Yubico Forum
https://forum.yubico.com/

Can your devices be used to authenticate using Microsoft's..
https://forum.yubico.com/viewtopic.php?f=3&t=39		 Page 1 of 1
Author:  hrag [ Wed May 14, 2008 7:17 pm ]
Post subject:  Can your devices be used to authenticate using Microsoft's..
Q: Can your devices be used to authenticate using Microsoft's RemoteDesktop?

A: We do not have anything ready today, but provide the basic server code for anyone who wants to develop their own servers, applications and services.
Author:  LyndyB [ Fri Jun 06, 2008 10:22 pm ]
Post subject:  Re: Can your devices be used to authenticate using Microsoft's..
This potential use of the Yubikey is what first caught my attention. Our company has online hosted applications that our clients and their users access via Remote Desktop. We could probably sell several hundred Yubikeys to our clients, ensuring them increased security and control of their login and authentication security. The ability to use the Yubikey to connect / authenticate to a server via RDP is of significant interest to me. It would be nice too if the Yubikey could be configured, in our situation, to automatically initiate an RDP session to a specific or designated IP address... but that might be asking too much?
Author:  Simon [ Mon Jun 09, 2008 8:38 am ]
Post subject:  Re: Can your devices be used to authenticate using Microsoft's..
I hope others who are using Remote Desktop will chime in here. We certainly like to see support for it, but don't have the knowledge to help this right now.

Does Remote Desktop support RADIUS or any other similar protocol for performing the user authentication? There is radius server for test purposes available now.

Details on exactly what kind of interface or integration works needs to be done would be helpful. If anyone has the knowledge to look into this and write up a description, that would be great. We would certainly sponsor anyone doing this with a few yubikeys!

If some company wants to spend time looking into this, it may even be some business opportunity here, given that we at Yubico don't have resources to reach into this niche right now.

Thanks,
Simon
Author:  JDiel [ Thu Nov 27, 2008 8:07 pm ]
Post subject:  Re: Can your devices be used to authenticate using Microsoft's..
Hello,

I believe Rohos has managed to get it working. Check out their website http://www.rohos.com/remote-desk-login.htm

You need to modify the msgina.dll (or use a modified version), since this is the file that performs user authentication and is used by WinLogon
I'll try to gather some more information about msgina.dll and post it here.

Regards, Jeroen.
Author:  ferrix [ Fri Nov 28, 2008 9:00 pm ]
Post subject:  Re: Can your devices be used to authenticate using Microsoft's..
Just FYI AuthLite can do this.
Author:  JDiel [ Sat Nov 29, 2008 10:06 am ]
Post subject:  Re: Can your devices be used to authenticate using Microsoft's..
ferrix wrote:
Just FYI AuthLite can do this.


Yeah, I'm running their demo, but for some reason it won't recognize my Yubikey..... I must be doing something wrong.... Would you happen to know what AuthLite cost? I cannot find it on their website.

Regards, Jeroen.
Author:  ferrix [ Sat Nov 29, 2008 9:01 pm ]
Post subject:  Re: Can your devices be used to authenticate using Microsoft's..
JDiel wrote:
for some reason it won't recognize my Yubikey..... I must be doing something wrong....

I wonder, are you getting stuck on the new Remote Desktop 6.1 style "pre authentication" (real name: Network Level Authentication). At the moment you need to turn that off and just use the old style connections where it shows the screen first and you see the logon interface.

I suggest open a support ticket or email to ask for help.

JDiel wrote:
Would you happen to know what AuthLite cost? I cannot find it on their website.

Well for now it's free, until version 1.0 is released. Then, it will be about $28 per user, unless you are an enterprise with lots of users, then there is a discount depending on the size.
Author:  Rohos [ Fri May 15, 2009 2:30 pm ]
Post subject:  Re: Can your devices be used to authenticate using Microsoft's..
JDiel wrote:
Hello,

I believe Rohos has managed to get it working. Check out their website http://www.rohos.com/remote-desk-login.htm

Regards, Jeroen.


Here is an integration guide: http://www.rohos.com/Rohos_Logon_Key_fo ... _Guide.pdf
Step-by-step guide on how to set up Windows remote desktop logon with YubiKey.

Also now we are working under Windows Active Directory logon by using any OTP token (like yubikey or with led) that will work without installing anything on the workstation.
Page 1 of 1 All times are UTC + 1 hour
Powered by phpBB® Forum Software © phpBB Group
https://www.phpbb.com/