Question
How do I connect to the Bastion Hosts with Remote Desktop or UNIX?
Overview
The initial process for connecting to the Windows Bastion host is a two step process. Enrollment is a one-time process.
- Enroll in Duo - Please see KB0002934.
- Connect to the Bastion Host
Answer
Connect to the Windows Bastion Host
- Launch the Remote Desktop Connection application.
- IN the Computer field, enter dshost.ucdavis.edu then press Connect.
- Enter your kerberos passphrase then click OK.
- Click Yes when you verify the certificate for the dshost (WINHOST3.ou.ad3.ucdavis.edu or WINHOST4.ou.ad3.ucdavis.edu)
- Duo Push will automatically send a login "Approval" push notification to your smartphone.
Optional:
- If you wish to use another method to authenticate, press Cancel here. Duo will give you the option of SMS instead of using the app.
- Enter the method you wish to use (SMS) and press OK.
- You'll receive another dialog box indicating that the SMS has been placed, click OK.
- Enter the SMS code that you received and press OK.
- A Remote Desktop Connection window will launch automatically, you may now connect to your desired host.
- Right-click on the Windows icon to sign-off when you are done.
Connect to the UNIX Bastion Host
Use the SSH command you normally use, but connect to dyad.ucdavis.edu and enter your passphrase, or see the following instructions:
Tips
- You have approximately one-minute from the time you enter your passphrase to complete the process of authenticating with Duo.
- The Duo SMS code you receive is a one-time use but good for 1-hour.
Issues Authenticating or Getting Started?
Contact IT Express for additional assistance - ithelp@ucdavis.edu or (530) 754-4357