Request the integration
For help requesting the integration, see Integrate Duo with an application.
How to setup DUO MFA for Windows login and RDP. To silently remove Duo Authentication for Windows Logon (RDP) from your environment, run the following command from PowerShell or an elevated command prompt: duo-win-login-4.0.3.exe /x /s /v/qn Note: The command may need to be modified to reflect the installed version number.
Install the integration
Duo Remote Desktop Gateway Client
Once you have the API hostname, integration key, and secret key, you can run the installer to set up the integration. For instructions, go to Duo Authentication for Windows Logon and RDP and click Run the Installer.
Duo Microsoft Rdp Download
Install the integration on a machine with a private IP address
If you have a server with an IU private IP address, you will need to have a proxy set up so that the machine can communicate with the Duo servers. Servers with private IP addresses in Data Center systems can still connect to the Duo authentication servers, because a universal rule has been added that automatically grants proxy access.
For more about the private IP proxy, including the proxy service IP addresses, see About proxy services at IU.
To complete the installation on a server that needs to use this proxy:
- Open PowerShell as an administrator, and enter the following command:
- Complete the installation by following the instructions at Duo Authentication for Windows Logon and RDP, under 'Run the Installer'.
- In PowerShell as an administrator, enter the following command:
- To configure the proxy, follow the instructions at Duo Authentication for Windows Logon and RDP - FAQ. Enter the following for each variable:
If you notice that a machine on a private IP is not receiving Windows updates, you may need to run the following command: