Forum Discussion

Jochen81's avatar
Jochen81
Copper Contributor
Feb 21, 2024

RDS Farm with FIDO2 Key

Hello everyone, I'm trying to install an RDS farm with fido2 (Yubikey). I think I have created the conditions. The farm is onPrem (hybrid joined), the FIDO2 key is registered in Entra. The farm w...
RDP
RDS
Windows Server
ALAIN_CH69475's avatar
ALAIN_CH69475
Copper Contributor
Apr 24, 2024
HI Jochen81

can someone help you ?
i have the same problem ,
FIDO not works at all with RDP

i have the same infrastracture , Server RDS onPrem FIDOKey ok in ENTRA for Login windows with code Pin and Key

Br

Alain
1993Nik's avatar
1993Nik
Copper Contributor
May 13, 2024

ALAIN_CH69475as far as I know, the rds gateway is unable to support fido authentication.

If you just connect to the farm through the broker, that fido authentication should be fine.

 

fido is also only working with windows server 2022 and the client must be a current windows 10 or 11.

And in in the rdp client you need to select "WebAuthn (Windows Hello or Security Key)".

  • Jochen81's avatar
    Jochen81
    Copper Contributor
    May 21, 2024

    Hi 1993Nik 

     

    Yes, you are right, and that is my problem.
    The direct connection to the host works.
    But the connection to the gateway does not.
    The server is Windows Server 2022 21H2 and the client is Windows 11.

    I have overlooked something, but unfortunately I can't find it.

     

    • 1993Nik's avatar
      1993Nik
      Copper Contributor
      May 21, 2024

      Jochen81 as I mentioned, there are only two options to connect to your rds hosts with fido:

      1. connect through your rds broker to your session host
      2. connect directly to your session host

       

      as far as I know it is not possible to connect through a rds gateway server to a session host with fido. the gateway does not accept fido authentication.

       

      What is the purpose of your rds gateway? is the gateway published in the internet?

       

      It seems like you are also from germany, if you want we can have a quick call about your problem. Just send me a private message, then we can exchange contact details.

      • donjanzen's avatar
        donjanzen
        Copper Contributor
        Oct 15, 2024

        1993Nik 

         

        We have also set up FIDO authentication (webauthn). Direct connection to an RDS host works.
        When connecting via the broker, the web login also appears, but then the message in the screenshot appears.
        What could be the reason for this?

  • ALAIN_CH69475's avatar
    ALAIN_CH69475
    Copper Contributor
    May 14, 2024
    Hi Thank for you reply
    my server is 2019 windows , do you have a quick procédure for the Farm Broker with FIDO
    i know about webauthn to be selected on my RDP client
    Br

    Alain
    • 1993Nik's avatar
      1993Nik
      Copper Contributor
      May 16, 2024

      ALAIN_CH69475the broker and the rds session hast must be at least windows server 2022.

      you can perform an inplace upgrade, you should disable any antivirus software before the upgrade.

Resources