Configuring Parallels Client for Linux

Once Parallels Client for Linux is installed on your computer, you need to configure it, so you can connect to Parallels RAS.

To configure Parallels Client:

1. In the invitation email that you received from your system administrator, find the Configure section and click the Click Here to auto configure the downloaded client link and follow the instructions.

2. Once the Parallels Client is configured, it will open and ask you to log into Parallels RAS.

3. Select the Authentication type from the following:

   • Credentials. Select this option to connect to Parallels RAS by supplying your credentials, such as your domain user name and password.

   • Single Sign-On. This option will be included in the list only if the Single Sign-On module is installed during Parallels Client installation. Select this option to use local system credentials to connect to the remote server

   • Smart card. Select this option to connect to Parallels RAS using a smart card.

Note: Smart card authentication is not supported in Parallels Client for Linux.

Note for Administrators: The allowed authentication type(s) must be specified in the RAS Console in Connection / Authentication.

1. Depending on the authentication type selected, type your user name and password or insert a smart card into a reader. If using a smart card, enter a PIN when prompted.

2. Click Connect.

3. This step may, or may not, appear depending on whether the two-factor authentication using the Google Authenticator app is configured in Parallels RAS by the administrator. If Parallels RAS is configured to use Google Authenticator, you will need to take additional steps. First you need to install the Google Authenticator app on your mobile device. When you click Connect in Parallels Client, you'll see a dialog displaying a barcode (also known as QR code) and a secret key. Scan the code (or enter the secret key) into the Authenticator app. The app will generate a one time password. Click Next in Parallels Client and enter the one-time password in the OTP field. Click Connect. On every subsequent logon, you'll only have to enter the OTP. For step-by-step instructions, see the Using Google Authenticator subsection below. Please note that other TOTPs are also supported (not only Google Authenticator), such as Microsoft Authenticator app.

If the login is successful, the main Parallels Client window opens displaying the published resources that you can use. To open a resource, navigate the published folder tree and double-click a desired resource to open it.

Using Google Authenticator

Use the following instructions when you see the multi-factor authentication dialog during the login procedure. The dialog is displayed when your IT administrator configures two-factor authentication using the Google Authenticator app.

Important: To use Google Authenticator, the time on your computer must be synchronized with a global NTP time server, such as time.google.com. Otherwise, Google authentication will fail.

To use Google Authenticator, you need to install the Authenticator app on your iOS or Android device. Simply visit Google Play or App Store and install the app. Once the Authenticator app is installed, you are ready to connect to Parallels RAS using two-factor authentication.

To connect to Parallels RAS:

1. Opens Parallels Client and log in using your credentials.

2. The multi-factor authentication dialog opens displaying a barcode (also known as QR code) and a secret key.

3. Open the Google Authenticator app on your mobile device:

   • If this is the first time you use it, tap Begin and then tap Scan a barcode.

   • If you already have another account in Google Authenticator, tap the plus-sign icon and choose Scan a barcode.

4. Go back to your computer and scan the barcode displayed in the Parallels Client login dialog.

   If scanning doesn't work for any reason, go back in the Authenticator app, choose Enter a provided key and then enter the account name and the key displayed in the Parallels Client login dialog.

5. Tap Add account. This will create an account for your RAS connection and display a one time password.

6. Go back to Parallels Client, click Next and enter the one-time password in the OTP field.

On every subsequent logon, you only need to type your credentials (or nothing at all if the Save password options was selected) and enter a one-time password obtained from the Google Authenticator app (the app will continually generate a new password). Please note that your IT administrator has an ability to reset user accounts in Google Authenticator. If your account is reset, you'll need to repeat the registration procedure described above.