Using libssh2 with CryptoNG and ECDSA
Until recently, libssh2’s CryptoNG backend didn’t support ECDSA. But now it does. Continue »
Remotely joining VM instances to Active Directory using IAP Desktop 2.31
The first thing we often do after creating a new Windows VM on Google Cloud is join the VM to Active Directory. With the latest IAP Desktop release, that got a little easier. Continue »
You can use libssh2 with CryptoNG… unless you need ECDSA
Libssh2 lets us choose between multiple different crypto backends. But that doesn’t mean these backends are interchangeable – there are also some functional differences. Continue »
Keeping track of SSH keys using IAP Desktop 2.26
When we allow users to use SSH to connect to Linux VMs on Google Cloud, we need to keep track of their public keys, and which VMs they have access to. The latest version of IAP Desktop makes that a little easier. Continue »
Docking and floating RDP windows in IAP Desktop 2.25
IAP Desktop uses a UI that’s similar to Visual Studio – we can dock tool windows, let them auto-hide when we don’t need them, or let them float as separate windows. But that flexibility didn’t apply to RDP windows… until now. Continue »
Using ECDSA keys for SSH public key authentication in IAP Desktop 2.23
By default, IAP Desktop uses the rsa-ssh public key signature algorithm when authenticating to a Linux VM. That can be a problem in certain situations, which is why the latest version now adds support for ECDSA.
Continue »
Performing per-user installations on Windows Server
Instead of performing machine-wide installations, some applications do per-user installations. That’s often convenient because we don’t need administrative privileges for such installations. But unfortunately, per-user installations typically don’t work on Windows Server. Continue »
Managing IAP Desktop by using group policies
IAP Desktop 2.20 now lets you use group policies to ensure all users in your organization use consistent settings. Continue »
IAP Desktop 2.16 improves the Project Explorer and lets you customize fonts
Release 2.16 is out, and it contains multiple improvements to the Project Explorer tool window as well as the ability to customize your SSH terminal better. Continue »
Using IAP Desktop for zero-trust SSH access
IAP Desktop 2.13 now lets you connect to Linux instances by using SSH. You can run multiple SSH and Remote Desktop in parallel, all secured by Identity-Aware-Proxy. Continue »
Does IAP Desktop support .rdp files, or anything similar?
If you frequently use Remote Desktop, then you might be used to creating .rdp files for the servers you connect to most often. IAP Desktop does not support .rdp files, but there is an alternative way to open IAP Desktop and connect to a server in a single click.
Continue »
IAP Desktop 2.11
Yesterday I released version 2.11 of IAP Desktop. This new version introduces multi-display support and more. Continue »
How IAP Desktop protects TCP tunnels
In the last post, we looked at the risks of using local port forwarding and how it’s difficult to protect TCP tunnels in a multi-user environment. In this post, we take a look at how IAP Desktop protects its tunnels. Continue »
Using gcloud in Azure Pipelines
Using Azure Pipelines to deploy Cloud Run applications has recently become a lot easier. Continue »
IAP Desktop 2.10
On Tuesday, I released version 2.10 of IAP Desktop, introducing proxy auto-configuration support, better AppLocker compatibility and more. Continue »
Goodbye RDCMan, hello IAP Desktop
Microsoft’s Remote Desktop Connection Manager (RDCMan) is gone, it and took the Google Cloud IAP for Remote Desktop plugin with it. But now there is IAP Desktop to supersede both of them. Continue »
New version of the Cloud IAP plugin for Remote Desktop released
A few days ago, I released version 1.1.22 of the Cloud IAP plugin for Remote Desktop on Github.
The three main new features in this release are:
- A managed implementation of Cloud IAP TCP tunneling
- OAuth-based authorization.
- Support for custom GCP session lengths.