Passwordstate has two first-in-class Remote Access Solutions, typically referred to as Remote Session Launchers, a Browser Based Launcher and a Client Based Launcher. The Remote Session Launchers are provided as part of the core Passwordstate product, with source files located in your Passwordstate install directory. Details on the differences between the two launchers can be found here.
As of Passwordstate build 8844 we’ve introduced an Automated installation for the Remote Session Launcher Gateway. For detailed instructions please refer to the Remote Session Launcher Install Guide.
Overview and Automated Installation Changes
Let’s talk about whether this is an automated or semi-automated installer first. As long as you’re performing the installation on your Passwordstate Server, and are using the default installation directory, then it’s fully automated. In the event you wish to install the Gateway on another server, or wish to change default settings, then you’ll need to perform some steps outside of this process (it then becomes a semi-automated installation). For the steps associated with a semi-automated install please refer to the Remote Session Launcher Install Guide above.
Source files for the “Browser Based Gateway” are included with your Passwordstate installation. They are downloaded by default and are typically located in c:\inetpub\passwordstate\hosts\gateway.
Once the installation is completed all SSH and RDP sessions will be tunnelled through the Gateway, and you won’t be required to perform any client installs. All future RDP and SSH sessions will be initiated through your HTML5 browser, from any device that can access your Passwordstate Website.
During the Installation the following changes will be performed (based on a default install on your Passwordstate Server);
- Creates a logfile in the same directory where you execute the PowerShell script
- Downloads OpenJDK 13 (approximately 200 MB) from Azul Systems and extracts this to C:\Program Files (x86)
- Appends the file path C:\Program Files (x86)\OpenJDK\bin to the PATH Environment Variable
- Adds a new Environment Variable called JAVA_HOME set to C:\Program Files (x86)\OpenJDK
- Automatically exports your certificate from your https binding in IIS
- Installs a Windows Service called Passwordstate-Gateway
- Removes all temporary source files that were created during the installation
Download and Extract Files
As a general rule we’d recommend that you always grab the latest version of the source files. These can be obtained in a ZIP file here and should be saved to a temporary folder on your Passwordstate server. Once you’ve saved the file, you’ll need to extract the two files 7za.exe and Install-Gateway-Internal.ps1 as per the image below;
Running the PowerShell Script
Once this has been done, you’ll need to open a GUI that can run PowerShell scripts (files ending with an extension of .ps1). For the purpose of this blog I’m using Microsoft’s ISE (Integrated Scripting Environment). It’s important to start ISE with Run as administrator to ensure adequate privileges as per the image below;
Once ISE has loaded, you’ll need to open the extracted PowerShell script Install-Gateway-Internal.ps1 and then either press F5 or click the Run button shown;
This will install the Remote Session Launcher Gateway and you should see the successful completion messages as per the image below;
It’s as simple as that! All RDP and SSH sessions will now be initiated through your HTML5 browser!
As always, your feedback is welcome via support@clickstudios.com.au.