Yubico Forum

Q: Can your devices be used to authenticate using Microsoft's RemoteDesktop?

A: We do not have anything ready today, but provide the basic server code for anyone who wants to develop their own servers, applications and services.

This potential use of the Yubikey is what first caught my attention. Our company has online hosted applications that our clients and their users access via Remote Desktop. We could probably sell several hundred Yubikeys to our clients, ensuring them increased security and control of their login and authentication security. The ability to use the Yubikey to connect / authenticate to a server via RDP is of significant interest to me. It would be nice too if the Yubikey could be configured, in our situation, to automatically initiate an RDP session to a specific or designated IP address... but that might be asking too much?

I hope others who are using Remote Desktop will chime in here. We certainly like to see support for it, but don't have the knowledge to help this right now.

Does Remote Desktop support RADIUS or any other similar protocol for performing the user authentication? There is radius server for test purposes available now.

Details on exactly what kind of interface or integration works needs to be done would be helpful. If anyone has the knowledge to look into this and write up a description, that would be great. We would certainly sponsor anyone doing this with a few yubikeys!

If some company wants to spend time looking into this, it may even be some business opportunity here, given that we at Yubico don't have resources to reach into this niche right now.

Thanks,
Simon

Hello,

I believe Rohos has managed to get it working. Check out their website http://www.rohos.com/remote-desk-login.htm

You need to modify the msgina.dll (or use a modified version), since this is the file that performs user authentication and is used by WinLogon
I'll try to gather some more information about msgina.dll and post it here.

Regards, Jeroen.

Just FYI AuthLite can do this.

Yeah, I'm running their demo, but for some reason it won't recognize my Yubikey..... I must be doing something wrong.... Would you happen to know what AuthLite cost? I cannot find it on their website.

Regards, Jeroen.

I wonder, are you getting stuck on the new Remote Desktop 6.1 style "pre authentication" (real name: Network Level Authentication). At the moment you need to turn that off and just use the old style connections where it shows the screen first and you see the logon interface.

I suggest open a support ticket or email to ask for help.


Well for now it's free, until version 1.0 is released. Then, it will be about $28 per user, unless you are an enterprise with lots of users, then there is a discount depending on the size.

Here is an integration guide: http://www.rohos.com/Rohos_Logon_Key_fo ... _Guide.pdf
Step-by-step guide on how to set up Windows remote desktop logon with YubiKey.

Also now we are working under Windows Active Directory logon by using any OTP token (like yubikey or with led) that will work without installing anything on the workstation.

_________________
Alex Silonosov
CEO at Rohos
http://rohos.com