Windows RDP PIV Authentication

[pmev]

Hello,

is it possible to authenticate via RDP at a Proxmox virtualised Windows server with a Yubikey using the PIV certificate?

All our users have plugged in a Yubikey in their USB ports at client side.
On the Yubikey is stored a certificate of the Windows CA.

Thanks
Dave

 

[fabian]

PVE doesn't manage/handle (Windows) RDP at all.. you have to set that up however in the VM itself.

 

[pmev]

Hello Fabian,
thank you for your answer.

Currently we run our CA bare metal on Debian attached with a Yubico HSM2 via USB.

Now we want to virtualise our CA with PVE and need the attached Yubico HSM be recognised via USB.

Will this be possible?

https://www.yubico.com/us/product/yubihsm-2/

Regards
Dave

 

[fabian]

if your system supports USB pass through, you can pass through an USB device or controller to a VM: https://pve.proxmox.com/pve-docs/chapter-qm.html#qm_usb_passthrough

 

[pmev]

Hello Fabian,
thank you for the link.
I also found the SPICE documentation and will go through it.
Regards
Dave