VNC Connections

Keeper Connections - VNC Protocol

Overview

KeeperPAM enables zero-trust privileged session management for target infrastructure using the VNC protocol. This guide explains how to set up VNC connections on your PAM Machine Records in the Keeper Vault. Secure VNC sessions are established from the Vault, through the Keeper Gateway, and directly to target devices.

Prerequisites

Prior to following this guide, familiarize yourself with the prerequisites on the Connection's Getting Started page.

The following PAM records are needed in order to successfully setup this protocol:

PAM Record	Definition
PAM Configuration	The PAM Configuration contains information of your target infrastructure
PAM Machine Record	The PAM Machine record contains information of the endpoint you want to establish an VNC protocol connection to.
PAM User Record	The PAM User record contains the VNC credentials that will be used to connect to the machine

This guide will use a Azure VM. For more details on how this is setup on the PAM Machine Record, visit the following page:

Example: Azure Virtual Machine

PAM Settings - Configuring VNC Protocol

Accessing Connection Settings

After creating a PAM Record Type (PAM Machine, PAM Database, or PAM Directory) with your target endpoint, navigate to the Connection Section on the PAM Settings screen by:

1. Editing the PAM Record

2. Clicking on "Set Up" in the PAM Settings section

3. Navigate to the "Connection" section in the prompted window

Configuring Connection Settings

Prior to configuring the VNC protocol settings on the PAM Settings screen, the following fields are all required and need to be configured:

Field	Definition
PAM Configuration	This is the PAM Configuration that contains the details of your target infrastructure and provides access to the target configured on the PAM Record
Administrative Credential Record	This is the linked PAM User that will be used to authenticate to the target and perform administrative operations on it.

The following table lists all the configurable settings for the VNC protocol on the PAM Settings:

Field	Definition
Protocol	Required The protocol to be configured on the record. The protocol settings will be populated based on the selected protocol. In this guide, the VNC protocol should be selected
Enable Connection	Required To enable connection for this record, this toggle needs to be enabled
Graphical Session Recording	When enabled, graphical session recordings will be enabled for this record
Connection Port	The port used to establish the selected protocol connection. By Default, this will be the port value defined on the PAM Machine record. The port specified here will override the default port. For VNC the port is 5900
Destination Host	Required if using a VNC Repeater such as UltraVNC Repeater The destination host to request when connecting to a VNC proxy such as UltraVNC Repeater
Destination Port	Required if using a VNC Repeater such as UltraVNC Repeater The destination port to request when connecting to a VNC proxy such as UltraVNC Repeater
Can copy to clipboard	If enabled, text copied within the connected protocol session will be accessible by the user
Can paste from clipboard	If enabled, user can paste text from clipboard within the connected protocol session

Session Recordings - VNC Protocol

VNC Session Recordings

For this protocol, graphical data, including timing information, is recorded. For more details on the recordings and how to access them, see the Session Recording & Playback docs.