Cyberark - HTML5 PSM Connection does not work for RDP with PVWA Credential

Backlog

Cyberark - HTML5 PSM Connection does not work for RDP with PVWA Credential

avatar

When starting RDP session with PVWA credential (PSM Connection resolution mode), I can connect to a host using RDP PSM, but it fails with HTML5.

When connecting to the same host with the same account from a PVWA Dashboard session, both RDP PSM and HTML5 works as expected.

Using the debug log I can see that it retrieves similar HTML5 RDP parameters using both methods, but RDP-session (only) loops on "Connection to html5-psm.contoso.com" until it shows a generic could not connect RDP error.

All Comments (10)

avatar

Hi,

I see you opened this in a private and public thread. Do you have a preference?

I'll delete one or the other to avoid confusion.

Keep me posted.

Marc-Antoine Dubois

avatar

They're two different questions, but this could be public as well. I expected to include more details initially.

avatar

Hi,

If there's no sensitive information, I'll switch it to public once we resolve the issue.

I'm going to test it on our side to see if I can reproduce. For now, the HTML 5 GW on our end is in trouble. I've already informed our IT team, and they'll get back to me shortly.

What version of RDM are you on? Can you test on version 2025.1.41? I want to be sure we're working on the latest version, as there were a few fixes regarding the Cyberark integration recently.
Here's the direct download link: https://cdn.devolutions.net/download/Setup.RemoteDesktopManager.2025.1.41.0.exe

I'll keep you posted.

Marc-Antoine Dubois

avatar

Thanks. I'm using 2025.1.41 already.

avatar

One key difference I've noticed is that the working HTML5-connection from PVWA Dashboard session opens as a Web Session, while I'm limited to RDP with PVWA Credential. Considering RDP sessions prompts about using HTML5 (checkbox) I'd assume it should support both.

I tried a web session with a placeholder URL (mandatory), but get this error.

562fd0a4-6f1a-41da-a490-92c2c0356fd9.png

avatar

Hi fflaten,

Thank you for your patience.

I've reproduced what you reported and informed the developers.

I'll inform you once a fix is released.

Best regards,

Marc-Antoine Dubois

avatar

Hi fflaten,

The developers came back and told me this is expected behaviour. The RDP entry expects RDP traffic, not HTTP, which makes sense. For now, the only supported method is to use the Dashboard.

Sorry about the confusion.

I'll see if the developers have anything to add to this thread.

Best regards,

Marc-Antoine Dubois

avatar

Thanks for the update.

If that's the case then it should hide the HTML5 choice in prerequisite prompt when called from RDP session, and always override to no (normal PSM). Just so users cannot make the wrong decision.

As you can see in my other post there's scenarios where the user can't even make the decision, like a Web Connection Component where the host/URL is hardcoded in the component.

Will Web session support PVWA credential in the future, to work just like the Dashboard?

avatar

Hi,

An internal ticket has been opened. The developers will work on hiding the HTML5 choice when working from entries linked with a PVWA credential.

We will let you know in this thread once this is implemented!

Don't hesitate if you have questions.

Best regards,

Marc-Antoine Dubois

avatar

Thanks,

Any plans to support the Web Session with PVWA credential using "PSM Connection mode"? Should I create a feature request for it?