Marco Hofmann

Hi Luc,

> If your passkey is on a YubiKey for example, this should currently work.

We have our personal passkeys on YubiKey, but that is not opur use-case.

> What we’re working on is getting Devolutions provided passkeys to work with RDMs embedded browser.

This is what we are looking for.

> If you currently have issues with externally stored passkeys and the embedded browser, please let us know.

This i not something we are looking for.

We are an IT-MSP. For some customers, we have a Global Admin available to use, currently secured with TOTP, besides the GDAP access, to administrate the customers tenant.

We want to replace TOTP for this shared Global Admin, with a Passkey stored in DVLS, to be used in an embedded WebSession in RDM.

Hi, we wanted to emphasize our support for this feature request.

As far as I know, Microsoft will enforce phishing resistant authentication for all its 365 admin portals.

Our sysadmins work 100% in RDM, and we don’t use the browser extension.

Therefore, we need RDM to be able to handle Passkeys in the WebSessions with the embedded Edge.

The documentation suggests that this is something not possible today, or I couldn’t find it.

Thank you very much for listening!

Reference: 00124893: RDM PassKey support

We have the same issue since RDM 2026.2.18.0.

RDM is published as a Citrix published application from Windows Server 2025 and Citrix VDA Version 2607 LTSR.

Hi! Is PassKeys still being worked on for RDM natively in embedded WebSessions Edge tabs? We need this for any form of Microsoft 365 portal, with Microsoft enforcing phising resistant authentication and our sysadmins working 100% in RDM. Thank you.

@Andreas Has your issue been fixed?

I'll want to add to what @spstekno said and can confirm, that RDM 2026.2.x takes ages to start. Sorry to say that.

I just created a support ticket (00124616) where I reported the same and would to add that @Spagettifritz is not alone. Especially closing tabs freezes the app for several seconds.

Do other folks here, who run RDM on specifically on RDSH or Citrix, also have the feeling, that the GUI responsiveness of 2026.2.12 is significantly slower than RDM 2026.1.x?

We can also confirm, that the issue is solved.

Hi Team, we wanted to chime in here. We upgraded from RDM 2026.1.22.0 to 2026.2.11.0 yesterday. DVLS as backend on Azure SQL. We use RDM exclusively as a Citrix pub app from two Jump hosts for our IT-Admins, to provide remote support to our customers. Furthermore, we mostly use RDP, SSH and WebSessions.

Our CPU load increased significantly since yesterday, and we had to double Citrix VM resources, to make RDM run smooth again.

Should I create a support case to collect data from our side?

Hi @Daniel Albrecht ! I'm not sure I understand correctly: Is this a proposal or already possible? I would love to get rid of this rather sooner than later.

Has there ever been a change that @Daniel Albrecht requested to allow the export of an unencrypted data source? We are moving from MS SQL to DVSL with EntraID, so nothing inside the XML would need to be hidden, it would only be the FQDN of the DVSL server and the username variable. It would make the maintenance of the default.cfg so much easier.

I guess that wouldn't work in our case.

We are an IT-MSP: We have 60 users and 70 vaults. Each vault represents one customer.

I need specific key users, to be able to review the password security for customers and act accordingly.

So I guess I would like to enable users.

The other way would be, to enable vaults, but then I couldn't limit the user who can analyze the vault? I wouldn't like that.

Hi Team, we are trying to implement a better password culture at our company. Therefore, we would like to make use of the RDM Password analyzer feature.

As discussed in support ticket 00060260 there is no explicit permission available in RDM, to enable or disable the Password analyzer for non-admin users.

As of today, only full RDM administrators are able to make use of that feature.

Please add an option to RDM, to make the Password analyzer available to non-admin users as well.

For me it works like:

DatacenterName\FolderName\FolderName

We are making more and more use of the VMware synchronizer feature. I can solve most use-cases with the VM folder feature, but sometimes I just can't and I would really like to include or exclude certain VMs with a filter, for example via RegEx.

In our specific use case, I have to include only Citrix Machine Creation Service VMs, which all have a name pattern like: ^WS2019-002-\d\d|^WS2016-002-\d\d|^XA-AX-N-\d\d\d|^XA-AX-P-\d\d\d

But due to the limitations of Citrix MCS they all mix up in the same folder of the VMware structure so I would really like to filter them out some way.

Let me know what you think!

Is this the place to vote for the grey theme? We switched to 2021.2 two weeks ago, and miss it. Any way to get something back, that lies in between light and dark?

Hi David, thanks for your response.

I do understand, that you can't add a feature, that WebView2 doesn't offer.

But your link has nothing to do with my request.

As I see it, the link is about Certificate authentication.

What I'm asking for, is about ignoring untrusted HTTPS certificates, nothing about authentication. Although they are both certificate topics, this has nothing to do with each other.

Hi! Since it's now possible to make use of Microsoft Edge WebView2, we wanted to switch several Google Chrome sessions to the new feature.

We use that especially with all of the new Microsoft 365 Admin portals, for example: https://admin.microsoft.com/ & https://security.microsoft.com/ & https://endpoint.microsoft.com

The problem is, as an MSP, we have to login to plenty of different tennants. With the embedded Chrome incognito mode, this is possible. Each tab makes use of it's own credentials.

With Edge you stick to the session/credentials you launched the firs session with. If I now launch the 365 admin portal of a different tennant, i'm still logged on to the first tenant.

With embedded Google Chrome it's possible to set the switch "Private mode (Incognito)". I would like to see that with Edge WebView2 as well.

Thank you!

Hi! Since it's now possible to make use of Microsoft Edge WebView2, we wanted to switch several Google Chrome sessions to the new feature.

With public resources this works quite well, but with some internal HTTPS resources, which have certificates that are self-signed or from an internal CA, this doesn't work.

With embedded Google Chrome it's possible to set the switch "Ignore Certificate Errors". I would likt to see that with Edge WebView2 as well.

Thank you!

For now the Quick search will list the matching name for the Vault, the opened tab pages, the entries from the current vault and also the private vault.

That sounds like a great start!

It's not a multi vault search but this something I'm considering to add.

Where can I add my +1 for that feature? Of course, this should have an on/off switch.

For example, if you create a vault with your customer name, you will be able to press ctrl+spacebar and type few letter from your customer and get his vault listed.

That's how we work, and I do this already with the Vault drop-down list, which also supports this. Really locking forwards to that feature.

I will personally work on the dropdown size this week and I will post here the progress.

Great! But I'm much more hyped about the quick search, to be honest :-D That looks heavily inspired by MacOS spotlight and/or Windows PowerToys Run. ;-)

Yes, I tried the ... button, but I just can't get used to it.

woah! That quick search looks amazing! Can I search for any session across vaults with it? That would be even better, than my request. If it would work like the search bar bottom left with "All vaults" toggle active, that would be amazing! Is there a post here in the forum, where I could read about its request and/or development?

And last, thanks for the info. At least in our case it would be nice, if the list could be a bit larger and/or customizable.

Hi David,

my I open this request again?

We are now at 47 vaults and the list could again be longer / larger. It would make navigating lots of vaults a lot easier.

Hi, I would like to add my interest. We use RDM with a MS SQL data source on premises. We want to enhance our security by adding Azure MFA (via RADIUS) which we already use for anything else like Citrix, Office 365, Teams etc.

To be clear, I thin we wouldn't direct support of Azure MFA via SAML, which would of course be the very best way to do it, but RADIUS with a 30 second Timeout might be enough.

Using Google Authenticator OTP would break user experience.

@David:

VERSION 2020.2.12.0 (June 9th 2020) - Added support for time-based access per user

Is this the feature I've been asking for, and if yes, where is the documentation how to use it?