HP Xw9400 Remote Graphics Software 4.2.0 User Guide - Page 15

Security Features

Page 15 highlights

About Remote Graphics Software Security Features HP Remote Graphics Software has the following features to maintain security: • Authentication: When a Receiver attempts to connect to a Sender, user credentials are validated using the native authentication method on the sender system. If the credentials are not authenticated, the connection is closed. On Windows operating systems authentication uses NTLM or Kerberos. On UNIX (Linux and HP-UX) authentication uses the Pluggable Authentication Module (PAM). • Authorization: Multiple connections to the same Sender are only allowed if the user logged into the desktop of the Sender system (primary user) allows the connection. When a non-primary user attempts to connect to a Sender an authorization dialog is displayed on the desktop of the remote system that asks whether the user should be allowed to connect. • Automatic Desktop Locking: The desktop of the Sender system locks when the primary user disconnects. This prevents non-primary users from being able to interact with a remote session after the primary user has disconnected. This feature is supported on Windows systems, and on Linux and HP-UX, this feature is supported on the Gnome, KDE, and CDE desktop environments. • Automatic Disconnect: On Linux and HP-UX systems all Receivers will disconnect when the primary user disconnects. This prevents non-primary users from interaction with a remote session after the primary user disconnects. • Automatic Disconnect of non-primary users on Login: All non-primary users are disconnected when a login event occurs. Only the primary user remains connected when the desktop of the remote computer is logged in. • Automatic Disconnect on Log Off: All Receivers are disconnected when the primary user logs off of the remote desktop. This can be disabled by setting the "IsDisconnectOnLogoutEnabled" sender property to "0". See Sender Properties for more information. • Connection Status: On Windows a desktop icon in the application tray animates when other users are connected. Likewise, on Linux and HP-UX the Sender GUI animates. • Collaboration notification: See Features. • Connections are not allowed when an iLO remote console is enabled: If the iLO remote console is enabled on a HP Blade Workstation, connections to the blade using RGS are denied. • Disconnect All: All Receivers can be easily disconnected using the Sender GUI. This is useful when hosting a collaboration session, such as in a classroom environment, and the session ends. On Windows system, the GUI is an icon 7

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155

About Remote Graphics Software
7
Security Features
HP Remote Graphics Software has the following features to maintain security:
Authentication:
When a Receiver attempts to connect to a Sender, user
credentials are validated using the native authentication method on the
sender system. If the credentials are not authenticated, the connection is
closed. On Windows operating systems authentication uses NTLM or Kerberos.
On UNIX (Linux and HP-UX) authentication uses the Pluggable Authentication
Module (PAM).
Authorization:
Multiple connections to the same Sender are only allowed if the
user logged into the desktop of the Sender system (primary user) allows the
connection. When a non-primary user attempts to connect to a Sender an
authorization dialog is displayed on the desktop of the remote system that
asks whether the user should be allowed to connect.
Automatic Desktop Locking:
The desktop of the Sender system locks when
the primary user disconnects. This prevents non-primary users from being
able to interact with a remote session after the primary user has
disconnected.
This feature is supported on Windows systems, and on Linux and HP-UX, this
feature is supported on the Gnome, KDE, and CDE desktop environments.
Automatic Disconnect:
On Linux and HP-UX systems all Receivers will
disconnect when the primary user disconnects. This prevents non-primary
users from interaction with a remote session after the primary user
disconnects.
Automatic Disconnect of non-primary users on Login:
All non-primary users
are disconnected when a login event occurs. Only the primary user remains
connected when the desktop of the remote computer is logged in.
Automatic Disconnect on Log Off:
All Receivers are disconnected when the
primary user logs off of the remote desktop. This can be disabled by setting
the "IsDisconnectOnLogoutEnabled" sender property to "0". See Sender
Properties for more information.
Connection Status:
On Windows a desktop icon in the application tray
animates when other users are connected. Likewise, on Linux and HP-UX the
Sender GUI animates.
Collaboration notification:
See Features.
Connections are not allowed when an iLO remote console is enabled:
If the
iLO remote console is enabled on a HP Blade Workstation, connections to the
blade using RGS are denied.
Disconnect All:
All Receivers can be easily disconnected using the Sender GUI.
This is useful when hosting a collaboration session, such as in a classroom
environment, and the session ends. On Windows system, the GUI is an icon