Machines management¶
The Machines management module gathers the target RDP servers on which a connection can trigger the recording of a session by CyberElements without that session having been started from the user portal. It is the heart of the direct access feature: declaring the machine, choosing the connection mode (with or without an agent), setting the recording policy and — in agent mode — deploying or removing the agent remotely.
Machine list¶
The main grid displays the machines in a paginated view (15, 25 or 50 rows per page). When empty, it displays No available machine.
| Column | Description |
|---|---|
| Name | Machine name. |
| Host (CN of the certificate) | Common name of the certificate installed on the machine, as entered for agent mode. |
| Recorded videos | Indicates whether the sessions of that machine are recorded as videos. |
| Notification text | Message displayed to the user on a direct connection. |
Besides the +, Edit and × actions, the toolbar carries the Deploy Agent and Remove Agent buttons (see section Agent actions) and a search field filtering the list on the fly — 700 ms after the last keystroke, or immediately with Enter.
Add a machine¶
The + button opens the Add machine window.
General fields¶
| Field | Description |
|---|---|
| Name | Mandatory. Must match the common name (CN) of the certificate installed on the machine. |
| Notification text | Message displayed on the user's screen on a direct connection. |
| Record sessions as videos | Ticked by default. Ticked, the video and every event are recorded; unticked, only the events are. |
| Display the recording marker | Shows the user a visual marker indicating their session is being recorded. |
| Check video integrity at playback | Stores a hash allowing the integrity of the videos to be checked on playback. |
| Allow manual removal of archives | Ticked by default. Allows an authorised operator to manually delete this machine's archives. |
| Delete archives automatically | Enables the automatic deletion of archives once a delay expires, and unlocks the next field. |
| Archives conservation time (days) | Enabled only if the previous option is ticked. Minimum 1, default value 365. |
Agent mode¶
The Use agent mode checkbox is ticked by default; unticking it greys out the Agent mode box.
| Field | Description |
|---|---|
| Host (CN of the certificate) | Common name of the machine certificate. |
Certificate requirement
The machine's Name and its Host (CN of the certificate) must match the common name of the certificate installed on the machine: that certificate is the one the agent uses. The match also conditions the agent actions, deployment as well as removal. Without agent mode, on the other hand, requires no certificate.
Without agent mode¶
The Use no agent mode checkbox is ticked by default; unticking it greys out the Without agent mode box.
| Field | Description |
|---|---|
| Name or address | Mandatory. DNS name or IP address used for the agentless connection. |
| Console mode | Connects to the remote machine console only. |
| Restrictedadmin option | Enables restricted admin mode: no credentials are stored on the remote machine. |
| Disable Kerberos | Disables Kerberos authentication towards the remote machine. |
At least one mode must be kept
If both the Use agent mode and Use no agent mode checkboxes are unticked, validation is refused with the You must use at least one mode message.
Edit a machine¶
Select the machine in the list and click the Properties icon (or double-click the row). The Edit machine window offers the same fields, the Name becoming plain displayed text: it can no longer be changed after creation.
Delete a machine¶
Select one or more machines and click the × button. A confirmation is requested, in the singular or plural depending on the selection.
Agent actions¶
The Deploy Agent and Remove Agent toolbar buttons each open a window of the same name, and act remotely on the designated machines. If machines are selected in the grid when the button is clicked, the Target Server field is pre-filled with their names, separated by commas.
Prerequisite: certificate match
These actions only succeed if the machine name matches the CN of the configured certificate.
Deploy Agent¶
Every field of this window is mandatory.
| Field | Description |
|---|---|
| Target Server | List of machine names, separated by commas. |
| Target drive | Letter of the drive to install the agent on. |
| Target directory | Installation path. The " and ' characters are rejected on input. |
| Gateway | Drop-down list of the declared Edge Gateways. The platform's default gateway is excluded from it — but it remains offered in the Remove Agent window. |
| Domain | Authentication domain used for the installation. |
| Username / Password | Credentials used for the remote installation. |
| Sessions to record | Three exclusive choices: Record remote sessions (RDS) only, Record all sessions, or Record no session — the latter being selected by default. |
| Use a different certificate than the target | When ticked, unlocks the next field. |
| Certificate name | Mandatory if the previous checkbox is ticked. Must match the CN of a certificate installed in the local workstation's Certificate Manager. |
| Close the session if no gateway could be contacted | Ticked by default. Unticked, the session stays open even if no Edge Gateway is reachable for recording. |
Validate sends the deployment command, then the console tracks the installation state by polling the server every 5 seconds.
Remove Agent¶
The Remove Agent window only asks for the connection details: Target Server, Gateway, Domain, Username and Password. Validate sends the removal command.