Rublon

Secure Remote Access

By

Last updated on December 17, 2024

Rublon MFA for RD Web adds Multi-Factor Authentication to your Microsoft Remote Desktop Web Access, RD Web Client, and RD Web Feed logons.

Installation

My installation fails. What can I do?

First of all, note that you need administrator privileges to successfully install Rublon MFA for RD Web.

In addition to this, when an installation error occurs, the ExtendedLogs.log file is created in the directory, in which the installer was launched. The ExtendedLogs.log file contains additional information that may be helpful when debugging your issue.

Analyzing the ExtendedLogs.log file might help you troubleshoot your issue. If you cannot solve your problem, contact us at Rublon Support. Do not forget to attach the two aforementioned log files generated by the installer!

Login Issues

When I try to log in to RD Web Access or RD Web Client, I get a “Something went wrong while authenticating with Rublon Multi-Factor Authentication.” message.




In addition, in Rublon MFA for RD Web’s log file located in C:\Rublon\RDWeb\, I found an error that says:

“ERROR Rublon.RDWeb.WebAccessModule “rublon\bob(6: o1pj1mpffzqsijo1gg4sgff4|Forms)” “IIS APPPOOL\RDWebAccess” “Error:300fd7f7-f5a4-44c8-b9b4-a0a78cb5f53b: Blocking access to the RDWeb since the following error occurred:   Rublon.Sdk.Core.Exception.APIException: Unexpected response HTTP status code: NotFound”

Look up the settings of Rublon MFA for Remote Desktop Web in Windows Registry (HKEY_LOCAL_MACHINE\SOFTWARE\Rublon\RDWeb) and ensure RublonApiServer is set to https://core.rublon.net (without a slash at the end of the address).

Configuration

Where can I find Rublon MFA for RD Web logs?

In case of any issues, we recommend you look up your log files located in C:\Rublon\RDWeb\ by default. Send the files to Rublon Support. Attach the description of your issue and the estimated time the error took place.

Note that a log file that exceeds 100 KB is archived, and a new log file is created, hence the possibility of more than one file.

My log file is not being refreshed.

Run the following command:

iisreset

This command will restart the IIS service and all applications hosted on it, which fixes the issue in most cases. If your issue persists, contact us at Rublon Support.

Do RD Web Client and RD Web Access share a common Rublon session?

Yes, RD Web Client and RD Web Access share a common Rublon session. This means that after a user completes two authentication factors while logging in to the RD Web Client, they do not need to complete the second factor when logging in to the RD Web Access. The user can end the session by logging out of either RD Web Client or RD Web Access. By default, the session expires after 8 hours. You can change the time after which the session expires using the AuthCookieLifeDuration parameter.

I’m getting a System.Threading.ThreadAbortException error in the logs

If you are getting a System.Threading.ThreadAbortException: Thread was being aborted. error in the logs, it means that the maximum HTTP request time has expired and the IIS server has interrupted the thread. If the issue persists, ensure that the maxRublonAuthWaitTime in Windows Registry and executionTimeout in C:\windows\web\rdweb\web.config have the same value.

How to generate new values of SecretSessionKey and SecretStorageKey?

The Rublon MFA for RD Web connector uses the secretSessionKey to sign cookies. Also, the connector uses the secretStorageKey to sign temporary files. You should treat these two values like passwords and should not reveal them to anybody. If the value of either of these keys leaks (e.g., is revealed on a screenshot), you must regenerate it.

To generate a new value of SecretSessionKey or SecretStorageKey, open the Command Prompt or PowerShell and execute one of the following commands (InstallTools is an application located in the directory where the RDWeb connector has been installed).

To generate a new value of SecretSessionKey:
InstallTools SecretSessionKey -o generate -r SOFTWARE\Rublon\RDWeb\ -n SecretSessionKey

To generate a new value of SecretStorageKey:
InstallTools SecretSessionKey -o generate -r SOFTWARE\Rublon\RDWeb\ -n SecretStorageKey

The preceding commands generate new keys and add them to Windows Registry. Note that after executing the preceding commands, all ongoing Rublon sessions will end and users will have to re-authenticate with Rublon.

Users are experiencing disconnections every X hours

The RDWeb portal has different timeouts depending on whether you chose ‘private’ or ‘public’ for the PC options when you logged in. The default timeouts are 240 minutes for private connections and 20 minutes for public connections. If you want to change these timeouts, you need to modify some settings in the ‘Internet Information Services Management Console’ on the RDWeb server:

1. Open the Internet Information Services Management Console on the RDWeb server:

2. Go to <SERVER_NAME> → Sites → Default Web Site → RDWeb → Pages → Application Settings.

3. Change RDSWeb Timeouts (PrivateModeSessionTimeoutIn… and PublicModeSessionTimeoutIn…).

4. If the changes do not take effect right away, open the command line and type iisreset.

Rublon MFA for Remote Desktop Web Access

Rublon MFA for Remote Desktop Web – Release Notes

Rublon MFA for Remote Desktop Web Client