Feature Request

Currently, there seems to be no way to make apps complaint with WCAG standards for screen reader support. Consider the following: New-UDTextbox -Id 'HardWords' -Label 'Nougat Croissant Valet' The screenreader may read the label as " noujet Croi-sant val-it" , a known issue with screen readers. This is what Aria-Label would be used for in web development. A new property on all the elements such as - Aria-Label "noo-gah Krwah-sahn val-ay" would resolve this issue. A even better solution is a way to inject HTML tag attributes into any element in the same fashion as New-UDStyle for styling such as New-UDAttributes or a similar name.

Hi, when you have many entries that request a Jump Host to connect, RDM focus pointer always on the Jump Host on the navigation pane on the left. This is very annoying, especially when you have to scroll up/down through many entries. It should be better to stay on the selected entry because you can see the Jump Host on the right in the main part. Another annoying behavior is that when the login in the entry fails, for example because it doesn't exist anymore or it is not reachable or the password is wrong, RDM jump into the Jump Host and you have to re-search again to find the entry you need. Please try to improve this annoying behavior.

Hello, when is there a way to be able to integrate the new Microsoft LAPS to the RDM? The older Legacy-Version, which works very well in RDM, isnt no longer supoorted by Microsoft and our newer Systems / Domains only have the newly implemented native Windows LAPS, which we need to have in RDM. it would be very great if you can find a way for implementing asap.

LAPS support is imperative for me. Please let me know if this is on the roadmap (or available behind a paywall) as I don't see it as a credential type in the free version I'm testing. I'm new to this tool and am testing for out IT department since LAPS was implemented and broke all our current RDM tools (RDCMan, Royal TS, etc.).

Hello, I would like to make a small feature request, or I'm also open to suggestion if there already is a way. I'm aware of sealed entries, but they are slightly impractical to my purpose as they need to be re-sealed after use. We would need a "Sensitive entry" or something checkbox in any entry. Then we would need that checkbox logged into the syslog message when the entry is accessed/viewed/used. Meaning something similar as the sealed entries which log for example "Entry sealed - MessageType: Entry sealed" in the log. It would be enough if any access log of an entry included sensitive=yes parameter in the syslog message which could be filtered on the logging system. The purpose of this would be to trigger log alerts when specific breakglass accounts are used, but without the hassle of re-sealing them.

Small feature request: I cannot find a way to override credentials for SSH Gateway when connecting to an SSH host entry, and I assume there is no such way. Could you please add that at some point in the future?   SSH Gateway doesn’t seem to honor the “VPN/Tunnel/Gateway” credentials override configuration in the User-specific settings, and that would be quite important for us. Now it just asks for credentials even if I set all the overrides in the User-specific settings. The actual host credentials are overridden just fine, just the gateway ones not. This would be crucial for us to have, as we are using personal credentials also to the customer-specific SSH gateways. To clarify, I mean this SSH Gateway configuration in a host item. Basically we would use that to connect to a customer environment via one of the customer servers to only have SSH port open to one host, using the same personal credentials to log into the gateway host and to the actual target computer. [image]

Hi currently looks we only can sync whole nextbox info into RDM, is any way can set a filter (like ROLE/ TAG/SITE etc...) in Netbox sync?

This feature request is not limited to RDM but this seemed like the right place to post this. There are currently 32 different types of `credential` entries. For example; Dashlane, Keepass, Keeper, Lastpass et cetera Some make a lot of sense to have special integration for. It helps people getting started without having to write their own implementation. What seems to be lacking is a basic "Custom credential" entry. On Windows, RDM does offer a credential type called "Custom". However, this forces the use of Powershell. In the Linux client this type of credential entry is not offered, despite Powershell being available for Linux. While enabling this type of entry on Linux (requiring pwsh) technically would make anything possible (you could spawn any other process from pwsh) it would still not be ideal. Powershell is incredibly slow to start, even without any profile. In the time it takes pwsh to just start and exit, without any profile, I can launch bash , which additionally calls my password manager to list all available passwords 100 times. It would be hugely annoying to have to constantly wait for a pwsh process to start. And I don't even have to launch bash in order to start my "pass" command. $ time pwsh -NoProfile -Command "exit" real 0m0.738s user 0m1.222s sys 0m0.156s $ time bash -c exit real 0m0.003s user 0m0.002s sys 0m0.001s $ time bash -c "pass ls >/dev/null" real 0m0.019s user 0m0.009s sys 0m0.014s $ time pwsh -NoProfile -Command "pass ls >/dev/null" real 0m0.672s user 0m1.081s sys 0m0.171s In DVLS this feature is missing entirely which would make it impossible to retrieve (add or update) credentials when just using DVLS. I propose to have a "Custom" credential entry which would launch any arbitrary process, with variable substitution and capture STDOUT. Use-case in general would be to allow anything to be run, to return credentials, without having to provide specific integration. For example: If using Linux Pass ( https://www.passwordstore.org/ ): CREDENTIAL_NAME="websites/devolutions/forum" pass show $CREDENTIAL_NAME | head -n1 pass show $CREDENTIAL_NAME 2>/dev/null | grep -e "^Username:" | cut -d' ' -f2 pass otp $CREDENTIAL_NAME Anything could be used to get credentials, secrets, otp et cetera. As long as you can write something for it, like a bash or powershell script, python code, or just a binary, you would be able to launch a process which returns anything. This custom credential entry would (should) have the following fields: Command to run, examples: /usr/bin/myvaultprogram get password $SESSION_ID$ c:\Users\Timmy\Myapps\myvaultprogram.exe get username MyUsernameForDevolutions Returns: (define what does the command returns) One of: Username, Password, OTP, Secret, URL, Domain, Email, UPN, Mnemonic Maybe even arbitrary, any other info field that may be useful (see below) Platform: Linux, Windows, DVLS RDM would pick the Linux or Windows command depending on platform This allows us to store two different commands, useful in Teams with mixed usage DVLS option would mean to run it on the DVLS server (see below) A "Custom credential" entry could have 3 tabs; Windows, Linux and DVLS Each tab would have one or more rows, with each row representing the command to run and the thing it returns Instead of a command, you would also be able to select "use command for <OtherPlatform> so someone could write Windows scripts to run and DVLS scripts to run, but for Linux choose the option "Run the DVLS command on Linux systems" Selecting "DVLS" as the platform on which to run the command, would mean the DVLS is instructed to run the command. If someone wants to use this, they could either change the base image if using a container, to include their code (or use a bind mount) or if running DVLS on a Windows Server they could make sure their code is available there. The option to run a command in the DVLS environment would be a fantastic addition because then clients do not have to have any local code at all. Which means if credentials are located somewhere else, clients would not require network access to that other location. A broader use would be to make RDM/DVLS run a command to get any type of info, for example a hostname Say the network team uses their own device and IPAM tool (could Netbox, phpipam, could be anything else) and we want to give more (support) people read-only access to switches. Having the ability to call an arbitrary command with variables, which could also return IP, Hostname, Documentation URL, whatever, from any external tool, would mean this networking team would not have to touch or use RDM/DVLS in any way. This would be good for adoption as it will not require everyone to completely switch their toolset. I am aware of the "Netbox synchroniser", but that is specific to Netbox, is only available on Windows clients and is limited in its scope. What I am proposing is much more middleware which would not be application-specific and means: "To get the IP for this device call: programX --get_ip --device_id=$SOME_UUID$" , where "$SOME_UUID$" could be a custom variable RDM session interface. Such a "Custom credential" entry would technically only have to exist once per repository and everything in that repository could link to it. Whatever program or script someone chooses to put in there could potentially make use of $SESSION_ID$ or any other available Variable. In case there are any concerns about adding programs to the DVLS server, instead of running a local binary you could also include the option to send an HTTP request which would return credential information. This should be kept simple and general. So just send GET to a provided URL, with basic token, custom request with variable substitution and potentially a template for the response, or option to specify json keys. It would be up to the customer to write their own simple webserver to act as proxy between DVLS and their own system. I understand that some of what I propose may invoke the question: "Why not use RDM for that, instead of external tools?" And the answer to that is that it would help transition, it would make more people open to the idea of using RDM in their team and allow them to make use of existing (credential) infrastructure and keep using their own tools. Also, think about what this could mean for the existing integrations and that it would open up the possibility for others to contribute code in a pluggable manner. You could write a small spec, and let people add a github url to extend the available (credential) integrations. This feature would be for "advanced" users, meaning you won't have to provide much in term of support, documentation or maintenance. Just run whichever process the user provided, the rest is up to the end-user.

I realize that the Network Scan tool is scanning for RDP port numbers but was wondering if we could add a selection for just ICMP (ping) request similar to Angry IP. This would be a great feature and would be great to have Angry IP somewhat "built-in" to RDM.

I've been attempting to use the network scan tool built into RDM to import servers into RDM. When attempting to use this tool for this use case i have noticed that machines on the network that have multiple IP addresses throw this tool off. When you add an entry from the scan tool, an entry is created with the IP filled in that was found during the scan and excludes it from being shown again in the scan results. This is great, however if the machine has multiple IPs it will only add that singular IP address and the rest will still be visible in the scan cluttering the results. I asked support if there was a way to get the scan to exclude any additional IP addresses by manually mapping the additional IPs after the fact to the entry using the alternate host configuration option but this doesn't work. My feature request would be to add the ability for IPs set in alternate host configuration in an entry to be excluded the same way as the IP field is from network scanning tool. devolutions ticket # 00085000

Hello, I’m writing to ask whether the integration of AWS Console sessions with Amazon’s internal authentication system ( AWS SSO ) is currently on the roadmap or already available. In our company, we need to manage multiple AWS tenants. To access them, we typically use AWS SSO, which allows a defined user to assume the corresponding IAM roles associated with each tenant. From what I’ve seen, the current RDM session only supports connecting to a specific tenant using an internal IAM user for that tenant. Will it be possible to manage access to multiple tenants via AWS SSO in the future? Thank you!

Hi there, I use Devolutions RDM personally and also in my company and I love the product, so let me first start by thanking you guys for this product. I've stumbled against the fact that you can't search using the Equivalent URLs field when you have an object of the type of "Webstie", which is kind of weird in my opinion. My use case is that I have devices that are available through an FQDN defined as the main Web URL of the record. But sometimes I need to seach for a specific device by IP and for that specific use-case I wanted to use the Equivalent URL field (to save the URL that contains the IP address of the device + port). I've tried the normal search bar and also looked into the advance search to try to find objects with only conatining the IP within the Equivalent URL field, but both of these don't give me the ability to search for the device using the IP address. The most convenient is to be able to define the equivalent URL and being able to search directly through the search bar for the IP, but advanced search is also fine for me. As a workaround I have the IPs now defined in the Equivalent URLs and also the description field because the description of each website object is searchable. I'm using RDM 2025.3.32.0 at the company and personally I use the latest version on Linux 2026.1.1.1

The ability to export complete vaults, including OTP secrets, would be extremely helpful. This feature is essential, especially when exporting customer vaults, for example, to hand them over to the customer. The export itself doesn't necessarily have to be done via the RDM client; using PowerShell would suffice, in my opinion.

Hello Devolutions Support, I would like to request an enhancement regarding the CyberArk integration in Remote Desktop Manager. Example : - Connection type: RDP entry - Entry settings: Advanced -> CyberArk - “Connect on double click” = Yes - “Preferred component” = PSM-RDP [image] Issue If the CyberArk Dashboard (in RDM) is not connected/logged in, double-clicking the RDP entry triggers a generic Microsoft RDP error message (e.g., “Remote Desktop can’t connect…” / “Remote access to the server is not enabled…”). This message is misleading because the real cause is that RDM is not authenticated/connected to CyberArk, so it cannot properly initiate the PSM-RDP flow. [image] Steps to reproduce 1) Ensure the CyberArk Dashboard in RDM is disconnected (not logged in). 2) On an RDP entry, set Advanced -> CyberArk: - Connect on double click = Yes - Preferred component = PSM-RDP 3) Double-click the entry. Actual result - RDM shows a generic RDP connectivity error (Windows/RDP), which suggests network/RDP configuration issues. Expected result - RDM should detect that the CyberArk Dashboard is not connected and display a clear message such as: “You are not connected to the CyberArk Dashboard. Please connect/login to CyberArk before starting this session.” Attachments - I attached screenshots showing the entry configuration and the misleading error message. Environment - RDM version: [2026.1.14.0 and 2026.1.19.0] - CyberArk integration/plugin version : PVWA 14.2 - CyberArk component: PSM-RDP but same issue with Web connector Could you please confirm if this behavior is expected today, and if an improvement like the above could be considered in a future release? Thank you, Brice Boyer

Hi, Can you add 256 colors in terminal syntax highlight and support terminal background transparency setting?

Hello Team, Padding for the Terminal is needed. Like in Putty: [image] [image] [image]

CLIENT REQUEST Hello, The client requested that, since with "SQL Server Management Studio" entry using "Integrated Security" with this entry type, it's possible to use the "Run as a different user", would it be possible to make it possible with the "Microsoft SQL Server" entry type. Best regards,

Entry SIM card in section Information. Provider: Customer number: Contract: Sim Type: standard, esim etc. SIM Card number SIM Pin ICCID PUK Code: PUK Code2: Name: APN: APN Username APN Password

When pasting from clipboard, RMB or win+V, doesn't matter, sometimes text surrounded with extra symbol. I know that an old problem, not related only with RDM and could be fixed directly on host. But maybe you can fix it globally. ^[[200~ * ~

Hi Would it be possible to extend the functionality when using a fixed terminal size on a SSH connection. So that you have a option to not show lines outside the fixed size ? I can "simulate" it by setting "Max scrollback lines" to 0, but i would like the be able to scrollback. But just not have our apllication "jump around" visually. I have attached 2 video showing what i mean. For both cases i have this configured for the display on the SSH host [image] For RDM-fixed-size-ssh.mp4 i "Max scrollback lines" set to 2000 For RDM-fixed-size-ssh-without-scrollback.mp4 i "Max scrollback lines" set to 0 I would love if when using fixed size i had a option to have the display just stay in the topleft or have it dynamically change the fontsize like putty does it when configured for it. I have recorded putty-fixed-size.mp4 to show what i mean for how putty does it. Using putty inside RDM it works, but i would like to move to use the native SSH client instead.

Hello, would be nice if there would a box to tick so that certificate errors could be ignored like it is with normal web sites. Thanks in advance cu F. :-)

Hi Can you please add the option to Open with parameters -> select credentials, to select credentials from other vaults? Thanks and best regards Patrick

Hi, is possible to implement credentials from "Linked (external vault)" to use with batch edit -> user-specific-settings -> select "Linked (external vault)" open with parameters -> select credentials -> select "Linked (external vault)" Regards Andreas

We recently transitioned from Delinea Secret Server on-premise to their hosted platform. Prior to this change, initial daily login prompted 2FA and once authenticated all saved connections worked with our saved privileged account. Following the transition, login is required initially using domain credentials for SSO followed by 2FA. This also occurs any time RDM is closed and reopened or after idle time durations through the day. After working with support and providing logs hey explained that the current experience is the expected behavior due to the SSO token not being held for extended periods of time. I feel a workflow or option similar to OAuth would be beneficial for our users and others that are also using Delinea platform. Are there any plans to add this workflow or a roadmap?

Hi, have done a bit of searching on this and it appears some versions of RDM allow for a Width/Height offset. I am unable to find this setting in 2026.1.19.0. Has it been deprecated? Looking for the possibility of creating a "margin/border" within the work area for RDP sessions. Illustrated in photo below. The custom resolution works fine for this on the main productivity "office" machine. When using RDM on laptops in the field, it gets a bit tricky. Ideally a -20 or 40px width/height offset would be fantastic. Thank you! [image] [image]