diff -urN xrdp-0.9.1/xrdp/xrdp.ini xrdp-0.9.1.xrdp-ini/xrdp/xrdp.ini
--- xrdp-0.9.1/xrdp/xrdp.ini	2016-12-22 09:02:47.000000000 -0800
+++ xrdp-0.9.1.xrdp-ini/xrdp/xrdp.ini	2017-03-10 14:22:32.547073051 -0800
@@ -23,12 +23,12 @@
 crypt_level=high
 ; X.509 certificate and private key
 ; openssl req -x509 -newkey rsa:2048 -nodes -keyout key.pem -out cert.pem -days 365
-certificate=
-key_file=
+certificate=/etc/xrdp/cert.pem
+key_file=/etc/xrdp/key.pem
 ; specify whether SSLv3 should be disabled
-#disableSSLv3=true
+disableSSLv3=true
 ; set TLS cipher suites
-#tls_ciphers=HIGH
+tls_ciphers=PROFILE=SYSTEM
 
 ; Section name to use for automatic login if the client sends username
 ; and password. If empty, the domain name sent by the client is used.
@@ -147,16 +147,6 @@
 ; Session types
 ;
 
-[X11rdp]
-name=X11rdp
-lib=libxup.so
-username=ask
-password=ask
-ip=127.0.0.1
-port=-1
-xserverbpp=24
-code=10
-
 [Xorg]
 name=Xorg
 lib=libxup.so
@@ -176,49 +166,53 @@
 #xserverbpp=24
 #delay_ms=2000
 
-[console]
-name=console
-lib=libvnc.so
-ip=127.0.0.1
-port=5900
-username=na
+[X11rdp]
+name=X11rdp
+lib=libxup.so
+username=ask
 password=ask
+ip=127.0.0.1
+port=-1
+xserverbpp=24
+code=10
+
+#[console]
+#name=console
+#lib=libvnc.so
+#ip=127.0.0.1
+#port=5900
+#username=na
+#password=ask
 #delay_ms=2000
 
-[vnc-any]
-name=vnc-any
-lib=libvnc.so
-ip=ask
-port=ask5900
-username=na
-password=ask
+#[vnc-any]
+#name=vnc-any
+#lib=libvnc.so
+#ip=ask
+#port=ask5900
+#username=na
+#password=ask
 #pamusername=asksame
 #pampassword=asksame
 #pamsessionmng=127.0.0.1
 #delay_ms=2000
 
-[sesman-any]
-name=sesman-any
-lib=libvnc.so
-ip=ask
-port=-1
-username=ask
-password=ask
+#[sesman-any]
+#name=sesman-any
+#lib=libvnc.so
+#ip=ask
+#port=-1
+#username=ask
+#password=ask
 #delay_ms=2000
 
-[rdp-any]
-name=rdp-any
-lib=librdp.so
-ip=ask
-port=ask3389
-
-[neutrinordp-any]
-name=neutrinordp-any
-lib=libxrdpneutrinordp.so
-ip=ask
-port=ask3389
-username=ask
-password=ask
+#[neutrinordp-any]
+#name=neutrinordp-any
+#lib=libxrdpneutrinordp.so
+#ip=ask
+#port=ask3389
+#username=ask
+#password=ask
 
 ; You can override the common channel settings for each session type
 #channel.rdpdr=true