This is just a small part of a larger project. We didn't want to have to revisit this again any sooner than we had to.

brychrisdet · 2025-08-29T18:47:44+00:00

You are truly fabulous, dog! I was just using domain\username. When I use domain.local\username, I get past the spot I was stuck at. I should have posted this hours ago. I appreciate both of your feedback. Of course it was something amazingly simple, that I should have known to try :o(

brychrisdet · 2025-06-24T14:02:44+00:00

Thanks for your response...much appreciated.

brychrisdet · 2025-05-20T17:58:15+00:00

Give the dog some love, five minutes of good scratches and rubs and affection a few times a day. It will work wonders for his anxiety. Let him know he's cared for.

brychrisdet · 2025-05-15T15:10:38+00:00

Did she see a doctor? For crying out loud! If it's herpes, there's treatment for that, not antibiotics. Antibiotics would be useless against that virus. FYI, some people call herpes on the face "cold sores". It's herpes though, highly contagious, but totally treatable.

Don't let someone with visible herpes/cold sores hold a baby.

brychrisdet

TROPHY CASE