Adding a New Connection

Parallels Client allows you to have more than one connection, so you could easily connect to different servers or using different connection properties

To manually add a connection:

1. From the main menu, click File > New Connection or select New Connection in the drop-down menu in Parallels Client.

2. Do one of the following:

   • If you want to create a Parallels RAS connection, enter the Parallels RAS IP address, its hostname (this should be the server where the RAS Secure Gateway resides), or your work email address.

     Note: Connection discovery by email needs to be configured by system administrators. Contact your system administrator to make sure that this option is enabled.

   • If you want to create an RDP connection, click the Create RDP Connection instead link.

3. Click Next.

4. On the next screen, enter the connection properties.

When creating a connection, your system administrator should give you the connection information that must be specified in this dialog. If you received an invitation email from your administrator, you can find this information at the bottom of the message. The information will look similar to the following:

To manually configure the RAS Connection, use the following settings: Server: 192.168.1.10 Port: 443 Connection Mode: Gateway SSL Mode

When creating a Standard RDP connection, you need to know the IP address or hostname of the remote computer you want to connect to.

5. If creating a Standard RDP connection, specify the remote computer IP address or hostname in the Server field. If you are creating a Parallels RAS connection, this field will be auto-populated.

6. The Connection mode drop-down list is enabled only when creating a Parallels RAS connection. Select one of the following options:

   • Gateway Mode. Parallels Client connects to the RAS Secure Gateway and the session connection is tunneled through the first available connection. This mode is ideal for servers that are only reachable via the gateway and do not require a high level of security.

   • Gateway SSL Mode. Same as the gateway mode above, but uses encryption to secure the data.

   • Direct Mode. Parallels Client first connects to the RAS Secure Gateway for the best available terminal server and then connects directly to that server. This is best used when the Parallels Client and the terminal server reside on the same network.

   • Direct SSL Mode. Same as the direct mode above, but uses encryption to secure the data.

7. In the Friendly name field, choose and type a friendly name for this connection.

8. The Advanced settings link opens the Connection Properties dialog where you can specify additional connection properties. For more information, please see Configuring a RAS Connection or Configuring an RDP Connection.

9. Click OK to create a connection and connect to Parallels RAS.

10. This step may, or may not, appear depending on whether the two-factor authentication using the Google Authenticator app is configured in Parallels RAS by the administrator. If Parallels RAS is configured to use Google Authenticator, you will need to take additional steps. First you need to install the Google Authenticator app on your mobile device. When you click Connect in Parallels Client, you'll see a dialog displaying a barcode (also known as QR code) and a secret key. Scan the code (or enter the secret key) into the Authenticator app. The app will generate a one time password. Click Next in Parallels Client and enter the one time password in the OTP field. Click Connect. On every subsequent logon, you'll only have to enter the OTP. For step-by-step instructions, see the Using Google Authenticator subsection below.

On successful connect, the Grant access to Home folder dialog may (or may not, depending on the server side configuration) open automatically. If you see the dialog, you can use it to specify which folders on the local disk drive should be available to remote applications. For more information about configuring local folders, see the description of the Disk drives option in Configuring a RAS Connection > Local Resources or Configuring an RDP Connection > Local Resources.

Using Google Authenticator

Use the following instructions when you see the multi-factor authentication dialog during the login procedure. The dialog is displayed when your IT administrator configures two-factor authentication using the Google Authenticator app.

Important: To use Google Authenticator, the time on your computer must be synchronized with a global NTP time server, such as time.google.com. Otherwise, Google authentication will fail.

To use Google Authenticator, you need to install the Authenticator app on your iOS or Android device. Simply visit Google Play or App Store and install the app. Once the Authenticator app is installed, you are ready to connect to Parallels RAS using two-factor authentication.

To connect to Parallels RAS:

1. Opens Parallels Client and log in using your credentials.

2. The multi-factor authentication dialog opens displaying a barcode (also known as QR code) and a secret key.

3. Open the Google Authenticator app on your mobile device:

   • If this is the first time you use it, tap Begin and then tap Scan a barcode.

   • If you already have another account in Google Authenticator, tap the plus-sign icon and choose Scan a barcode.

4. Go back to your computer and scan the barcode displayed in the Parallels Client login dialog.

   If scanning doesn't work for any reason, go back in the Authenticator app, choose Enter a provided key and then enter the account name and the key displayed in the Parallels Client login dialog.

5. Tap Add account. This will create an account for your RAS connection and display a one time password.

6. Go back to Parallels Client, click Next and enter the one time password in the OTP field.

On every subsequent logon, you only need to type your credentials (or nothing at all if the Save password options was selected) and enter a one time password obtained from the Google Authenticator app (the app will continually generate a new password). Please note that your IT administrator has an ability to reset user accounts in Google Authenticator. If your account is reset, you'll need to repeat the registration procedure described above.