To check whether the KB3080079 update is installed, run the command:

1. Download the Windows6.1-KB3080079-x64.msu file from the Microsoft website and run it.
2. If the file fails to install and an error message appears, do the following:
   1. Extract the .CAB file using the command:
      expand -f:* "C:\Temp\Windows6.1-KB3080079-x64.msu" C:\Temp\KB3080079
   2. Install the .CAB file using the command:
      DISM.exe /Online/Add-Package/PackagePath:c:\Temp\KB3080079\Windows6.1-KB3080079-x64.cab

1. Create a .TXT file and add to it the following parameters:
   
   [NewRequest]
   Subject="CN=<device name>"
   Exportable=TRUE
   KeyAlgorithm=RSA
   KeyLength=2048
   KeyUsage=0x80
   MachineKeySet=TRUE
   Hashalgorithm=Sha256

2. Open the folder containing the created file using the command prompt as administrator and run the following command:
   certreq -new <file name>.txt certrequest.req
3. Add snap-in for the certificates:
   1. Open the Microsoft Management Console (MMC).
      Press +R on the keyboard, type mmc and click OK.
   2. In the Console window, click File → Add/Remove Snap-in.
   3. Select Certificates from the list of available snap-ins and click Add.
   4. Select Computer account and click Next.
   5. Select Local computer: (the computer this console is running on) and click Finish.

4. Export the certificate:
   1. In the console tree, expand Certificates and select Certificate Enrollment Requests.
   2. Right-click Certificate Enrollment Requests and select All Tasks → Export.
   3. Click Next.
   4. Select Yes, export the private key and click Next.
   5. Select Personal Information Exchange – PKCS #12 (.PFX) and select the check box Include all certificates in the certification path if possible. Click Next.
   6. Set a password for your certificate and click Next.
   7. Specify the name and the location for the certificate file. Click Next.
   8. Check the specified parameters and click Finish.
   9. Wait until the certificate is successfully exported and click OK.

   The certificate (private key) will be exported to the System32 folder in the PFX format.

5. Import the certificate:
   Run the commands below in PowerShell.
   1. Run the following command:
      
      certutil.exe -importPFX <private key name>.pfx noExport
   2. Enter the password that was set earlier to your certificate.

      Information about the certificate you are adding will be displayed:

      # Certificate "<Common Name of the imported certificate>" added to store
      # CertUtil: -importPFX command completed successfully
   3. Insert the certificate thumbprint into the tp variable:
      
      $tp = (ls Cert:\LocalMachine\my | WHERE {$_.Subject -match "CN="<Common Name of the imported certificate>" } | Select -First 1).Thumbprint

      The thumbprint ID will appear on the screen. It will be generated individually on each device.

   4. Allow using the certificate for the RDP service via the command:
      
      wmic /namespace:\\root\CIMV2\TerminalServices PATH Win32_TSGeneralSetting Set SSLCertificateSHA1Hash="$tp"

      The screen will display a message indicating that the RDP service certificate is updated:

      # Updating property(s) of '\\server\\root\\CIMV2\TerminalServices:Win32_TSGeneralSetting.TerminalName="RDP-Tcp" '
      # Property(s) update successful

1. Open Control Panel → System → Advanced system settings.
2. Click Remote → Remote Desktop.
3. Select Allow connections only from computers running Remote Desktop with Network Level Authentication (more secure).
4. Restart your computer for the updated system settings to take effect, and Kaspersky Thin Client start working with Windows 7.