en-US - - English

RDM (Devolutions Remote Desktop)

While creating a connection, RDM can take the password needed for the connection out of an external password manager and inject it in place of the password when connecting. This needs some settings first.

Prerequisites

  • pcheckout.exe is present at the configured path. Download: pcheckout.exe. (Searching by folder works only on PassMan systems above version 4.7.1.)
  • pcheckout.ps1 - a PowerShell script whose content must be pasted for the RDP type session on the Events/Before Opening tab. Download: pcheckout.ps1 PowerShell.
  • The Custom variables items are filled in correctly.
  • The password of the PassMan user was given at the first connection. The PassMan user's password is not saved in RDM; it is available only in RDM's memory, and it is deleted when you exit RDM.
  • The RDP session is set up correctly:
    • Credentials field (General/Credentials) set to the user name and password type
    • Host name field (General/Host)
    • User name field (General/Username)
    • Events/Before opening/Execute PowerShell
      • PowerShell script: pcheckout.ps1 - the content of the PowerShell script pasted in
      • the Wait for exit option selected

Custom variables

Add the following data to the list under File/Settings/Applications/Custom variables.

Required variables:

  • PASSMAN_PCHECKOUT_FILEPATH - for example d:\prog\pmsl\local_client\dist\pcheckout_nodebug.exe: the path where the pcheckout programs are, and the file name of the pcheckout program to use.
  • PASSMAN_URL - the URL of your PassMan system. The client that runs RDM must be able to reach the PassMan server on the network.
  • PASSMAN_USERNAME - your PassMan user name: the one you sign in to PassMan with, which has access to the target, account and password data you want to use from RDM.

Optional variables:

  • PASSMAN_PROVIDERS - the name of the provider; local by default. For a provider other than local, this variable is also required, unless Smart login is turned on in PassMan (Padmin: Security settings > Other security settings > Smart login). This parameter is case sensitive: it must match exactly, including upper and lower case.
  • PASSMAN_USE_RDM_FOLDER_FOR_CHECKOUT - if TRUE, PassMan searches for the given host ONLY in the folder with the same name as the RDM folder. If FALSE, the search runs in the folders where the PassMan user has the password checkout right. If PassMan has hosts (targets) with the same name, you get back the password of the account of the first target found.
  • PASSMAN_DEBUG - TRUE/FALSE. If TRUE, the parameters used to connect to PassMan, the data of the process and any errors are shown during the connection. If FALSE, no extra data is shown; only errors are.

The RDP session

  • Session type: RDP session
  • Credentials: choose the user name and password type.
  • Hostname: give the name of the target stored in PassMan.
  • Username: give the user name stored in PassMan.

The host name and the user name are case sensitive.

Example

User variables:

  • PASSMAN_PCHECKOUT_FILEPATH: c:\temp\rdm\pcheckout_debug.exe
  • PASSMAN_URL: <your PassMan URL>
  • PASSMAN_USERNAME: <your PassMan user name>
  • PASSMAN_PROVIDERS: <provider name>
  • PASSMAN_DEBUG: TRUE

RDP entry: in the Host name field (General/Host), give the target and port; in the User name field (General/Username), the account name. At the start of the connection, you must give the password of the PassMan user.

Command to run (with pcheckout_debug.exe in the current folder or on the path):

pcheckout_debug.exe <account>@<target>:<port> --passman_url <your PassMan URL> --passman_username <user name> --passman_provider <provider> --passman_password <password>