Use Assets | RS

Create Assets to start standard support sessions, to start Remote Desktop Protocol sessions or VNC sessions, to connect to SSH-enabled or Telnet-enabled network devices, or to start Intel® vPro sessions.

When creating a large number of Assets, it may be easier to import them via a spreadsheet than to add them one by one in the representative console. Go to /login > Asset Management> Assets. From the dropdown in the Assets Mass Import Wizard section, select the type of Asset you wish to add, and then click Download Template. Using the text in the CSV template as column headers, add the information for each Assets you wish to import. If any required fields are missing, import fails. Optional fields can be filled in or left blank.

Once you have completed filling out the template, use Import Assets to upload the CSV file containing the Asset information. The maximum file size allowed to be uploaded at one time is 5 MB. Only one type of Asset can be included in each CSV file. The CSV file should use the format described in the tables below.

Local Jump shortcut help
ParameterDescription
HostnameThe hostname of the endpoint to be accessed by this Asset. This string has a maximum of 128 characters.
NameEnter a Name for the Asset. This name identifies the item in the session tabs. This string has a maximum of 128 characters.
Asset GroupThe code name of the Asset Group with which this Asset should be associated.
When using the import method, an Asset cannot be associated with a personal list of Assets.
Tag (optional)You can organize your Assets into categories by adding a tag. This string has a maximum of 1024 characters.
Comments (optional)You can add comments to your Assets. This string has a maximum of 1024 characters.
Asset Policy (optional)The code name of an Asset Policy. You can specify an Asset Policy to manage access to this Asset.
Public Portal (optional)The public portal through which this Asset should connect.
Customer Present Session Policy (optional)The code name of a session policy. You can specify a session policy to manage the permissions available on this Asset when a customer is present.
Customer Not Present Session Policy (optional)The code name of a session policy. You can specify a session policy to manage the permissions available on this Asset when a customer is not present.
Remote Jump shortcut help
ParameterDescription
HostnameThe hostname of the endpoint to be accessed by this Asset. This string has a maximum of 128 characters.
GatewayThe code name of the Gateway through which the endpoint is accessed.
NameEnter a Name for the Asset. This name identifies the item in the session tabs. This string has a maximum of 128 characters.
Asset GroupThe code name of the Asset Group with which this Asset should be associated.
When using the import method, an Asset cannot be associated with a personal list of Assets.
Tag (optional)You can organize your Assets into categories by adding a tag. This string has a maximum of 1024 characters.
Comments (optional)You can add comments to your Assets. This string has a maximum of 1024 characters.
Asset Policy (optional)The code name of an Asset Policy. You can specify an Asset Policy to manage access to this Asset.
Public Portal (optional)The public portal through which this Asset should connect.
Customer Present Session Policy (optional)The code name of a session policy. You can specify a session policy to manage the permissions available on this Asset when a customer is present.
Customer Not Present Session Policy (optional)The code name of a session policy. You can specify a session policy to manage the permissions available on this Asset when a customer is not present.
Local VNC Jump shortcut help
ParameterDescription
HostnameThe hostname of the endpoint to be accessed by this Asset. This string has a maximum of 128 characters.
Port (optional)A valid port number from 100 to 65535. Defaults to 5900.
NameEnter a Name for the Asset. This name identifies the item in the session tabs. This string has a maximum of 128 characters.
Asset GroupThe code name of the Asset Group with which this Asset should be associated.
When using the import method, an Asset cannot be associated with a personal list of Assets.
Tag (optional)You can organize your Assets into categories by adding a tag. This string has a maximum of 1024 characters.
Comments (optional)You can add comments to your Assets. This string has a maximum of 1024 characters.
Asset Policy (optional)The code name of an Asset Policy. You can specify an Asset Policy to manage access to this Asset.
Public Portal (optional)The public portal through which this Asset should connect.
Session Policy (optional)The code name of a session policy. You can specify a session policy to manage the permissions available on this Asset.
Remote VNC Jump shortcut help
ParameterDescription
HostnameThe hostname of the endpoint to be accessed by this Asset. This string has a maximum of 128 characters.
GatewayThe code name of the Gateway through which the endpoint is accessed.
Port (optional)A valid port number from 100 to 65535. Defaults to 5900.
NameEnter a Name for the Asset. This name identifies the item in the session tabs. This string has a maximum of 128 characters.
Asset GroupThe code name of the Asset Group with which this Asset should be associated.
When using the import method, an Asset cannot be associated with a personal list of Assets.
Tag (optional)You can organize your Assets into categories by adding a tag. This string has a maximum of 1024 characters.
Comments (optional)You can add comments to your Assets. This string has a maximum of 1024 characters.
Asset Policy (optional)The code name of an Asset Policy. You can specify an Asset Policy to manage access to this Asset.
Public Portal (optional)The public portal through which this Asset should connect.
Session Policy (optional)The code name of a session policy. You can specify a session policy to manage the permissions available on this Asset.
Remote RDP Jump shortcut help
ParameterDescription
HostnameThe hostname of the endpoint to be accessed by this Asset. This string has a maximum of 128 characters.
GatewayThe code name of the Gateway through which the endpoint is accessed.
Username (optional)The username to sign in as.
Domain (optional)The domain the endpoint is on.
Quality (optional)The quality at which to view the remote system. Can be low (2-bit gray scale for the lowest bandwidth consumption), best_perf (default - 8-bit color for fast performance), perf_and_qual (16-bit for medium quality image and performance), best_qual (32-bit for the highest image resolution), or video_opt (VP9 codec for more fluid video). This cannot be changed during the remote desktop protocol (RDP) session.
Console Session (optional)1: Starts a console session.
0: Starts a new session (default).
Ignore Untrusted Certificate (optional)1: Ignores certificate warnings.
0: Shows a warning if the server's certificate cannot be verified.
NameEnter a Name for the Asset. This name identifies the item in the session tabs. This string has a maximum of 128 characters.
Asset GroupThe code name of the Asset Group with which this Asset should be associated.
When using the import method, an Asset cannot be associated with a personal list of Assets.
Tag (optional)You can organize your Assets into categories by adding a tag. This string has a maximum of 1024 characters.
Comments (optional)You can add comments to your Assets. This string has a maximum of 1024 characters.
Asset Policy (optional)The code name of an Asset Policy. You can specify an Asset Policy to manage access to this Asset.
Public Portal (optional)The public portal through which this Asset should connect.
Session Policy (optional)The code name of a session policy. You can specify a session policy to manage the permissions available on this Asset.
Local RDP Jump shortcut help
ParameterDescription
HostnameThe hostname of the endpoint to be accessed by this Asset. This string has a maximum of 128 characters.
Username (optional)The username to sign in as.
Domain (optional)The domain the endpoint is on.
Quality (optional)The quality at which to view the remote system. Can be low (2-bit gray scale for the lowest bandwidth consumption), best_perf (default - 8-bit color for fast performance), perf_and_qual (16-bit for medium quality image and performance), best_qual (32-bit for the highest image resolution), or video_opt (VP9 codec for more fluid video). This cannot be changed during the remote desktop protocol (RDP) session.
Console Session (optional)1: Starts a console session.
0: Starts a new session (default).
Ignore Untrusted Certificate (optional)1: Ignores certificate warnings.
0: Shows a warning if the server's certificate cannot be verified.
NameEnter a Name for the Asset. This name identifies the item in the session tabs. This string has a maximum of 128 characters.
Asset GroupThe code name of the Asset Group with which this Asset should be associated.
When using the import method, an Asset cannot be associated with a personal list of Assets.
Tag (optional)You can organize your Assets into categories by adding a tag. This string has a maximum of 1024 characters.
Comments (optional)You can add comments to your Assets. This string has a maximum of 1024 characters.
Asset Policy (optional)The code name of an Asset Policy. You can specify an Asset Policy to manage access to this Asset.
Public Portal (optional)The public portal through which this Asset should connect.
Session Policy (optional)The code name of a session policy. You can specify a session policy to manage the permissions available on this Asset.
SSH shortcut help
ParameterDescription
HostnameThe hostname of the endpoint to be accessed by this Asset. This string has a maximum of 128 characters.
GatewayThe code name of the Gateway through which the endpoint is accessed.
Username (optional)The username to sign in as.
ProtocolCan be either ssh or telnet.
Port (optional)A valid port number from 1 to 65535. Defaults to 22 if the protocol is ssh or 23 if the protocol is telnet.
Terminal Type (optional)Can be either xterm (default) or VT100.
Keep-Alive (optional)The number of seconds between each packet sent to keep an idle session from ending. Can be any number from 0 to 300. 0 disables keep-alive (default).
NameEnter a Name for the Asset. This name identifies the item in the session tabs. This string has a maximum of 128 characters.
Asset GroupThe code name of the Asset Group with which this Asset should be associated.
When using the import method, an Asset cannot be associated with a personal list of Assets.
Tag (optional)You can organize your Assets into categories by adding a tag. This string has a maximum of 1024 characters.
Comments (optional)You can add comments to your Assets. This string has a maximum of 1024 characters.
Asset Policy (optional)The code name of an Asset Policy. You can specify an Asset Policy to manage access to this Asset.
Session Policy (optional)The code name of a session policy. You can specify a session policy to manage the permissions available on this Asset.
Public Portal (optional)The public portal through which this Asset should connect.
Intel vPro Shortcut help
ParameterDescription
HostnameThe hostname of the endpoint to be accessed by this Asset. This string has a maximum of 128 characters.
GatewayThe code name of the Gateway through which the endpoint is accessed.
NameEnter a Name for the Asset. This name identifies the item in the session tabs. This string has a maximum of 128 characters.
Asset GroupThe code name of the Asset Group with which this Asset should be associated.
When using the import method, an Asset cannot be associated with a personal list of Assets.
Tag (optional)You can organize your Assets into categories by adding a tag. This string has a maximum of 1024 characters.
Comments (optional)You can add comments to your Assets. This string has a maximum of 1024 characters.
Asset Policy (optional)The code name of an Asset Policy. You can specify an Asset Policy to manage access to this Asset.
Public Portal (optional)The public portal through which this Asset should connect.

Remote or Local Jump shortcuts

Remote Jump enables a privileged user to connect to an unattended remote computer on a network outside of their own network. Remote Jump depends on a Gateway.

A Gateway acts as a conduit for access to computers on a known remote network. A single Gateway installed on a computer within a LAN is used to access multiple systems, eliminating the need to pre-install software on every computer you might need to access.

Local Jump enables a privileged user to connect to an unattended remote computer on their local network. Within the local area network, the BeyondTrust user's computer can initiate a session to a Windows or Linux system directly without using a Gateway.

ℹ️

Remote Jump and Local Jump are available only for Windows systems. Jump Clients are needed for remote access to Mac computers. To connect to a Windows computer without a Jump Client, that computer must have Remote Registry Service enabled (disabled by default in Vista) and must be on a domain.

Create a Remote Jump shortcut

To create a Remote Jump shortcut, click the Create button in the Asset Management Interface. From the dropdown, select Remote Jump. Remote Jump shortcuts appear in the Asset Management Interface with Jump Clients and other types of Asset shortcuts.

Organize and manage existing Assets by selecting one or more Assets and clicking Properties.

ℹ️

To view the properties of multiple Assets, the items selected must be the same type (e.g., all Jump Clients, all Remote Jumps, etc.). To review propers of other types of Assets, see the appropriate section in this guide.

Enter a Name for the Asset. This name identifies the item in the session tabs. This string has a maximum of 128 characters.

From the Gateway dropdown, select the network that hosts the computer you wish to access. The representative console remembers your Gateway choice the next time you create this type of Asset. Enter the Hostname / IP of system you wish to access.

Move Assets from one Asset Group to another using the Asset Group dropdown. The ability to move Assets to or from different Asset Groups depends upon your account permissions.

Further organize Assets by entering the name of a new or existing Tag. Even though the selected Assets are grouped together under the tag, they are still listed under the Asset Group in which each is pinned. To move an Asset back into its top-level Asset Group, leave this field blank.

Select the Public Portal through which this Asset should connect. If a session policy is assigned to this public portal, that policy may affect the permissions allowed in sessions started through this Asset. The ability to set the public portal depends on your account permissions.

Assets include a Comments field for a name or description, which makes sorting, searching, and identifying Assets faster and easier.

To set when users are allowed to access this Asset, choose a Asset Policy. These policies are configured by your administrator in the /login interface.

Choose a Session Policy to assign to this Asset. The session policy assigned to this Asset has the highest priority when setting session permissions. The ability to set a session policy depends on your account permissions.

Choose session policies to assign to this Asset. Session policies assigned to this Asset have the highest priority when setting session permissions. The Customer Present Session Policy applies when the end user is determined to be present. Otherwise, the Customer Not Present Session Policy applies.

The way customer presence is determined is set by the Use screen state to detect Customer Presence Asset setting in the /login interface. When enabled, a customer is considered present only if a user is logged in, the system is not locked, and a screen saver is not running. When disabled, a customer is considered present if a user is logged in, regardless of the screen state. Customer presence is detected when the Asset session starts. The session policy used for the session does not change throughout the session, regardless of any changes in the customer's presence while the session is in progress. The ability to set a session policy depends on your account permissions.

Create a Local Jump shortcut

To create a Local Jump shortcut, click the Create button in the Asset Management interface. From the dropdown, select Local Jump. Local Jump shortcuts appear in the Asset Management Interface with Jump Clients and other types of Asset shortcuts.

Organize and manage existing Assets by selecting one or more Assets and clicking Properties.

ℹ️

To view the properties of multiple Assets, the items selected must be the same type (e.g., all Jump Clients, all Remote Jumps, etc.). To review properties of other types of Assets, see the appropriate section in this guide.

Enter a Name for the Asset. This name identifies the item in the session tabs. This string has a maximum of 128 characters.

Enter the Hostname / IP of the system you wish to access.

Move Assets from one Asset Group to another using the Asset Group dropdown. The ability to move Assets to or from different Asset Groups depends upon your account permissions.

Further organize Assets by entering the name of a new or existing Tag. Even though the selected Assets are grouped together under the tag, they are still listed under the Asset Group in which each is pinned. To move an Asset back into its top-level Asset Group, leave this field blank.

Select the Public Portal through which this Asset should connect. If a session policy is assigned to this public portal, that policy may affect the permissions allowed in sessions started through this Asset. The ability to set the public portal depends on your account permissions.

Assets include a Comments field for a name or description, which makes sorting, searching, and identifying Assets faster and easier.

To set when users are allowed to access this Asset, choose a Asset Policy. These policies are configured by your administrator in the /login interface.

Choose a Session Policy to assign to this Asset. The session policy assigned to this Asset has the highest priority when setting session permissions. The ability to set a session policy depends on your account permissions.

Choose session policies to assign to this Asset. Session policies assigned to this Asset have the highest priority when setting session permissions. The Customer Present Session Policy applies when the end user is determined to be present. Otherwise, the Customer Not Present Session Policy applies.

The way customer presence is determined is set by the Use screen state to detect Customer Presence Asset setting in the /login interface. When enabled, a customer is considered present only if a user is logged in, the system is not locked, and a screen saver is not running. When disabled, a customer is considered present if a user is logged in, regardless of the screen state. Customer presence is detected when the Asset session starts. The session policy used for the session does not change throughout the session, regardless of any changes in the customer's presence while the session is in progress. The ability to set a session policy depends on your account permissions.

Use a Jump shortcut

To use a Jump shortcut to start a session, select the shortcut from the Asset Management Interface and click the Jump button.

You must provide administrative credentials to the remote computer in order to complete the Jump. The administrative rights must be either a local administrator on the remote system or a domain administrator.

The client files are pushed to the remote system, and a session attempts to start. Depending on the session permissions, the end-user may be prompted to accept or deny the session. If no response is received within a defined interval of time, the session either starts or cancels, again depending on the session permissions.

ℹ️

  • If you need to access systems through a Gateway when no user is available, make sure the public portal permissions and your account permissions are set either to disable prompting or to default to Allow.
  • Assets can be set to allow multiple users to simultaneously access the same Asset. If set to Join Existing Session, other users are able to join a session already underway. The original owner of the session receives a note indicating another user has joined the session, but is not allowed to deny them access.

Local or Remote RDP shortcuts

Use BeyondTrust to start a Remote Desktop Protocol (RDP) session with a remote Windows or Linux System. Because RDP sessions are converted to BeyondTrust sessions, users can share or transfer sessions, and sessions can be automatically audited and recorded as your administrator has defined for your site.

To use Local RDP through BeyondTrust, you must be on the same network segment as the target system and must have the user account permission Allowed Connection Types: Local RDP.

To use Remote RDP through BeyondTrust, you must have access to a Gateway and must have the user account permissions Allowed Connection Types: Remote RDP.

Remote Desktop Services (RDS) environments may route incoming Remote Desktop Protocol (RDP) sessions to Collections on remote session hosts. In these configurations, the system or IP address that the client connects to does not host the actual session. Instead, the connection is brokered and redirected to a session host that is part of the Collection.

In previous versions, we did not recognize when an RDP session was redirected to a Collection. As a result, it attempted to connect directly to the Connection Broker rather than to the session host that ultimately serves the session.

You can now add an RDS Collection name when setting up an RDP Tunnel Asset for load balancing.

Create a Local RDP shortcut

  1. To create a Local Microsoft RDP shortcut, click the Create button in the Asset Management interface. From the dropdown, select Local RDP. RDP shortcuts appear in the Asset Management Interface with Jump Clients and other types of Asset shortcuts.
  2. Organize and manage existing Assets by selecting one or more Assets and clicking Properties.
ℹ️

To view the properties of multiple Assets, the items selected must be the same type (e.g., all Jump Clients, all Remote Jumps, etc.).To review properties of other types of Assets, see the appropriate section in this guide.

  1. Enter a Name for the Asset. This name identifies the item in the session tabs. This string has a maximum of 128 characters.
  2. Enter the Hostname / IP of the system you wish to access.
ℹ️

By default, the RDP server listens on port 3389, which is therefore the default port BeyondTrust attempts. If the remote RDP server is configured to use a different port, add it after the hostname or IP address in the form of <hostname>:<port> or <ipaddress>:<port> (for example, 10.10.24.127:40000).

  1. Provide the Username to sign in as, along with the Domain.
  2. Select the Quality at which to view the remote screen. This cannot be changed during the RDP session. Select the color optimization mode to view the remote screen. If you are going to be primarily sharing video, select Video Optimized; otherwise, select between Black and White (uses less bandwidth), Few Colors, More Colors, or Full Color (uses more bandwidth). Both Video Optimized and Full Color modes allow you to view the actual desktop wallpaper.
  3. To start a console session rather than a new session, check the Console Session box.
  4. If the server's certificate cannot be verified, you receive a certificate warning. Checking Ignore Untrusted Certificate allows you to connect to the remote system without seeing this message.
  5. Move Assets from one Asset Group to another using the Asset Group dropdown. The ability to move Assets to or from different Asset Groups depends upon your account permissions.
  6. Further organize Assets by entering the name of a new or existing Tag. Even though the selected Assets are grouped together under the tag, they are still listed under the Asset Group in which each is pinned. To move an Asset back into its top-level Asset Group, leave this field blank.
  7. Select the Public Portal through which this Asset should connect. If a session policy is assigned to this public portal, that policy may affect the permissions allowed in sessions started through this Asset. The ability to set the public portal depends on your account permissions.
    Assets include a Comments field for a name or description, which makes sorting, searching, and identifying Assets faster and easier.
  8. To set when users are allowed to access this Asset, choose a Asset Policy. These policies are configured by your administrator in the /login interface.
  9. Choose a Session Policy to assign to this Asset. The session policy assigned to this Asset has the highest priority when setting session permissions. The ability to set a session policy depends on your account permissions.

Create a Remote RDP shortcut

  1. To create a Remote Microsoft RDP shortcut, click the Create button in the Asset Management Interface. From the dropdown, select Remote RDP. RDP shortcuts appear in the Asset Management Interface with Jump Clients and other types of Asset shortcuts.
  2. Organize and manage existing Assets by selecting one or more Assets and clicking Properties.
ℹ️

To view the properties of multiple Assets, the items selected must be the same type (e.g., all Jump Clients, all Remote Jumps, etc.). To review properties of other types of Assets, see the appropriate section in this guide.

  1. Enter a Name for the Asset. This name identifies the item in the session tabs. This string has a maximum of 128 characters.
  2. From the Gateway dropdown, select the network that hosts the computer you wish to access. The representative console remembers your Gateway choice the next time you create this type of Asset. Enter the Hostname / IP of system you wish to access.
ℹ️

By default, the RDP server listens on port 3389, which is therefore the default port BeyondTrust attempts. If the remote RDP server is configured to use a different port, add it after the hostname or IP address in the form of <hostname>:<port> or <ipaddress>:<port> (for example, 10.10.24.127:40000).

  1. Provide the Username to sign in as, along with the Domain.
  2. Select the Quality at which to view the remote screen. This cannot be changed during the RDP session. Select the color optimization mode to view the remote screen. If you are going to be primarily sharing video, select Video Optimized; otherwise, select between Black and White (uses less bandwidth), Few Colors, More Colors, or Full Color (uses more bandwidth). Both Video Optimized and Full Color modes allow you to view the actual desktop wallpaper.
  3. To start a console session rather than a new session, check the Console Session box.
  4. If the server's certificate cannot be verified, you receive a certificate warning. Checking Ignore Untrusted Certificate allows you to connect to the remote system without seeing this message.
  5. Move Assets from one Asset Group to another using the Asset Group dropdown. The ability to move Assets to or from different Asset Groups depends upon your account permissions.
  6. Further organize Assets by entering the name of a new or existing Tag. Even though the selected Assets are grouped together under the tag, they are still listed under the Asset Group in which each is pinned. To move an Asset back into its top-level Asset Group, leave this field blank.
  7. Select the Public Portal through which this Asset should connect. If a session policy is assigned to this public portal, that policy may affect the permissions allowed in sessions started through this Asset. The ability to set the public portal depends on your account permissions.
    Assets include a Comments field for a name or description, which makes sorting, searching, and identifying Assets faster and easier.
  8. To set when users are allowed to access this Asset, choose a Asset Policy. These policies are configured by your administrator in the /login interface.
  9. Choose a Session Policy to assign to this Asset. The session policy assigned to this Asset has the highest priority when setting session permissions. The ability to set a session policy depends on your account permissions.

Use an RDP shortcut

  1. To use an Asset to start a session, select the shortcut from the Asset Management Interface and click the Jump button.
  2. You are prompted to enter the password for the username you specified earlier.
  3. Your RDP session now begins. Begin screen sharing to view the remote desktop. You can send the Ctrl-Alt-Del command, capture a screenshot of the remote desktop, and share clipboard contents. You can also share or transfer the RDP session with other logged-in BeyondTrust users, following the normal rules of your user account settings.

Multi-monitor support

An option allows you to open a Remote Support connection expanded across all the monitors on the client computer regardless of the client monitor configuration. With this feature, you can fully utilize all the monitors connected to the client computer, therefore being able to adjust screen sizing and scaling during an RDP session across multiple monitors.

ℹ️

  • If you are using full screen view while using this feature, the remote system is displayed across all of your monitors.
  • Assets can be set to allow multiple users to simultaneously access the same Asset. If set to Start New Session, then a new independent session starts for each user who Jumps to a specific RDP Asset. The RDP configuration on the endpoint controls any further behavior regarding simultaneous RDP connections.

Local or Remote VNC shortcuts

Use BeyondTrust to start a VNC session with a remote system. Because VNC sessions are converted to BeyondTrust sessions, users can share or transfer sessions, and sessions can be automatically audited and recorded as defined by your administrator for your site.

To use Local VNC through BeyondTrust, you must be on the same network segment as the target system and must have the user account permission Allowed Connection Types: Local VNC.

To use Remote VNC through BeyondTrust, you must have access to a Gateway and must have the user account permission Allowed Connection Types: Remote VNC.

Use BeyondTrust to start a VNC session with a remote system. Because VNC sessions are converted to BeyondTrust sessions, users can share or transfer sessions, and sessions can be automatically audited and recorded as defined by your administrator for your site.

To use Local VNC through BeyondTrust, you must be on the same network segment as the target system and must have the user account permission Allowed Connection Types: Local VNC.

To use Remote VNC through BeyondTrust, you must have access to a Gateway and have the user account permission Allowed Connection Types: Remote VNC.

Create a Local VNC shortcut

  1. To create a Local VNC shortcut, click the Create button in the Asset Management Interface. From the dropdown, select Local VNC. VNC shortcuts appear in the Asset Management Interface along with Jump Clients and other types of Asset shortcuts.
  2. Organize and manage existing Assets by selecting one or more Assets and clicking Properties.
ℹ️

To view the properties of multiple Assets, the items selected must be the same type (e.g., all Jump Clients, all Remote Jumps, etc.).

  1. Enter a Name for the Asset. This name identifies the item in the session tabs. This string has a maximum of 128 characters.
  2. Enter the Hostname / IP of the system you wish to access.
  3. By default, the VNC server listens on port 5900, which is, therefore, the default port BeyondTrust attempts. If the remote VNC server is configured to use a different port, enter it in the Port field.
  4. Move Assets from one Asset Group to another using the Asset Group dropdown. The ability to move Assets to or from different Asset Groups depends upon your account permissions.
  5. Further organize Assets by entering the name of a new or existing Tag. Even though the selected Assets are grouped together under the tag, they are still listed under the Asset Group in which each is pinned. To move an Asset back into its top-level Asset Group, leave this field blank.
  6. Select the Public Portal through which this Asset should connect. If a session policy is assigned to this public portal, that policy may affect the permissions allowed in sessions started through this Asset. The ability to set the public portal depends on your account permissions.
  7. Assets include a Comments field for a name or description, which makes sorting, searching, and identifying Assets faster and easier.
  8. To set when users are allowed to access this Asset, choose a Asset Policy. These policies are configured by your administrator in the /login interface.
  9. Choose a Session Policy to assign to this Asset. The session policy assigned to this Asset has the highest priority when setting session permissions. The ability to set a session policy depends on your account permissions.

Create a Remote VNC shortcut

  1. To create a Remote VNC shortcut, click the Create button in the Asset Management Interface. From the dropdown, select Remote VNC. VNC shortcuts appear in the Asset Management Interface along with Jump Clients and other types of Asset shortcuts.
  2. Organize and manage existing Assets by selecting one or more Assets and clicking Properties.
ℹ️

To view the properties of multiple Assets, the items selected must be the same type (e.g., all Jump Clients, all Remote Jumps, etc.).

  1. Enter a Name for the Asset. This name identifies the item in the session tabs. This string has a maximum of 128 characters.
  2. From the Gateway dropdown, select the network that hosts the computer you wish to access. The representative console remembers your Gateway choice the next time you create this type of Asset. Enter the Hostname / IP of system you wish to access.
  3. By default, the VNC server listens on port 5900, which is the default port BeyondTrust attempts. If the remote VNC server is configured to use a different port, enter it in the Port field.
  4. Move Assets from one Asset Group to another using the Asset Group dropdown. The ability to move Assets to or from different Asset Groups depends upon your account permissions.
  5. Further organize Assets by entering the name of a new or existing Tag. Even though the selected Assets are grouped together under the tag, they are still listed under the Asset Group in which each is pinned. To move an Asset back into its top-level Asset Group, leave this field blank.
  6. Select the Public Portal through which this Asset should connect. If a session policy is assigned to this public portal, that policy may affect the permissions allowed in sessions started through this Asset. The ability to set the public portal depends on your account permissions.
  7. Assets include a Comments field for a name or description, which makes sorting, searching, and identifying Assets faster and easier.
  8. To set when users are allowed to access this Asset, choose a Asset Policy. These policies are configured by your administrator in the /login interface.
  9. Choose a Session Policy to assign to this Asset. The session policy assigned to this Asset has the highest priority when setting session permissions. The ability to set a session policy depends on your account permissions.

Use a VNC shortcut

  1. To use an Asset to start a session, select the shortcut from the Asset Management Interface and click the Jump button.
  2. When establishing the connection to the VNC server, the system prompts you to enter the user name and password.
  3. Your VNC session now begins. Begin screen sharing to view the remote desktop.
    You can send the Ctrl-Alt-Del command, capture a screenshot of the remote desktop, and share clipboard text contents. You also can share, transfer, or record the VNC session, following the normal rules of your user account settings.
ℹ️

Assets can be set to allow multiple users to simultaneously access the same Asset. If set to Join Existing Session, other users are able to join a session already underway. The original owner of the session receives a note indicating another user has joined the session, but is not allowed to deny them access.

Shell shortcut

With Shell shortcuts, quickly connect to an SSH-enabled or Telnet-enabled network device to use the command line feature on that remote system. For example, run a standardized script across multiple systems to install a needed patch, or troubleshoot a network issue.

Create a Shell shortcut

  1. To create a Shell shortcut, click the Create button in the Asset Management Interface. From the dropdown, select Jump. Shell shortcuts appear in the Asset Management Interface along with Jump Clients and other types of Asset shortcuts.
ℹ️

Shell shortcuts are enabled only if their Gateway is configured for open or limited connection.

  1. Organize and manage existing Assets by selecting one or more Assets and clicking Properties.
ℹ️

To view the properties of multiple Assets, the items selected must be all the same type (e.g., all Jump Clients, all Remote Jumps, etc.). To review properties of other types of Assets, see the appropriate section in this guide.

  1. Enter a Name for the Asset. This name identifies the item in the session tabs. This string has a maximum of 128 characters.
  2. From the Gateway dropdown, select the network that hosts the computer you wish to access. The representative console remembers your Gateway choice the next time you create this type of Asset. Enter the Hostname / IP of system you wish to access.
  3. Choose the Protocol to use, either SSH or Telnet.
  4. Port automatically switches to the default port for the selected protocol but can be modified to fit your network settings.
  5. Enter the Username.
  6. Select the Terminal Type, either xterm or VT100.
  7. You can also select to Send Keep-Alive Packets to keep idle sessions from ending. Enter the number of seconds to wait between each packet send.
  8. Move Assets from one Asset Group to another using the Asset Group dropdown. The ability to move Assets to or from different Asset Groups depends upon your account permissions.
  9. Further organize Assets by entering the name of a new or existing Tag. Even though the selected Assets are grouped together under the tag, they are still listed under the Asset Group in which each is pinned. To move an Asset back into its top-level Asset Group, leave this field blank.
  10. Select the Public Portal through which this Asset should connect. If a session policy is assigned to this public portal, that policy may affect the permissions allowed in sessions started through this Asset. The ability to set the public portal depends on your account permissions.
  11. Assets include a Comments field for a name or description, which makes sorting, searching, and identifying Assets faster and easier.
  12. To set when users are allowed to access this Asset, choose a Asset Policy. These policies are configured by your administrator in the /login interface.
  13. Choose a Session Policy to assign to this Asset. The session policy assigned to this Asset has the highest priority when setting session permissions. The ability to set a session policy depends on your account permissions.

Use a Shell shortcut

  1. To use a Shell shortcut to start a session, select the shortcut from the Asset Management Interface and click the Jump button.
    If attempting to connect to an SSH device without a cached host key, you receive an alert that the server's host key is not cached and that there is no guarantee that the server is the computer you think it is.
  2. If you choose Save Key and Connect, then the key is cached on the Gateway's host system so that future attempts to connect to this system do not result in this prompt. Connect Only starts the session without caching the key, and Abort ends the Shell Session.
  3. If you connect to an SSH device with keyboard interactive MFA enabled, there is a secondary prompt for input.
  4. When you connect to a remote device, a command shell session immediately starts with that device. If you connect to a provisioned SSH device with an unencrypted key or with an encrypted key whose password has been cached, you are not prompted for a password. Otherwise, you are required to enter a password. You can then send commands to the remote system.

Intel vPro Jump shortcut

Using Intel® Active Management Technology, privileged users can support fully provisioned Intel vPro Windows systems below the OS level, regardless of the status or power state of these remote systems.

Create an Intel® vPro Jump shortcut

  1. To create an Intel® vPro shortcut, click the Create button in the Asset Management Interface. From the dropdown, select Intel® vPro. Intel® vPro Jump shortcut appear in the Asset Management Interface along with Jump Clients and other types of Asset shortcuts.
  2. Organize and manage existing Assets by selecting one or more Assets and clicking Properties.
ℹ️

To view the properties of multiple Assets, the items selected must be the same type (e.g., all Jump Clients, all Remote Jumps, etc.).

  1. Enter a Name for the Asset. This name identifies the item in the session tabs. This string has a maximum of 128 characters.
  2. From the Gateway dropdown, select the network that hosts the computer you wish to access. The representative console remembers your Gateway choice the next time you create this type of Asset. Enter the Hostname / IP of system you wish to access.
  3. Move Assets from one Asset Group to another using the Asset Group dropdown. The ability to move Assets to or from different Asset Groups depends upon your account permissions.
  4. Further organize Assets by entering the name of a new or existing Tag. Even though the selected Assets are grouped together under the tag, they are still listed under the Asset Group in which each is pinned. To move an Asset back into its top-level Asset Group, leave this field blank.
  5. Select the Public Portal through which this Asset should connect. If a session policy is assigned to this public portal, that policy may affect the permissions allowed in sessions started through this Asset. The ability to set the public portal depends on your account permissions.
  6. Assets include a Comments field for a name or description, which makes sorting, searching, and identifying Assets faster and easier.
  7. To set when users are allowed to access this Asset, choose a Asset Policy. These policies are configured by your administrator in the /login interface.

Use an Intel® vPro Jump shortcut

Depending on your Gateway setup, you may be prompted to enter a username and password.

The Gateway detects the provisioned vPro hardware. If the credentials, provided during either the Gateway configuration or the Jump attempt, match the credentials of the vPro-provisioned system, the connection is initiated.

Depending on how the vPro computer is provisioned, you might be prompted to enter a user consent code before performing certain actions.

If a consent code is required, a pop-up appears on the remote screen. An end user must provide you with this code before you can gain hardware access.

Once the connection is made, you have control of the remote vPro hardware. You can then use the vPro session tools to work on the remote system.

ℹ️

Assets can be set to allow multiple users to simultaneously access the same Asset. If set to Join Existing Session, other users are able to join a session already underway. The original owner of the session receives a note indicating another user has joined the session, but is not allowed to deny them access.


©2003-2026 BeyondTrust Corporation. All Rights Reserved. Other trademarks identified on this page are owned by their respective owners. BeyondTrust is not a chartered bank or trust company, or depository institution. It is not authorized to accept deposits or trust accounts and is not licensed or regulated by any state or federal banking authority.