Skip to main content

Use Case 1: Source does NOT have TruU installed, but RDP destination does have TruU

Result: TruU login will fail when the destination attempts to login to the operating system Explanation: The user’s login fails because TruU cannot access the locally plugged smart card of the server that the user is attempting to RDP into. This is because the login session is redirected to the client, thereby making only the client’s smart card accessible in the RDP session (WinSCard.dll is replaced in RDP). Microsoft made it this way to for enhanced security reasons Resolution: Install TruU on the original source computer (See Use Case 2 below)

Use Case 2: Source has TruU and RDP Destination has TruU

Result: TruU Login will fail when the destination attempts to login to the operating system Explanation: This is because Microsoft has a security feature where they prevent the use of the certificate (smartcard/FIDO) on the remote host from the Lock Screen, as such use is only available during the active user session Resolution: See the guide below:
  1. Log into the Workstation using TruU
  2. Start the Remote Desktop connection
  3. Enter the name or IP address of the target computer, then click connect
  1. Select Start Login with TruU
  1. Provide your TruU PIN or biometrics and answer any prompts for RDP
  1. After successful authentication, you will see one of the following:
    1. Login screen on the target computer
    2. Select Other user and then select the desired Sign in option
  1. Select the last smartcard (you will see your login ID on that specific screen) and enter the TruU PIN that you used on the source computer
  1. You will log in to the computer

Use Case 3: Source has TruU, but RDP Destination does NOT have TruU

Result: Fully supported with TruU Login
TruU’s Internationalization How to Determine Whether Agent is using FIDO2 or Cert based login