# RDP login by Hideez Authenticator App

{% hint style="info" %}
Logging in through **Hideez Authenticator** for **RDP (Remote Desktop Protocol)** enhances security and simplifies access to remote PCs.

There are two ways to log in to an RDP session using **Hideez Authenticator**:

1. **Scanning a QR code on the local workstation** in the Remote Desktop Connection client. This enables passwordless login or password-based login.
2. **Scanning a QR code on the remote PC screen**. This option requires a pre-created password-based account on the remote workstation.
   {% endhint %}

## **Login by Scanning a QR Code on the Local Workstation**

{% hint style="info" %}
**Requirements:**

* A workstation with Windows 10/11, with **Hideez Client** installed and connected to **Hideez Server**.
* For passwordless login, the local PC must be part of an **On-Prem AD (On-Premises Active Directory)** domain and have **TPM 2.0 (Trusted Platform Module 2.0)**.
* A registered **Hideez Authenticator** application on the server.
* An account for passwordless unlocking of the local workstation.
  {% endhint %}

### **Steps for Login by Scanning a QR Code on the Local Workstation:**

#### **1. Create an Account in Hideez Authenticator:**

* Register an account for logging in with credentials from the remote PC on the main PC by scanning a QR code using the **Hideez Authenticator** app.
* Both login methods are available: passwordless and password-based.
* If you plan to use passwordless login, ensure that the main PC has a TPM module and a domain account (this is not required for the remote PC).

#### **2. Connect via RDP:**

* Open the **Windows RDP client** on the main PC and specify the address of the remote computer.

<figure><img src="https://1669663611-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FRdTysrljwe610dPFG7tE%2Fuploads%2FHCsTUs8z9PEYNeYaZOpQ%2Fimage.png?alt=media&#x26;token=3de78b57-32eb-4e75-b14a-efb171033b0c" alt="" width="455"><figcaption></figcaption></figure>

#### **3. Set Up Authentication:**

* Click **Connect**, then choose **More choices**.

<figure><img src="https://1669663611-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FRdTysrljwe610dPFG7tE%2Fuploads%2FELc5uAZaJ5U7Qk1OJxry%2Fimage.png?alt=media&#x26;token=e0a9d283-d75b-41e0-ae8d-3f25a07961c8" alt="" width="333"><figcaption></figcaption></figure>

**4. Select Hideez Key for Authentication:**

* Choose the **Hideez Key** option for authentication.

<figure><img src="https://1669663611-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FRdTysrljwe610dPFG7tE%2Fuploads%2FmjQsPAXK2DjUfndEAbst%2Fimage.png?alt=media&#x26;token=faddf65c-ffb0-4186-b4cb-e5edab7b8403" alt="" width="326"><figcaption></figcaption></figure>

**5. Show QR Code:**

* Click the **Show QR code** button to generate a QR code for scanning.

**6. Scan the QR Code:**

* Open the **Hideez Authenticator** app on your mobile device and scan the QR code displayed on the screen.

<figure><img src="https://1669663611-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FRdTysrljwe610dPFG7tE%2Fuploads%2Fvm9PYWL9uFnZqdAWf9z9%2Fimage.png?alt=media&#x26;token=4531e6f9-f94b-4f10-ab2d-616ef77942ab" alt="" width="351"><figcaption></figcaption></figure>

**7. Confirm Login:**

* In the **Hideez Authenticator** app, confirm the login by selecting:

  * The workstation name (should match the main PC).
  * The account name.

  <figure><img src="https://1669663611-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FRdTysrljwe610dPFG7tE%2Fuploads%2FZfjQ5jfPrBzYcQMqxsdP%2Fimage.png?alt=media&#x26;token=6ab2b385-ea7f-4728-a444-53f9a6bbb9b7" alt="" width="305"><figcaption></figcaption></figure>

{% hint style="info" %}
**Note:** Some devices allow scanning the QR code directly with the camera, which will automatically redirect you to the **Hideez Authenticator** app for confirmation.
{% endhint %}

## **Login to the Remote Workstation by Scanning a QR Code on the Remote PC Screen**

{% hint style="info" %}
**Requirements:**

* A remote workstation with Windows 10/11, with **Hideez Client** installed and connected to the server.
* A registered **Hideez Authenticator** application on the server.
* An account for unlocking the remote workstation.
* Supported account types: local, domain, Microsoft, **On-Prem AD (On-Premises Active Directory)**, **Azure AD**.
  {% endhint %}

### **Steps for Login by Scanning a QR Code on the Remote Workstation:**

**1. Log into the Remote Workstation and Create a Password-Based Account:**

* Open the **Hideez Authenticator** app and scan the QR code to set up the account.

**2. Open the Remote Desktop Connection Client:**

* Enter the name or IP address of the computer you want to unlock.

<figure><img src="https://1669663611-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FRdTysrljwe610dPFG7tE%2Fuploads%2FJL3Qr6uuJLRyzJdz2u6Y%2Fimage.png?alt=media&#x26;token=7e31b332-3ca4-42f7-8e04-ff627ca7a296" alt="" width="407"><figcaption></figcaption></figure>

**3. Scan the QR Code:**

* In the **Hideez Authenticator** app on your mobile device, open the QR code scanner and scan the QR code displayed on the lock screen of the remote workstation.

<figure><img src="https://1669663611-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FRdTysrljwe610dPFG7tE%2Fuploads%2FlHxof2rlRGh1trqLdfwq%2Fimage.png?alt=media&#x26;token=da3789ae-f371-4379-9ff8-8c661d9f41a1" alt="" width="563"><figcaption></figcaption></figure>

**4. Confirm Login to the Workstation in Hideez Authenticator:**

* In the **Hideez Authenticator** app, confirm the login by selecting:

  * The workstation name (should match the main PC).
  * The account name.

  <figure><img src="https://1669663611-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FRdTysrljwe610dPFG7tE%2Fuploads%2FcUTWLwzoafu6WHGUzeHR%2Fimage.png?alt=media&#x26;token=33ab7a78-dbb5-421d-9990-d35ae9aeaeb2" alt="" width="305"><figcaption></figcaption></figure>

{% hint style="info" %}
**Note:** If the QR code does not appear on the lock screen during the Remote Desktop Connection session, use a configuration file with the parameter `enablecredsspsupport:i:0` enabled. [Refer to our troubleshooting guide for additional settings.](https://enterprise.hideez.com/faq/how-tos/enable-qr-code-display-for-hideez-authenticator-on-the-lock-screen-of-a-windows-remote-workstation)
{% endhint %}

{% hint style="success" %}

#### **Compatibility**

This login method is compatible with Windows and macOS operating systems for all account types.
{% endhint %}