Security Settings

Authentication methods

In order to access a remote Host you must authenticate on that Host, i.e. provide your access credentials in a security prompt window when you start a remote session.

Remote Utilities offers four authentication methods:

  • Single password security
  • Remote Utilities security
  • Windows security
  • Custom server security

Multiple authentication methods can be enabled on the same Host.

Important!

For security reasons, there are no technical, blank or default passwords. If no authentication method is enabled on a Host, you will NOT be able to connect to the Host. Make sure that you turn on at least one authentication method.


Single password security

To turn on single password authentication:

  1. In the Settings for Host go to Authentication. Single password - Authentication tab
  2. Select the Single password checkbox.
  3. Enter and confirm a new password and click OK. Single password - Set single password

To change the existing password:

  1. In the Settings for Host go to Authentication and click Change password. Single password - Authentication tab
  2. Click Yes in the warning message: Confirm changing single password
  3. Enter and confirm a new password and click OK: Set and confirm single password

To turn off single password authentication:

  1. In the Settings for Host go to Authentication.
  2. Deselect the Single password option and click OK.

Remote Utilities security

Use this authentication method if you want to create multiple user accounts with different permissions for each account.

To turn on RU Security and set permissions:

  1. In the Settings for Host go to Authentication. Authentication tab
  2. Select Remote Utilities Security and click Users and access control: Turn on RU Security
  3. Click Add: Add user
  4. Create a username and password. You can optionally enable Ask user permission option for this user. Click OK: Enter user details
  5. In the Rights box set connection mode permissions for this user and click OK: Set permissions
  6. To apply the settings click OK and close the Host settings window.

Windows security

With this authentication method you can use Windows accounts to authenticate on the remote Host.

To turn on Windows Security authentication and set permissions:

  1. In the Settings for Host go to Authentication. Authentication tab
  2. Select Windows Security and click Permissions: Windows Security
  3. Click Add.. Add user
  4. Select Windows accounts that you want to grant or deny access to this Host and click OK. Select account
  5. Set connection mode permissions for this account and click OK: Windows Security - set permissions
  6. To apply the settings click OK and close the Host settings window.

Custom server security

Custom server security allows you to use RU Server as your authentication server. Please refer to the Set up authentication server guide.


2-step verification

Two-step verification (also "two-factor authentication", or 2FA) adds another layer of security to make sure your Hosts are well protected against unauthorized access even if someone guessed your access credentials.

To turn on 2-step verification on a Host:

  1. In the Settings for Host go to 2-step verification and select Turn on 2-step verification. 2-factor authentication
  2. Use a mobile authenticator app to scan the QR code shown in window. We recommend using Google Authenticator app or Microsoft Authenticator app for smartphones: Scan QR code
  3. Enter the numeric code shown in your authenticator app and click OK: Enter code
  4. 2-factor authentication has been set up. Click OK to close the settings. Next time you connect to the Host from Viewer you will be asked for an OTP (one-time password) shown in your authenticator app.

Confirmation

In the Confirmation tab you can turn on Ask user permission:

Confirmation tab - Ask user permission

IP-filter

Use IP-filtering to restrict access to this Host from a specific IP address or IP address range:

IP filter
  • Allow everyone, except—add an IP address or range to the black list.
  • Deny everyone, except—add an IP address or range to the white list.
  • Edit—click to specify an IP address or a range.

Modes

Use the Modes tab to allow or deny connection modes on this Host for all users and all authentication methods. To fine tune access permissions for specific users use the respective authentication method settings.

Modes tab

Host identity

Remote Utilities has a certificate-based Host identity check mechanism. This mechanism works automatically and doesn't require any configuration on the user's part.

You can view and export the current Host certificate in the Host identity tab:

Host identity

You can re-issue a certificate manually if needed by clicking on Generate new.

If the Host certificate differs from the one stored by the Viewer, a warning message appears on the Viewer side:

Host identity warning in Viewer

If you believe that this is the same Host installation that you previously connected to (e.g. you re-installed the Host and the certificate was renewed), click Yes. This will update the certificate cache on the Viewer side. Otherwise choose No.


Related articles