# Creating Connections ![](/files/kfEseDFqy5KWAkwA6Ro9) ## About Connections Connections specify the protocol and customizable parameters that define the authentication and customized behavior. Connections can be created from the Settings menu. Only users with "Create new connections" permission can create connections. Administrators can define which connections are available for users and groups. ## Use Cases Connections can be created and utilized in several ways. Connections can be privileged (credentials hidden from the user) and the connections can support user-specified credentials. Additionally, the connections can pull credentials from one or more Keeper Vaults via the Keeper Secrets Manager integration. ### Privileged Connections When setting up a privileged connection, the authentication credentials to the target can be saved in the connection parameters, or in the designated Keeper Vault. When the credentials are stored directly to the connection or in the Keeper Vault, they are never exposed to the end-user. This allows you to create privileged sessions in which the user does not have access to the underlying credentials.

Privileged Connections

### User-Specified Credentials When setting up the connection, you can skip the authentication details parameters and Keeper Connection Manager will prompt the end-user for their authentication credentials on every login. For example, with an RDP connection, simply remove the credentials from the connection parameters and the user will be prompted to authenticate.

User-Specified Credentials

### Vault Credentials KCM can connect to a Keeper Vault and search for the necessary credentials needed based on Host, User and Domain. See the [Vault Integration](/en/keeper-connection-manager/vault-integration.md) section to learn more about this capability. ## Create a New Connection The New Connection form is separated into multiple sections each with multiple inputs. Connections have many different options and capabilities, depending on the protocol. To begin, click Settings > Connections > New Connection which will open the new connection form. ![New Connection](/files/miDDMYgi72TRqtiOCkOO) ![New Connection form](/files/HiZi67bUfPcxRcPE59kB) ### Connection Details #### Connection Name The name of the connection, this is how it will appear in the connections list. #### Location The location of the new connection in the connections list. You can select "ROOT" to put the new connection at the top level of the connections list, or select a collection to place the new connection under an existing collection. #### Protocol Select the type of connection to create. The current available connection types are: * RDP * SSH * Kubernetes * Telnet * VNC * MySQL * PostgreSQL * Microsoft SQL Server * Remote Browser Isolation {% hint style="info" %} Other options in the connection form are affected by the protocol selection {% endhint %} For more information about connection types, see the [supported protocols section](/en/keeper-connection-manager/supported-protocols.md). ### Batch Import for Connections Create multiple connections via API or by uploading a CSV, JSON, or YAML file. Visit the following page for more information: {% content-ref url="/pages/Mj3ISjl05YkkZk8XwxzQ" %} [Batch Import and API](/en/keeper-connection-manager/using-keeper-connection-manager/creating-connections/batch-import-and-api.md) {% endcontent-ref %} ### Concurrency Limits #### Max # of Connections The maximum allowed number of concurrent sessions for this connections. If the maximum number is sessions are already in use, other users will not be able to connect to this connection. {% hint style="info" %} Set this value to 0 to allow unlimited concurrent sessions. {% endhint %} #### Max # of Connections per User The maximum allowed number of concurrent sessions for this connection for each user. If the maximum number is sessions are already in use by a user, the user will not be able to open a new session for this connection. {% hint style="info" %} Set this value to 0 to allow unlimited concurrent sessions. {% endhint %} ### Load Balancing Keeper Connection Manager can use load balancing among connections in a group to give multiple concurrent users the best experience. #### Connection Weight Enter a number to use as a multiplier of connection assignment. For example, if one connection in a group has a weight of 1, and another has a weight of 2, the second connection will be assigned twice as many concurrent users as the first. #### Use for Failover Only If checked, this connection will only be used if all other connections in the group fail ### Guacamole Proxy Parameters If you are establishing a connect through a guacd service which is operating on a separate server (other than localhost), you would specify the proxy parameters here. In most default installations, this section is not needed and should be left empty. For more information see the [guacd documentation](/en/keeper-connection-manager/installation/docker-compose-install/keeper-guacamole.md#guacd). #### Hostname and Port Hostname and port of the proxy #### Encryption Choose if the connection traffic should be encrypted. You can choose unencrypted or TLS/SSL encryption. ## RDP Protocol Parameters Details to facilitate the new RDP connection. Set network and authentication details. ### Network #### Hostname and Port Enter the hostname and port of the RDP connection #### Authentication Enter the following connection fields for you RDP connection: * Username * Password * Domain #### Security Mode Select the security mode to use, the supported modes are: * Any * NLA (Network Level Authentication) * RDP Encryption * TLS Encryption * Hyper-V / VMConnect {% hint style="info" %} If you would like users to be prompted for manual authentication, you may need to select "NLA" security mode and leave the authentication parameters empty. {% endhint %} #### Disable Authentication Choose to turn off authentication for this RDP connection #### Ignore Server Certificate Choose to ignore the server certificate. In most cases, this is required to establish a connection. ### Remote Desktop Gateway Fill in the following details about the remote desktop gateway: * Hostname and Port * Username * Password * Domain ### Basic Settings #### Initial Program Start a program on connection. Enter the location of the program to run #### Client Name Set a name for the computer this connection is connecting to #### Keyboard Layout Choose the type of keyboard to use with this RDP connection #### Time Zone Use the dropdown menus to select the timezone to use with this connection #### Enable Multi-touch Choose to allow multi-touch input for this RDP connection #### Administrator Console Choose to allow access to the Administrator Console for users connecting to this RDP connection ### Appearance Choose settings that affect how the new connection will look. #### Width, Height and Resolution Choose the dimensions and resolution of the screen in pixels (pixels per inch for resolution). #### Color Depth Choose the color depth of the screen over the RDP connection. #### Force Lossless Compression Use lossless compression. Check this option for better visual quality, but it may impact performance. #### Resize Method Choose what the connection should do if the window is resized. Keeper Connection Manager supports "Display Update" Visual channel for RDP 8.1 or higher. For older versions of RDP, use the reconnect method. #### Read-Only If checked, the connection will not allow for any interaction from the user. The user will be able to view what is happening on the connected device, but make no interactions with it. ### Clipboard #### Disable Copying from Remote Desktop If selected, users will not be able to copy from the connection #### Disable Pasting from Client If selected, users will not be able to paste values into the connection ### Device Redirection Choose options for connected devices #### Support Audio in Console Choose if audio is supported within the console #### Disable Audio Choose if audio from the connection should be disabled #### Enable Audio Input (microphone) Choose if the user's microphone can be used within the connection #### Enable Printing Choose if users can print from the connection #### Redirected Printer Name If allowing printing, choose the name of the printer to use ### Enable Drive If you would like to transfer files to this target with Drag and Drop, select this option. Along with this, make sure to fill out a "Drive Name", "Drive Path", and select "Automatically Create Drive". #### Drive Name If file transfer is enabled, the name of the drive to use. For example "My Drive". #### Disable File Download Choose if files can be downloaded to the connected drive #### Drive Path The path of the drive to use if enabled. A typical default Drive Path would be something like `/var/lib/guacamole/drives/${GUAC_USERNAME}` #### Automatically Create Drive If selected, Keeper Connection Manager will automatically create a drive to use with the connection #### Static Channel Names A comma-separated list of static channel names to open and expose as pipes. If you wish to communicate between an application running on the remote desktop and JavaScript, this is the best way to do it. KCM will open an outbound pipe with the name of the static channel. If JavaScript needs to communicate back in the other direction, it should respond by opening another pipe with the same name. KCM allows any number of static channels to be opened, but protocol restrictions of RDP limit the size of each channel name to 7 characters. ### Performance These options can be used to optimize the performance of the Windows Remote Desktop Connection. Choose to enable or disable the following optional Windows features: * Enable Wallpaper * Enable Theming * Enable Font Smoothing (ClearType) * Enable Full-window Drag * Enable Desktop Composition (Aero) * Enable Menu Animations * Disable Bitmap Caching * Disable Off-screen Caching * Disable Glyph Caching ### RemoteApp Recent versions of Windows provide a feature called RemoteApp which allows individual applications to be used over RDP, without providing access to the full desktop environment. If your RDP server has this feature enabled and configured, you can configure KCM connections to use those individual applications. #### Program Specifies the RemoteApp to start on the remote desktop. If supported by your remote desktop server, this application, and only this application, will be visible to the user. Windows requires a special notation for the names of remote applications. The names of remote applications must be prefixed with two vertical bars. For example, if you have created a remote application on your server for `notepad.exe` and have assigned it the name “notepad”, you would set this parameter to: “`||notepad`”. ### Working Directory The working directory, if any, for the remote application. This parameter has no effect if RemoteApp is not in use. #### Parameters The command-line arguments, if any, for the remote application. This parameter has no effect if RemoteApp is not in use. ### Load Balancing Keeper Connection Manager can use load balancing among connections in a group to give multiple concurrent users the best experience. #### Connection Weight Enter a number to use as a multiplier of connection assignment. For example, if one connection in a group has a weight of 1, and another has a weight of 2, the second connection will be assigned twice as many concurrent users as the first. #### Use for Failover Only If checked, this connection will only be used if all other connections in the group fail ### Screen Recording Options for recording of the screen. See the [Session Recording](/en/keeper-connection-manager/using-keeper-connection-manager/session-recording.md) section for more information. #### Recording Path Enter the path to save the session recording. We recommend using the below value:\ `${HISTORY_PATH}/${HISTORY_UUID}` #### Recording Name Enter the name of the recording file #### Exclude Graphics/Streams Choose to exclude graphics or streams from the recording #### Exclude Mouse Choose to exclude the mouse from the screen recording #### Exclude Touch Events Choose to exclude the touch events the user made from the recording #### Include Key Events If selected, include key events that would not otherwise be visible in the recording #### Automatically Create Recording Path If selected, Keeper Connection Manager will automatically create a path for the recording file ### SFTP Options for file transfers to the connection using SFTP. For more information see the [File Transfer](/en/keeper-connection-manager/using-keeper-connection-manager/file-transfer.md) section. #### Enable SFTP Choose to enable SFTP file transfers If enabled, enter the following information to connect to and authenticate connection to your SFTP server: * Hostname Port * Public Host Key (Base64) * Username and Password * Private Key * Passphrase for the private key if applicable #### File Browsing Root Directory The root directory of the SFTP server to display within this connection #### Default Upload Directory If users upload a file from the connection, the directory that the file will go to by default #### SFTP Keepalive Interval Enter the keepalive interval as a number #### Disable File Download If SFTP is enabled, check this option to exclude users from downloading files from the server to this connection #### Disable File Upload If SFTP is enabled, check this option to exclude users from uploading files to the server from this connection ### Wake-on-LAN (WoL) Options to facilitate waking the connected device upon connection if supported. #### Send WoL Packet Enable Wake-on-Lan and send a signal from Keeper Connection Manager #### Mac Address of the Remote Host Identify the device to send the signal to by Mac Address #### Broadcast Address for WoL Packet Where to send the WoL signal #### Host Boot Wait Time How long to wait for the device to wake ## SSH Protocol Parameters Details to facilitate the new SSH connection. Set network and authentication details. ### Network #### Hostname and Port Enter the hostname and port for the SSH connection #### Public Host Key (Base64) Enter the Public Key for this SSH connection in Base64 format ### Authentication #### Username and Password The username and password (if required) for this SSH connection. {% hint style="info" %} If you would like the user to be prompted for their password, leave the "password" field empty. {% endhint %} #### Private Key The private key used for connecting to this SSH connection #### Passphrase The passphrase (if any) for the private key ### Appearance Choose settings that affect how the new connection will look. #### Theme Select a color theme for the terminal. There are built in themes, and a [custom theme option](#creating-a-custom-theme). #### Font Name Enter the name of a font for the terminal to use #### Font Size Select the pixel size of the font #### Maximum Scroll back Size Select how far back a user can scroll through past commands. Leave blank for unlimited. #### Read-Only If checked, the connection will not allow for any interaction from the user. The user will be able to view what is happening on the connected device, but make no interactions with it. ### Clipboard #### Disable Copying from Remote Desktop If selected, users will not be able to copy from the connection #### Disable Pasting from Client If selected, users will not be able to paste values into the connection ### Session/Environment Settings for basic environment setup #### Execute Command Enter a command to execute on connection start #### Language/Local($LANG) Set the language/local for the connection, this sets the $LANG environment variable #### Time Zone($TZ) Set the time zone for the connection. This sets the $TZ environment variable #### Server Keepalive Interval Set an interval for a keepalive signal ### Terminal Behavior The Terminal Behavior section contains options about the terminal for applicable connections. #### Backspace Key Sends Choose what action is sent when you click the backspace key. The options are: * Delete * Backspace #### Terminal Type Choose the type of terminal to use. The options are: * ansi * linux * vt100 * vt220 * vterm * vterm-256color ### Screen Recording Options for recording of the screen. See the [Session Recording](/en/keeper-connection-manager/using-keeper-connection-manager/session-recording.md) section for more information. #### Recording Path Enter the path to save the session recording. We recommend setting this to `${HISTORY_PATH}/${HISTORY_UUID}` #### Recording Name Enter the name of the recording file #### Exclude Graphics/Streams Choose to exclude graphics or streams from the recording #### Exclude Mouse Choose to exclude the mouse from the screen recording #### Include Key Events If selected, include key events that would not otherwise be visible in the recording #### Automatically Create Recording Path If selected, Keeper Connection Manager will automatically create a path for the recording file ### SFTP Options for file transfers to the connection using SFTP. For more information see the [File Transfer](/en/keeper-connection-manager/using-keeper-connection-manager/file-transfer.md) section. #### Enable SFTP Choose to enable SFTP file transfers #### File Browsing Root Directory The root directory of the SFTP server to display within this connection ### Disable File Download If SFTP is enabled, check this option to exclude users from downloading files from the server to this connection #### Disable File Upload If SFTP is enabled, check this option to exclude users from uploading files to the server from this connection ### Wake-on-LAN (WoL) Options to facilitate waking the connected device upon connection if supported. #### Send WoL Packet Enable Wake-on-Lan and send a signal from Keeper Connection Manager #### Mac Address of the Remote Host Identify the device to send the signal to by Mac Address #### Broadcast Address for WoL Packet Where to send the WoL signal #### Host Boot Wait Time How long to wait for the device to wake ## VNC Protocol Parameters Details to facilitate the new VNC connection. Set network and authentication details. ### Network #### Hostname and Port Hostname and port information for the VNC connection #### Encryption Choose encryption method for connection traffic. The options are: * No Encryption * TLS/SSL Encryption ### Authentication #### Username and Password Login credentials for the VNC connection. If you would like to prompt users for the password, leave this field empty. #### Appearance Choose settings that affect how the new connection will look. #### Read-Only If checked, the connection will not allow for any interaction from the user. The user will be able to view what is happening on the connected device, but make no interactions with it. #### Swap Red-Blue Channels Choose if the red and blue channels should be swapped for this connection. #### Cursor Choose to use the cursor of the local machine, or of the remote machine. #### Color Depth Choose the color depth of the screen over the VNC connection. #### Force Lossless Compression Use lossless compression. Check this option for better visual quality, but it may impact performance. ### Clipboard #### Encoding Choose which encoding to use when copying and pasting. The options are: * CP1252 * ISO 8859-1 * UTF-16 * UTF-8 #### Disable Copying from Remote Desktop If selected, users will not be able to copy from the connection #### Disable Pasting from Client If selected, users will not be able to paste values into the connection ### VNC Repeater There exist VNC repeaters, such as UltraVNC Repeater, which act as intermediaries or proxies, providing a single logical VNC connection which is then routed to another VNC server elsewhere. Additional parameters are required to select which VNC host behind the repeater will receive the connection. #### Destination Host and Port Set the host and port to use ### Screen Recording Options for recording of the screen. See the [Session Recording](/en/keeper-connection-manager/using-keeper-connection-manager/session-recording.md) section for more information. #### Recording Path Enter the path to save the session recording. We recommend setting this to `${HISTORY_PATH}/${HISTORY_UUID}` #### Recording Name Enter the name of the recording file #### Exclude Graphics/Streams Choose to exclude graphics or streams from the recording #### Exclude Mouse Choose to exclude the mouse from the screen recording #### Include Key Events If selected, include key events that would not otherwise be visible in the recording #### Automatically Create Recording Path If selected, Keeper Connection Manager will automatically create a path for the recording file ### SFTP Options for file transfers to the connection using SFTP. For more information see the [File Transfer](/en/keeper-connection-manager/using-keeper-connection-manager/file-transfer.md) section. #### Enable SFTP Choose to enable SFTP file transfers If enabled, enter the following information to connect to and authenticate connection to your SFTP server: * Hostname Port * Public Host Key (Base64) * Username and Password * Private Key * Passphrase for the private key if applicable #### File Browsing Root Directory The root directory of the SFTP server to display within this connection #### Default Upload Directory If users upload a file from the connection, the directory that the file will go to by default #### SFTP Keepalive Interval Enter the keepalive interval as a number #### Disable File Download If SFTP is enabled, check this option to exclude users from downloading files from the server to this connection #### Disable File Upload If SFTP is enabled, check this option to exclude users from uploading files to the server from this connection ### Audio #### Enable Audio Choose to enable audio for the connection #### Audio Server Name Name of the audio server to use ### Wake-on-LAN (WoL) Options to facilitate waking the connected device upon connection if supported. #### Send WoL Packet Enable Wake-on-Lan and send a signal from Keeper Connection Manager #### Mac Address of the Remote Host Identify the device to send the signal to by Mac Address #### Broadcast Address for WoL Packet Where to send the WoL signal #### Host Boot Wait Time How long to wait for the device to wake ## Telnet Protocol Parameters Details to facilitate the new Telnet connection. Set network and authentication details. ### Network #### Hostname and Port Hostname and port information for the Telnet connection. ### Authentication #### Username and Password Authentication credentials for the Telnet connection. To prompt users for the password, leave this field empty. #### Username Regular Expression The regular expression to use when waiting for the username prompt. This parameter is optional. If not specified, a reasonable default built into KCM will be used. The regular expression must be written in the POSIX ERE dialect (the dialect typically used by egrep). #### Password Regular Expression The regular expression to use when waiting for the password prompt. This parameter is optional. If not specified, a reasonable default built into KCM will be used. The regular expression must be written in the POSIX ERE dialect (the dialect typically used by egrep). #### Login Success Regular Expression The regular expression to use when detecting that the login attempt has succeeded. This parameter is optional. If specified, the terminal display will not be shown to the user until text matching this regular expression has been received from the telnet server. The regular expression must be written in the POSIX ERE dialect (the dialect typically used by `egrep`). #### Login Failure Regular Expression The regular expression to use when detecting that the login attempt has failed. This parameter is optional. If specified, the connection will be closed with an explicit login failure error if text matching this regular expression has been received from the telnet server. The regular expression must be written in the POSIX ERE dialect (the dialect typically used by `egrep`). ### Appearance Choose settings that affect how the new connection will look. #### Theme Select a color theme for the terminal. There are built in themes, and a [custom theme option](#creating-a-custom-theme). #### Font Name Enter the name of a font for the terminal to use #### Font Size Select the pixel size of the font #### Maximum Scroll back Size Select how far back a user can scroll through past commands. Leave blank for unlimited. #### Read-Only If checked, the connection will not allow for any interaction from the user. The user will be able to view what is happening on the connected device, but make no interactions with it. ### Clipboard #### Disable Copying from Remote Desktop If selected, users will not be able to copy from the connection #### Disable Pasting from Client If selected, users will not be able to paste values into the connection ### Terminal Behavior The Terminal Behavior section contains options about the terminal for applicable connections. #### Backspace Key Sends Choose what action is sent when you click the backspace key. The options are: * Delete * Backspace #### Terminal Type Choose the type of terminal to use. The options are: * ansi * linux * vt100 * vt220 * vterm * vterm-256color #### Typescript (Text Session Recording) Options for text recording. See the [Session Recording](/en/keeper-connection-manager/using-keeper-connection-manager/session-recording.md) section for more details about session recording. #### Typescript Path Enter a file path location to save text session recordings to. #### Typescript Name Enter a name for the text session recording file #### Automatically Create Typescript Path Have Keeper Connection Manager automatically create the path location for the text session recording ### Screen Recording Options for recording of the screen. See the [Session Recording](/en/keeper-connection-manager/using-keeper-connection-manager/session-recording.md) section for more information. #### Recording Path Enter the path to save the session recording. We recommend setting this to `${HISTORY_PATH}/${HISTORY_UUID}` #### Recording Name Enter the name of the recording file #### Exclude Graphics/Streams Choose to exclude graphics or streams from the recording #### Exclude Mouse Choose to exclude the mouse from the screen recording #### Include Key Events If selected, include key events that would not otherwise be visible in the recording #### Automatically Create Recording Path If selected, Keeper Connection Manager will automatically create a path for the recording file ### Wake-on-LAN (WoL) Options to facilitate waking the connected device upon connection if supported. #### Send WoL Packet Enable Wake-on-Lan and send a signal from Keeper Connection Manager #### Mac Address of the Remote Host Identify the device to send the signal to by Mac Address #### Broadcast Address for WoL Packet Where to send the WoL signal #### Host Boot Wait Time How long to wait for the device to wake ## Kubernetes Protocol Parameters Details to facilitate the new connection. Set network and authentication details. ### Network #### Hostname and Port The hostname and port of the Kubernetes connection #### Use SSL/TLS Choose to use SSL/TLS encryption #### Ignore Server Certificate Choose to ignore the server certificate #### Certificate Authority Certificate Paste the Certificate Authority Certificate into this text box #### Container Fill in the following information about the Kubernetes container: * Namespace * Pod Name * Container Name ### Authentication #### Client Certificate The certificate to use if performing SSL/TLS client authentication to authenticate with the Kubernetes server, in PEM format. This parameter is optional. If omitted, SSL client authentication will not be performed. #### Client Key The key to use if performing SSL/TLS client authentication to authenticate with the Kubernetes server, in PEM format. This parameter is optional. If omitted, SSL client authentication will not be performed. ### Appearance Choose settings that affect how the new connection will look. #### Theme Select a color theme for the terminal. There are built in themes, and a [custom theme option](#creating-a-custom-theme). #### Font Name Enter the name of a font for the terminal to use #### Font Size Select the pixel size of the font #### Maximum Scroll back Size Select how far back a user can scroll through past commands. Leave blank for unlimited. #### Read-Only If checked, the connection will not allow for any interaction from the user. The user will be able to view what is happening on the connected device, but make no interactions with it. ### Terminal Behavior The Terminal Behavior section contains options about the terminal for applicable connections. #### Backspace Key Sends Choose what action is sent when you click the backspace key. The options are: * Delete * Backspace ### Typescript (Text Session Recording) Options for text recording. See the [Session Recording](/en/keeper-connection-manager/using-keeper-connection-manager/session-recording.md) section for more details about session recording. #### Recording Path Enter a file path location to save text session recordings to. We recommend setting this to `${HISTORY_PATH}/${HISTORY_UUID}` #### Recording Name Enter a name for the session recording file. #### Exclude Graphics/Streams Choose to exclude graphics and streams that may appear on the terminal from the recording. #### Include Key Events Choose to include keys that are clicked in the session recording. Events like `ctrl+c` will be recorded. #### Automatically Create Recording Path Have Keeper Connection Manager automatically create the path location for the session recording ## MySQL Protocol Parameters Details to facilitate the MySQL connection. Set network and authentication details. ### Network #### Hostname and Port Enter the hostname and port for the MySQL connection **Unix Socket** Enter the socket name if a host is not present ### Authentication #### Username and Password The username and password for this MySQL connection. To prompt users for the password, leave this field empty. ### Database **Default Database** Specify the default database schema when establishing a connection. **Disable CSV Export** Disable the ability for users to export data through "select .. into local infile" **Disable CSV Import** Disable the ability for users to import data through "load data local infile..." ### Appearance Choose settings that affect how the new connection will look. #### Theme Select a color theme for the terminal. There are built in themes, and a [custom theme option](#creating-a-custom-theme). #### Font Name Enter the name of a font for the terminal to use. #### Font Size Select the pixel size of the font. #### Maximum Scroll back Size Select how far back a user can scroll through past commands. Leave blank for unlimited. #### Read-Only If checked, the connection will not allow for any interaction from the user. The user will be able to view what is happening on the connected device, but make no interactions with it. ### Clipboard #### Disable Copying from Remote Desktop If selected, users will not be able to copy from the connection #### Disable Pasting from Client If selected, users will not be able to paste values into the connection ### Session/Environment Settings for basic environment setup #### Language/Local($LANG) Set the language/local for the connection, this sets the $LANG environment variable #### Time Zone($TZ) Set the time zone for the connection. This sets the $TZ environment variable #### Server Keepalive Interval Set an interval for a keepalive signal ### Screen Recording Options for recording of the screen. See the [Session Recording](/en/keeper-connection-manager/using-keeper-connection-manager/session-recording.md) section for more information. ### Recording Path Enter the path to save the session recording. We recommend setting this to `${HISTORY_PATH}/${HISTORY_UUID}` #### Recording Name Enter the name of the recording file. #### Exclude Graphics/Streams Choose to exclude graphics or streams from the recording. #### Exclude Mouse Choose to exclude the mouse from the screen recording. #### Include Key Events If selected, include key events that would not otherwise be visible in the recording. #### Automatically Create Recording Path If selected, Keeper Connection Manager will automatically create a path for the recording file. ### SFTP Options for file transfers to the connection using SFTP. For more information see the [File Transfer](/en/keeper-connection-manager/using-keeper-connection-manager/file-transfer.md) section. #### Enable SFTP Choose to enable SFTP file transfers. #### File Browsing Root Directory The root directory of the SFTP server to display within this connection. #### Disable File Download If SFTP is enabled, check this option to exclude users from downloading files from the server to this connection. #### Disable File Upload If SFTP is enabled, check this option to exclude users from uploading files to the server from this connection. ### Wake-on-LAN (WoL) Options to facilitate waking the connected device upon connection if supported. #### Send WoL Packet Enable Wake-on-Lan and send a signal from Keeper Connection Manager. #### Mac Address of the Remote Host Identify the device to send the signal to by Mac Address. #### Broadcast Address for WoL Packet Where to send the WoL signal. #### Host Boot Wait Time How long to wait for the device to wake. ## Creating a Custom Theme Terminal based protocols (Kubernetes, SSH, MySQL and Telnet) allow for custom color themes. To use a custom theme first select "custom" from the Theme dropdown, this will open the custom theme builder. ![Custom them builder](/files/mnZDuZ6bV9M6eq7VN8AB) To use the custom theme builder, click each color to select a new color to use in its place. The foreground and background colors are labeled, other colors represent the standard terminal colors. For example: to replace all red highlighted text in the terminal with orange text, click the red color and choose orange in the color picker. ## Remote Browser Isolation Protocol Parameters Details to facilitate the RBI connection. Set network and authentication details. ### Browser Settings #### URL Enter the hostname and port for the remote browser isolation connection **Allowed URL Patterns** Defines the allowed URLs to be loaded by the browser **Allowed Resource URL Patterns** Defines the page resources (such as Javascript, Images, etc) allowed to be loaded. **Browser Profile Storage Directory** Browser session data can be retained with the specified path in the container. Example: `/var/lib/guacamole/rbi-profiles/this-site/${GUAC_USERNAME}` **Automatically Create Profile Directory** Creates the path on the container if it doesn't exist. ### Browser Autofill Parameters #### Username Login value or reference to Keeper vault field for filling a username on a login form #### Password Password value or reference to Keeper vault field for filling a password on a login form #### Autofill Targets CSS selector for the page and field elements to autofill. More info [here](/en/keeper-connection-manager/supported-protocols/remote-browser-isolation.md#browser-autofill-parameters). Example: ``` - page: "http://172.31.8.134:8080/login" username-field: "input[name='j_username']" password-field: "input[name='j_password']" ``` ### Audio Settings #### Disable Audio #### Channels #### Bit Depth #### Sample Rate ### Clipboard Settings #### Disable Copying from the Browser #### Disable Pasting from Client ### Display Settings #### Read-only ### Screen Recording Options for recording of the screen. See the [Session Recording](/en/keeper-connection-manager/using-keeper-connection-manager/session-recording.md) section for more information. ### Recording Path Enter the path to save the session recording. We recommend setting this to `${HISTORY_PATH}/${HISTORY_UUID}` #### Recording Name Enter the name of the recording file. #### Exclude Graphics/Streams Choose to exclude graphics or streams from the recording. #### Exclude Mouse Choose to exclude the mouse from the screen recording. #### Include Key Events If selected, include key events that would not otherwise be visible in the recording. #### Automatically Create Recording Path If selected, Keeper Connection Manager will automatically create a path for the recording file. #### Allow Writing to Existing Recording File Allows the connection to write the session recording to a file that already exists. Prior to this option, attempting to write to an existing file would result in a numeric suffix being appended to the new file to avoid overwriting. ## Usage History If you are editing an existing connection, the usage history of the connection is shown in this section ![Usage History Table](/files/5XNfK3siFh7QvXYQTTCk) The usage history table displays the username, date, duration of connection and remote IP address of users connecting to this connection. ## Establishing Connection through Firewalls If you would like to establish a connection to a target server with restricted Ingres connections, check out the documentation on [Creating Connections via reverse SSH tunnel](/en/keeper-connection-manager/supported-protocols/persistent-reverse-ssh-tunnel/connecting-via-reverse-ssh-tunnel-1.md). --- # Agent Instructions: Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter: ``` GET https://docs.keeper.io/en/keeper-connection-manager/using-keeper-connection-manager/creating-connections.md?ask= ``` The question should be specific, self-contained, and written in natural language. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.