Microsoft RDP with Yubikey (smart card) from MAC

Hi,

did you succeed?

I'm very interested on this topic and any update will be appreciated.

Regards.

Hi,

Are you asking this to the original poster?

In our case, if you have a server configured with Smart Card authentication that does not work, I'd ask you the same think I asked previously. That is to generate a session log and share it with us.

Best regards,

I'm trying to test RDM for Mac, as well, and trying to connect to our servers. Smart card Auth is required on our servers, but I'm not clear on how to configure RDM to support Yubikeys. I've gone into Settings > Security and checked "Require Yubikey authentication, but when I launch a session, I get a regular user account, password, domain login prompt; I do not get a PIN prompt which is typical. I could provide session logs, but that's sensitive information in my environment, and I'm concerned that the issue is more of a RDM configuration issue. I haven't found any configuration documentation for supporting Yubikey. Could you provide configuration documentation so that I know that I'm doing that part correctly? If so, then I would work to get session logs approved to share.

Hi robhartung,

Did you check the Local Resources -> Local Devices and Resources -> Smart cards checkbox in your entry settings?

Also, the Settings -> Security settings really have nothing to do with RDP sessions. Those are security settings for the application as a whole, in this case, this would require a Yubikey auth when unlocking the app.

Best regards,

Yes, "Smart cards" is checked for the RDP configuration. Thanks for the clarification regarding the Yubikey auth in Settings.

Historically, smart card support with FreeRDP on macOS has been inconsistent at best. You might simply be hitting a limitation. That being said, if we want to investigate further, we will definitely need a session log. Session logs should not contain any sensitive data, except maybe the IP and the masked username/domain on the first line, which you can easily remove from the log file. That being said, you can also send me the log directly by email: xfortin@devolutions.net

Best regards,

Hi robhartung,

As of the release of version 2023.2.8.1, we've added a hidden option to try to enable Smartcard logon. Could you try it and see how it goes? In the event that it still does not connect, could you provide a new session logs with the option turned on?

What data source type are you using? If it's not XML (we have an issue with XML data source), you can set the value of the hidden setting by right clicking the entry and selecting Edit -> Edit (Special Actions)... In the next window, select Custom AppleScript and in the script window, enter the following script:

set value of _connection of property "RDP.SmartcardLogonEnabled" to true
save _connection

You can then turn off the setting with the same script but with "false" instead of "true".

Best regards,

I've tested the new version and I'm not seeing any difference. I will send you screenshots and the session logs via email.

With regard to the data source type, I'm not sure what it you are referring to. Can you clarify?