APK to protect RDP connections. What are the options?

Question

Data protection

I want the next one, probably already ready - there is some kind of USB crypto device in my pocket, we stick it into the computer (Windows), after which the RDP session automatically rises to a pre-configured server and all traffic is encrypted by this very device.

The ideal option, of course, is that you do not need to install any software on a client site with admin rights.

If I'm too crazy, then what other options are there to protect access to the server using some kind of mobile hardware device?

Thank you.

Answer 1

noVNC might be better to use?
As a bonus, you can play a taxi from any mobile browser that supports HTML5 and websockets. (almost all mobiles already)

Answer 2

My option is probably not the best, since RDP did not dig deep.
If the client part is Windows 7 and higher, then a USB token with a certificate is taken (EKU Client Auth, UPN contains some value), IPSec VPN is configured with EAP-SSL authorization. Nothing will rise automatically, but you can create a shortcut on the user's desktop.

Answer 3

And the cryptography protocol built into RDP (Win7 and higher (and even in XP)) does not work? Not I can just missed something or is there a weak crypt?

Answer 4

for the corporate sector (FSB certificates):
www.s-terra.com/products/productline/post/
western cryptography and gost