Apr 19th, 2024, 3:16pm
Welcome, Guest. Please Login or Register.
Pages: 1  Reply Reply  Notify of replies Notify of replies  Print Print
   Author  Topic: Yubikey USB redirecting over RDP  (Read 9251 times)
UuSsBb
FabulaTech Forum Newbie
*



View Profile         
Posts: 1
Yubikey USB redirecting over RDP
« on: Feb 13th, 2015, 1:03pm »
Quote Quote  Modify Modify

I'm testing USB for Remote Desktop and I want to use a YubiKey over RDP. It is a hardware authentication device and it identifies itself as an external keyboard. Unfortunately, the USB over RDP server component filters all mouse & keyboard devices. In the "ftusbrdsrv.log" I see the following:
 
[DEBUG]: CUsbServer OnDeviceInfoUpdated: ... Server: physical device arrived (id: 3, Name: Yubico Yubico Yubikey II, vid: 4176, pid: 16, bcd: 578
[DEBUG]: CUsbServer OnDeviceInfoUpdated:mouse//keyboard filtered
 
I want to use the Yubikey with challenge-response feature for a two-factor security with KeePass. Is there any chance to define a "mouse/keyboard" filter exception for the Yubikey device?
« Last Edit: Feb 13th, 2015, 1:24pm by UuSsBb » IP Logged
Sergey_Jarovski
FabulaTech Forum Moderator
FabulaTech Forum God
*****



View Profile   WWW         
Gender: male Posts: 556
Re: Yubikey USB redirecting over RDP
« Reply #1 on: Feb 18th, 2015, 7:04am »
Quote Quote  Modify Modify

Hi !
We sent you a email message.
Please reply.
IP Logged

Sergey Jarovski

FabulaTech
===================
http://www.fabulatech.com
LBK
FabulaTech Forum Newbie
*



View Profile         
Posts: 3
Re: Yubikey USB redirecting over RDP
« Reply #2 on: Jul 22nd, 2015, 7:49am »
Quote Quote  Modify Modify

We want to use a YubiKey from our IGEL UD3 (fw 5.06.101.01). We use FabulaTech 5.1 beta 5.
 
Other devices work, but the YubiKey doesn't show up.
 
We've tried legacy mode for rdp both on and off.
IP Logged
Sergey_Jarovski
FabulaTech Forum Moderator
FabulaTech Forum God
*****



View Profile   WWW         
Gender: male Posts: 556
Re: Yubikey USB redirecting over RDP
« Reply #3 on: Jul 23rd, 2015, 1:12am »
Quote Quote  Modify Modify

Hi !
Please apply this reg setting on the USB for Remote Desktop (server) side:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\ftusbrdsrv
HIDFilter: DWORD = 0
and restart the USB for Remote Desktop (server) side.
IP Logged

Sergey Jarovski

FabulaTech
===================
http://www.fabulatech.com
LBK
FabulaTech Forum Newbie
*



View Profile         
Posts: 3
Re: Yubikey USB redirecting over RDP
« Reply #4 on: Jul 24th, 2015, 12:43am »
Quote Quote  Modify Modify

It still doesn't show up.
 
Screenshot of what I added: https://goo.gl/photos/WJE3m3o9fzKrAgEr6
 
Then I rebooted the server.
IP Logged
Sergey_Jarovski
FabulaTech Forum Moderator
FabulaTech Forum God
*****



View Profile   WWW         
Gender: male Posts: 556
Re: Yubikey USB redirecting over RDP
« Reply #5 on: Jul 24th, 2015, 3:35am »
Quote Quote  Modify Modify

Hi !
Please check the "RDP legacy mode" option on the follow section:
Session - RDP - RDP Global - Option
Disable it if needed.
Run RDP session and make the screenshot of the USB for Remote Desktop (GUI).
I need to see the list of available usb devices for redirection.
IP Logged

Sergey Jarovski

FabulaTech
===================
http://www.fabulatech.com
LBK
FabulaTech Forum Newbie
*



View Profile         
Posts: 3
Re: Yubikey USB redirecting over RDP
« Reply #6 on: Jul 30th, 2015, 1:11am »
Quote Quote  Modify Modify

Legacy mode is off. We only see the smartcard reader. Plugin in the YubiKey or a normal keyboard doesn't result in any visual changes in the USB for Remote Desktop (Server).
 
https://goo.gl/photos/GafHCgqq8ty6iPfi7
IP Logged
Sergey_Jarovski
FabulaTech Forum Moderator
FabulaTech Forum God
*****



View Profile   WWW         
Gender: male Posts: 556
Re: Yubikey USB redirecting over RDP
« Reply #7 on: Jul 30th, 2015, 5:24am »
Quote Quote  Modify Modify

Hi !
There is no such list of available USB devices on your screenshot.
I sent you an e-mail.
Please reply.
IP Logged

Sergey Jarovski

FabulaTech
===================
http://www.fabulatech.com
Pages: 1  Reply Reply  Notify of replies Notify of replies  Print Print

« Previous topic | Next topic »
Online Talk to our
support team or
sales department.