{"componentChunkName":"component---src-templates-manual-template-tsx","path":"/manuals/client-user/64/defining-profiles.html","webpackCompilationHash":"d1750f6cc413894a8b5c","result":{"data":{"promoBlocks":{"edges":[{"node":{"contentful_id":"47glnSpWzXeFylv2vfQEF8","internal":{"type":"ContentfulPromotionBlock"},"title":{"internal":{"type":"ContentfulHeading"},"contentful_id":"7KIOfSfgwJnCXuvRN6CfrP","textContent":"Standing privileges are a risk with PAM","color":"black","size":"medium"},"subTitle":null,"content":{"nodeType":"document","internal":{"content":"{\"nodeType\":\"document\",\"data\":{},\"content\":[{\"nodeType\":\"paragraph\",\"content\":[{\"nodeType\":\"text\",\"value\":\"Start your journey towards a just-in-time (JIT) model with zero standing privileges (ZSP). Read 'Remove Standing Privileges Through a Just-In-Time PAM Approach' by Gartner , courtesy of SSH.COM.\\n \\n\",\"marks\":[],\"data\":{}}],\"data\":{}}]}"}},"callToAction":{"internal":{"type":"ContentfulButton"},"contentful_id":"19EUesynV2Z7HHcuJk0BAS","content":"Download Gartner research","internalLink":null,"externalLink":"https://info.ssh.com/gartner_research_privileged_access_management","assetLink":null,"anchor":null},"picture":{"internal":{"type":"ContentfulAsset"},"contentful_id":"2ClylmBswcfDx4XdO7NTmL","title":"ICON Gartner ZSP","description":"","file":{"url":"//images.ctfassets.net/0lvk5dbamxpi/2ClylmBswcfDx4XdO7NTmL/78e899153ed66aec3b03b9a2cacd112d/ICON_Gartner_ZSP_ICON_Gartner.png","contentType":"image/png"},"fluid":{"aspectRatio":1,"src":"//images.ctfassets.net/0lvk5dbamxpi/2ClylmBswcfDx4XdO7NTmL/78e899153ed66aec3b03b9a2cacd112d/ICON_Gartner_ZSP_ICON_Gartner.png?w=3000&q=50","srcSet":"//images.ctfassets.net/0lvk5dbamxpi/2ClylmBswcfDx4XdO7NTmL/78e899153ed66aec3b03b9a2cacd112d/ICON_Gartner_ZSP_ICON_Gartner.png?w=750&h=750&q=50 750w,\n//images.ctfassets.net/0lvk5dbamxpi/2ClylmBswcfDx4XdO7NTmL/78e899153ed66aec3b03b9a2cacd112d/ICON_Gartner_ZSP_ICON_Gartner.png?w=1500&h=1500&q=50 1500w,\n//images.ctfassets.net/0lvk5dbamxpi/2ClylmBswcfDx4XdO7NTmL/78e899153ed66aec3b03b9a2cacd112d/ICON_Gartner_ZSP_ICON_Gartner.png?w=1601&h=1601&q=50 1601w","sizes":"(max-width: 3000px) 100vw, 3000px"},"fixed":{"width":3000,"height":3000,"src":"//images.ctfassets.net/0lvk5dbamxpi/2ClylmBswcfDx4XdO7NTmL/78e899153ed66aec3b03b9a2cacd112d/ICON_Gartner_ZSP_ICON_Gartner.png?w=3000&q=50","srcSet":""}},"centered":true,"indentMainContent":null,"transparentBackground":null,"imageScale":70,"imagePadding":null,"name":"WIKI migration side promo block2","product":null,"funnel":null,"topic":null,"keywords":null,"type":null,"priority":null,"globalOverride":null}},{"node":{"contentful_id":"6dfNaA1UlY4bADKQk6awhs","internal":{"type":"ContentfulPromotionBlock"},"title":{"internal":{"type":"ContentfulHeading"},"contentful_id":"49Tb2wSR21P5C2cpcgMZ3","textContent":"Get Multi-cloud PAM software - for free!","color":"black","size":"medium"},"subTitle":null,"content":{"nodeType":"document","internal":{"content":"{\"data\":{},\"content\":[{\"data\":{},\"content\":[{\"data\":{},\"marks\":[],\"value\":\"PrivX® Free replaces your in-house jump hosts and combines your AWS, GCP and Azure access into one multi-cloud solution.\\n \\n\",\"nodeType\":\"text\"}],\"nodeType\":\"paragraph\"}],\"nodeType\":\"document\"}"}},"callToAction":{"internal":{"type":"ContentfulButton"},"contentful_id":"1dmQ13jyyZ46ID07eVNVFb","content":"PrivX Free","internalLink":null,"externalLink":"https://info.ssh.com/privx-free-access-management-software","assetLink":null,"anchor":null},"picture":{"internal":{"type":"ContentfulAsset"},"contentful_id":"4UUYdjING8micwZQur5o6d","title":"ICON computer (search)","description":"","file":{"url":"//images.ctfassets.net/0lvk5dbamxpi/4UUYdjING8micwZQur5o6d/1b378a0f4646075c7a4788f1afffbabe/ICON_computer__search_.svg","contentType":"image/svg+xml"},"fluid":{"aspectRatio":null,"src":null,"srcSet":null,"sizes":null},"fixed":{"width":null,"height":null,"src":null,"srcSet":null}},"centered":true,"indentMainContent":null,"transparentBackground":null,"imageScale":70,"imagePadding":null,"name":"WIKI migration side promo block1","product":null,"funnel":null,"topic":null,"keywords":null,"type":null,"priority":null,"globalOverride":null}}]}},"pageContext":{"isCreatedByStatefulCreatePages":false,"body":"<div bgcolor=\"white\" text=\"black\" link=\"#0000FF\" vlink=\"#840084\" alink=\"#0000FF\"><table width=\"100%\" border=\"0\" cellspacing=\"0\" cellpadding=\"0\" class=\"header\"><tbody><tr><td><a href=\"http://www.ssh.com/\"><img src=\"images/colorbar_blue.png\" alt=\"SSH\" width=\"100%\" height=\"80\" border=\"0\" style=\"position: relative; top:0px;left:0px;\"><img src=\"images/logo_ssh_nega.png\" height=\"40\" border=\"0\" style=\"position: absolute; top:20px;left:55px;\"></a></td></tr></tbody></table><div class=\"navheader\"><table width=\"100%\" summary=\"Navigation header\"><tr><td width=\"40%\" align=\"left\"></td><th width=\"20%\" align=\"center\"></th><td width=\"40%\" align=\"right\"><a accesskey=\"h\" href=\"index.html\"><img src=\"images/home.gif\" alt=\"Home\"></a><a href=\"ix01.html\"><img src=\"images/index.gif\"></a> <a accesskey=\"p\" href=\"stconf-general.html\"><img src=\"images/prev.gif\" alt=\"Prev\"></a> <a accesskey=\"u\" href=\"broker-conf-windows.html\"><img src=\"images/up.gif\" alt=\"Up\"></a> <a accesskey=\"n\" href=\"stconf-userauth.html\"><img src=\"images/next.gif\" alt=\"Next\"></a>  </td></tr></table></div><div class=\"sect2\"><div class=\"titlepage\"><div><div><h3 class=\"title\"><a name=\"defining-profiles\"></a>Defining Connection Profiles</h3></div></div></div><a class=\"indexterm\" name=\"idp6509\"></a><a class=\"indexterm\" name=\"idp6511\"></a><a class=\"indexterm\" name=\"idp6513\"></a><p>Under <span class=\"command\"><strong>Connection Profiles</strong></span> you can configure \nseparate connection settings for each Secure Shell server you connect to. \nYou can also configure several profiles for the same server, for example, \nwith different user accounts.</p><div class=\"itemizedlist\"><a class=\"indexterm\" name=\"idp6564\"></a><p>Click <span class=\"command\"><strong>Test Connection</strong></span> to open a connection to the \nremote server. You need to connect to the server once in order to get the server's \nhost key. Tectia Client will prompt you to verify the received key. Check \nthat it is valid, preferably by calling the server's administrator, and save \nthe validated key. After this, the locally saved information on the key will \nbe used in the authentication process automatically.</p><ul class=\"itemizedlist\" style=\"list-style-type: disc; \"><li class=\"listitem\"><p>To add a connection profile, click <span class=\"command\"><strong>Add profile</strong></span> in \nthe <span class=\"command\"><strong>Connection Profiles</strong></span> page. Enter a name for the profile \nand click <span class=\"command\"><strong>OK</strong></span>. By default, the profile name is also used \nas the hostname of the server.</p><p>Newly created connection profiles will inherit the default values for \nauthentication, ciphers, MACs, KEXs, and advanced server settings defined under \nthe <span class=\"command\"><strong>General → Defaults</strong></span> page \n(<a class=\"xref\" href=\"stconf-general.html#stconf-default\" title=\"Defining Default Connection Settings\">Defining Default Connection Settings</a>). The values can be customized on the \nprofile-specific tabbed pages.</p><p>Define the profile settings in the tabbed view as described in\n<a class=\"xref\" href=\"defining-profiles.html#stconf-connections\" title=\"Defining Connection Settings\">Defining Connection Settings</a>,\n<a class=\"xref\" href=\"defining-profiles.html#stconf-authentication\" title=\"Defining Authentication\">Defining Authentication</a>,\n<a class=\"xref\" href=\"defining-profiles.html#stconf-cipher\" title=\"Defining Ciphers\">Defining Ciphers</a>,\n<a class=\"xref\" href=\"defining-profiles.html#stconf-mac\" title=\"Defining MACs\">Defining MACs</a>,\n<a class=\"xref\" href=\"defining-profiles.html#stconf-kex\" title=\"Defining KEXs\">Defining KEXs</a>,\n<a class=\"xref\" href=\"defining-profiles.html#stconf-server\" title=\"Defining Server Connections\">Defining Server Connections</a>,\n<span class=\"phrase\">\n<a class=\"xref\" href=\"defining-profiles.html#stconf-proxy\" title=\"Defining Proxy Settings\">Defining Proxy Settings</a>,\n<a class=\"xref\" href=\"defining-profiles.html#stconf-tunneling\" title=\"Defining Tunneling\">Defining Tunneling</a>,\n<a class=\"xref\" href=\"defining-profiles.html#stconf-window\" title=\"Defining Windows Settings\">Defining Windows Settings</a>,\n<a class=\"xref\" href=\"defining-profiles.html#stconf-color\" title=\"Defining Color Settings\">Defining Color Settings</a>,\n<a class=\"xref\" href=\"defining-profiles.html#stconf-keyboard\" title=\"Defining Terminal Settings\">Defining Terminal Settings</a>,\n<a class=\"xref\" href=\"defining-profiles.html#stconf-filetransfer\" title=\"Defining File Transfer Settings\">Defining File Transfer Settings</a>, and\n<a class=\"xref\" href=\"defining-profiles.html#stconf-favorites\" title=\"Defining Favorite Folders\">Defining Favorite Folders</a>.</span></p></li><li class=\"listitem\"><p>You can organize the connection profiles in folders for each server \nyou are connecting to. To add a folder for connection profiles, click \n<span class=\"command\"><strong>Add folder</strong></span> in the <span class=\"command\"><strong>Connection Profiles</strong></span> \npage. Enter a name for the folder and click <span class=\"command\"><strong>OK</strong></span>. Add \nconnection profiles to the folder by selecting the folder and clicking \n<span class=\"command\"><strong>Add profile</strong></span>. The profile is created into the \nfolder.</p></li><li class=\"listitem\"><p>To move a profile to a different profile folder, select the profile \nfrom the list and click <span class=\"command\"><strong>Move</strong></span>. Select the folder where you \nwant to move the profile from the drop-down list and click \n<span class=\"command\"><strong>OK</strong></span>.</p></li><li class=\"listitem\"><p>To rename a connection profile or a profile folder, right-click on a profile \nor a folder name under <span class=\"command\"><strong>Connection Profiles</strong></span> and click <span class=\"command\"><strong>Rename</strong></span>. Type a new name, press <span class=\"command\"><strong>Enter</strong></span>, and click \n<span class=\"command\"><strong>OK</strong></span> or <span class=\"command\"><strong>Apply</strong></span>.</p></li><li class=\"listitem\"><p>To remove a connection profile or a profile folder, select a profile \nor a folder and click <span class=\"command\"><strong>Delete</strong></span>. You will be asked for \nconfirmation. Click <span class=\"command\"><strong>OK</strong></span> to proceed with the \ndeletion.</p><p>Note that removing a profile folder removes also all profiles in \nit.</p></li><li class=\"listitem\"><a class=\"indexterm\" name=\"idp6569\"></a><a class=\"indexterm\" name=\"idp6571\"></a><p>To add a shortcut to the created profile on your desktop on Windows, \nclick <span class=\"command\"><strong>Create Shortcut</strong></span>. When you double-click the icon, it \nwill directly open a connection to the host defined in the profile.</p></li><li class=\"listitem\"><a class=\"indexterm\" name=\"idp6577\"></a><a class=\"indexterm\" name=\"idp6580\"></a><p>To add the created profile to your Windows taskbar, right-click the newly \ncreated desktop shortcut icon and then click <span class=\"guilabel\"><strong>Pin to Taskbar</strong></span>\non the shortcut menu. When you click the pinned Tectia SSH Terminal GUI taskbar button, a new Tectia SSH Terminal GUI \nwindow will appear, opening a Secure Shell connection with the settings defined in \nthe profile (hostname, port, user name etc.).</p></li></ul></div><div class=\"sect3\"><div class=\"titlepage\"><div><div><h4 class=\"title\"><a name=\"stconf-connections\"></a>Defining Connection Settings</h4></div></div></div><p>On the <span class=\"command\"><strong>Connection</strong></span> tab, you can define the protocol \nsettings used in the connection. Any changed connection settings will take \neffect the next time you log in. </p><div class=\"figure\"><a name=\"broker-profile-connection\"></a><div class=\"figure-contents\"><div class=\"mediaobject\" align=\"center\"><img src=\"images/broker-connection.png\" align=\"middle\" alt=\"Configuring connection profiles\"></div></div><p class=\"title\"><b>Figure A.15. Configuring connection profiles</b></p></div><br class=\"figure-break\"><div class=\"variablelist\"><dl class=\"variablelist\"><dt><span class=\"term\"><span class=\"command\"><strong>Host Name</strong></span></span></dt><dd><p>Specify the host name or the IP address of the remote host computer to \nwhich you want to connect with the profile.</p></dd><dt><span class=\"term\"><span class=\"command\"><strong>Port Number</strong></span></span></dt><dd><p>Define the listen port on the Secure Shell server. The default SSH \nport number is 22. In case you know that the remote server uses another \nport, enter the number in the <span class=\"command\"><strong>Port Number</strong></span> field. </p><div class=\"note\" style=\"margin-left: 0.5in; margin-right: 0.5in;\"><table border=\"0\" summary=\"Note\"><tr><td rowspan=\"2\" align=\"center\" valign=\"top\" width=\"25\"><img alt=\"[Note]\" src=\"images/note.gif\"></td><th align=\"left\">Note</th></tr><tr><td align=\"left\" valign=\"top\"><p>A Secure Shell server program must be listening to the specified \nport on the remote host computer or the connection attempt will not \nsucceed. If you are unsure which port the remote host computer is \nlistening to, contact the system administrator of the remote host. </p></td></tr></table></div></dd><dt><span class=\"term\"><span class=\"command\"><strong>User Name</strong></span></span></dt><dd><p>Select <span class=\"command\"><strong>Use current Windows user name</strong></span> if the \nconnection should always be made using the currently logged in Windows user \nname. This is similar to defining <code class=\"code\">%USERNAME%</code> (note the percent \nsigns) as the user name. <code class=\"code\">%USERNAME%</code> reads the actual user name \nfrom an environment variable.</p><p>Select <span class=\"command\"><strong>Specify user name</strong></span> and enter the user name, \nif you want to define the user name this profile will use when connecting \nto the remote host computer.</p><p>Select <span class=\"command\"><strong>Prompt user for the user name</strong></span> if the user \nshould enter the user name manually every time when connecting.</p><p>Select <span class=\"command\"><strong>Use the Default Connection's user name</strong></span> \nif you want to apply the generic user name defined in the \n<span class=\"command\"><strong>General - Default Connection</strong></span> settings.</p></dd><dt><span class=\"term\"><span class=\"command\"><strong>Advanced</strong></span>\n<a class=\"indexterm\" name=\"idp6627\"></a>\n</span></dt><dd><p>In <span class=\"command\"><strong>Compression</strong></span>, select the desired compression \nsetting from the drop-down menu. Valid choices are <span class=\"command\"><strong>zlib</strong></span> \nand <span class=\"command\"><strong>none</strong></span>. Compression is disabled by default. </p><p>In <span class=\"command\"><strong>Tunnel using profile</strong></span>, use the drop-down list to \nselect a profile for creating a nested tunnel. The first tunnel will be \ncreated to the server defined in the current connection profile, and from \nthere, the second tunnel will be created to a host defined in the profile \nselected with the <span class=\"command\"><strong>Tunnel using profile</strong></span> setting. By \ndefault, tunneling is disabled.</p></dd><dt><span class=\"term\"><span class=\"command\"><strong>Usage</strong></span></span></dt><dd><p>This field shows information on where the defined profile is used.\n</p></dd></dl></div></div><div class=\"sect3\"><div class=\"titlepage\"><div><div><h4 class=\"title\"><a name=\"stconf-authentication\"></a>Defining Authentication</h4></div></div></div><a class=\"indexterm\" name=\"idp6644\"></a><p>On the <span class=\"command\"><strong>Authentication</strong></span> tab, you can define the \nuser authentication methods for the profile.</p><div class=\"figure\"><a name=\"idp6648\"></a><div class=\"figure-contents\"><div class=\"mediaobject\" align=\"center\"><img src=\"images/broker-profile-auth.png\" align=\"middle\" alt=\"Configuring authentication methods for the profile\"></div></div><p class=\"title\"><b>Figure A.16. Configuring authentication methods for the profile</b></p></div><br class=\"figure-break\"><div class=\"orderedlist\"><ol class=\"orderedlist\" type=\"1\"><li class=\"listitem\"><p>Select the <span class=\"command\"><strong>Use Defaults</strong></span> check box to use the \nauthentication methods defined on the <span class=\"command\"><strong>Default Connection</strong></span> \npage (<a class=\"xref\" href=\"stconf-general.html#default-auth\" title=\"Defining Authentication\">Defining Authentication</a>), or clear the check box to define a \ncustom list of authentication methods.</p><p>To add a new authentication method to the list, click \n<span class=\"command\"><strong>Add</strong></span> and select the method from the drop-down menu.</p><p>To remove an authentication method, select a method from the list and \nclick <span class=\"command\"><strong>Delete</strong></span>.</p><p>Use the arrow buttons to organize the preferred order of the \nauthentication methods. The first method that is allowed by the Secure Shell \nserver is used. Note that in some cases, the server may require several \nauthentication methods to be passed before allowing login.</p><a class=\"indexterm\" name=\"idp6664\"></a><a class=\"indexterm\" name=\"idp6666\"></a><a class=\"indexterm\" name=\"idp6668\"></a><a class=\"indexterm\" name=\"idp6671\"></a><a class=\"indexterm\" name=\"idp6673\"></a><a class=\"indexterm\" name=\"idp6675\"></a><a class=\"indexterm\" name=\"idp6678\"></a><a class=\"indexterm\" name=\"idp6682\"></a><a class=\"indexterm\" name=\"idp6685\"></a><p>Possible methods for user authentication are: </p><div class=\"itemizedlist\"><ul class=\"itemizedlist\" style=\"list-style-type: disc; \"><li class=\"listitem\"><p><span class=\"command\"><strong>Public-key</strong></span>: Use public-key \n  authentication. See also <a class=\"xref\" href=\"stconf-userauth.html\" title=\"Defining User Authentication\">Defining User Authentication</a>. \n  </p></li><li class=\"listitem\"><p><span class=\"command\"><strong>Password</strong></span>: Use a password for \n  authentication. </p></li><li class=\"listitem\"><p><span class=\"command\"><strong>Keyboard-interactive</strong></span>: \n  Keyboard-interactive is designed to allow the Secure Shell client to \n  support several different types of authentication methods, including RSA \n  SecurID, and PAM. <span class=\"phrase\"> For more information \n  on keyboard-interactive, see <a class=\"xref\" href=\"userauth-kbi.html\" title=\"User Authentication with Keyboard-Interactive\">User Authentication with Keyboard-Interactive</a>.</span> \n  </p></li><li class=\"listitem\"><p><span class=\"command\"><strong>GSSAPI</strong></span>: GSSAPI (Generic Security \n  Service Application Programming Interface) is a common security service \n  interface that allows different security mechanisms to be used via one \n  interface. <span class=\"phrase\">For more information on \n  GSSAPI, see <a class=\"xref\" href=\"userauth-gssapi.html\" title=\"User Authentication with GSSAPI\">User Authentication with GSSAPI</a>.</span> </p></li></ul></div></li><li class=\"listitem\"><p>If you want to use the profile in non-interactive connections, you can \nselect to store a password with the profile in the <span class=\"command\"><strong>Password \nAuthentication</strong></span> field.</p><p>Select <span class=\"command\"><strong>Password</strong></span> to enter the actual password string. \n</p><p>Select <span class=\"command\"><strong>Password file</strong></span> to enter a path to a file \ncontaining the password.</p><p>Select <span class=\"command\"><strong>Password program</strong></span> to enter a path to a program \nor a script that outputs the password.</p><div class=\"caution\" style=\"margin-left: 0.5in; margin-right: 0.5in;\"><table border=\"0\" summary=\"Caution\"><tr><td rowspan=\"2\" align=\"center\" valign=\"top\" width=\"25\"><img alt=\"[Caution]\" src=\"images/caution.gif\"></td><th align=\"left\">Caution</th></tr><tr><td align=\"left\" valign=\"top\"><p>If the password is given using this option, it is extremely \n    important that the <code class=\"filename\">ssh-broker-config.xml</code> file, \n    the password file, or the program are not accessible by anyone else \n    than the intended user.</p></td></tr></table></div><div class=\"note\" style=\"margin-left: 0.5in; margin-right: 0.5in;\"><table border=\"0\" summary=\"Note\"><tr><td rowspan=\"2\" align=\"center\" valign=\"top\" width=\"25\"><img alt=\"[Note]\" src=\"images/note.gif\"></td><th align=\"left\">Note</th></tr><tr><td align=\"left\" valign=\"top\"><p>Any password given with the command-line options will override \n    this setting.</p></td></tr></table></div></li><li class=\"listitem\"><p>In the <span class=\"command\"><strong>GSSAPI Authentication</strong></span> field, by selecting the \n<span class=\"command\"><strong>Allow Ticket Forwarding</strong></span> check box you can enable Tectia Client\nto allow forwarding the Kerberos ticket over several connections. </p></li><li class=\"listitem\"><p>When using <span class=\"command\"><strong>Public-Key Authentication</strong></span>, you can also define which\nkey types are used and how the keys are selected.</p><p><span class=\"command\"><strong>Key selection</strong></span> defines the policy Connection Broker \nuses when proposing user public keys to the server. Select the mode from the \ndrop-down list. The options are:</p><div class=\"itemizedlist\"><ul class=\"itemizedlist\" style=\"list-style-type: disc; \"><li class=\"listitem\"><p><span class=\"command\"><strong>Try available public keys automatically</strong></span> \n  (the default). With this policy, the client will try the keys in the \n  following order:</p><div class=\"orderedlist\"><ol class=\"orderedlist\" type=\"a\"><li class=\"listitem\"><p>Keys with public key available and private key without a \n    passphrase (no user interaction)</p></li><li class=\"listitem\"><p>Keys with public key available but private key behind a \n    passphrase (require a passphrase query, provided the key is accepted by \n    the server)</p></li><li class=\"listitem\"><p>The rest of the keys, meaning keys that require a \n    passphrase for the public key as well as the private key. </p></li></ol></div></li><li class=\"listitem\"><p><span class=\"command\"><strong>Prompt user to select the public key</strong></span> - \n  with this policy, the Connection Broker prompts the user to select the key from a \n  list of available keys. If authentication with the selected key \n  fails, the client will prompt the user again to select another key.</p></li></ul></div><p><span class=\"command\"><strong>Key types</strong></span> defines whether only plain public keys or \nonly certificates are tried during public-key authentication. Select the key \ntype from the drop-down list. The default is to try both plain public keys \nand certificates.</p><p>By selecting <span class=\"command\"><strong>Issuer must match server certificate \nissuer</strong></span>, you can make the Connection Broker filter the user certificates \nthat will be included in the list presented to the user. The client-side \nuser certificates can be filtered according to their issuer name that is \ncompared to the certificate issuers requested or accepted by the server. By \ndefault, the filtering is not done. This option is useful when a user has \nseveral certificates with different access rights to the same server, for \nexample for a testing role and for an administrator role. The Connection Broker chooses \nthe relevant certificates that are applicable on the remote host, and the \nuser can choose the correct certificate from the short-listed ones. </p><p>To generate a public-key pair and to upload it to the remote server, \nclick the <span class=\"command\"><strong>Public-Key Authentication Wizard</strong></span> button. For \ninstructions, see <a class=\"xref\" href=\"defining-profiles.html#pubkey-wizard\" title=\"Using the Public-Key Authentication Wizard\">Using the Public-Key Authentication Wizard</a>. </p><a class=\"indexterm\" name=\"idp6751\"></a><a class=\"indexterm\" name=\"idp6753\"></a><p><span class=\"command\"><strong>Enabled algorithms</strong></span> lists the public-key signature algorithms that\nare used for authenticating and signing the user's public key. The algorithms that will\nbe used are those that are configured for both Tectia Server and the Connection Broker. You can use the up\nand down arrow buttons to modify the order of the algorithms. To move an algorithm to\nthe <span class=\"command\"><strong>Disabled algorithms</strong></span> list, select it and click the right arrow\nbutton.</p></li><li class=\"listitem\"><p>Click OK to save the connection profile.</p></li></ol></div></div><div class=\"sect3\"><div class=\"titlepage\"><div><div><h4 class=\"title\"><a name=\"pubkey-wizard\"></a>Using the Public-Key Authentication Wizard</h4></div></div></div><p>On Windows, you can use the Tectia <span class=\"command\"><strong>Public-Key Authentication \nWizard</strong></span> to generate and to upload public-key pairs. The wizard will \ngenerate two key files, your private key and your public key.</p><p>The new private and public key will be stored on your local computer in \nthe <code class=\"code\">%APPDATA%\\SSH\\UserKeys</code> directory. The private key file has \nno file extension, and the public key has the same base file name as the \nprivate key, but with <code class=\"code\">.pub</code> as the file extension.</p><p>Select the <span class=\"command\"><strong>Keys and Certificates</strong></span> page under \n<span class=\"command\"><strong>User authentication</strong></span> and click <span class=\"command\"><strong>New \nKey</strong></span> to start the Public-Key Authentication Wizard. </p><div class=\"figure\"><a name=\"publickey-auth-wizard\"></a><div class=\"figure-contents\"><div class=\"mediaobject\" align=\"center\"><img src=\"images/publickey-auth-wizard.png\" align=\"middle\" alt=\"The Public-Key Authentication Wizard\"></div></div><p class=\"title\"><b>Figure A.17. The Public-Key Authentication Wizard</b></p></div><br class=\"figure-break\"><p>Define the key properties and the required passphrase to protect \n  your key pair; you will be requested to enter the passphrase always when \n  using the keys to authenticate yourself.</p><div class=\"variablelist\"><dl class=\"variablelist\"><dt><span class=\"term\"><span class=\"guilabel\"><strong>File Name</strong></span> \n  <a class=\"indexterm\" name=\"idp6781\"></a></span></dt><dd><p>Type a unique name for the key file. Tectia Client \n  suggest a name consisting of the user name and the host name. </p></dd><dt><span class=\"term\"><span class=\"guilabel\"><strong>Comment</strong></span></span></dt><dd><p>In this field you can write a short comment that \n  describes the key pair. You can for example describe the connection the \n  keys are used for. This field is not obligatory, but helps to identify the \n  key later.</p></dd><dt><span class=\"term\"><span class=\"guilabel\"><strong>Passphrase</strong></span></span></dt><dd><p>Type a phrase that you have to enter when handling the \n  key. This passphrase works in a similar way to a password and gives some \n  protection for your private key.</p><div class=\"note\" style=\"margin-left: 0.5in; margin-right: 0.5in;\"><table border=\"0\" summary=\"Note\"><tr><td rowspan=\"2\" align=\"center\" valign=\"top\" width=\"25\"><img alt=\"[Note]\" src=\"images/note.gif\"></td><th align=\"left\">Note</th></tr><tr><td align=\"left\" valign=\"top\"><p>In FIPS mode, due to a FIPS regulation which forbids exporting \nunencrypted private keys out of the FIPS module, it is not possible to \ngenerate user keys without a passphrase.</p></td></tr></table></div><p>Make the passphrase difficult to guess. Use at least 8 characters, \n  both letters and numbers. Any punctuation characters can be used as \n  well.</p><p>Memorize the passphrase carefully, and do not write it down. </p><p>For connections where no user interaction is available, you can \n  consider leaving the password empty.</p></dd><dt><span class=\"term\"><span class=\"guilabel\"><strong>Retype passphrase</strong></span></span></dt><dd><p>Type the passphrase again. This ensures that you have not \n  made a typing error.</p></dd></dl></div><p>Click the <span class=\"command\"><strong>Advanced Options</strong></span>, to define the type of \n  the key to be generated and the key length to be different from the \n  defaults. By default, Tectia Client generates a pair of 2048-bit RSA \n  keys.</p><p>In the <span class=\"command\"><strong>Key Properties</strong></span> fields, you can make the following selections:</p><div class=\"variablelist\"><dl class=\"variablelist\"><dt><span class=\"term\"><span class=\"guilabel\"><strong>Key Type</strong></span></span></dt><dd><p>Select the type of the key to be generated. Available options are DSA, RSA, ECDSA and Ed25519.</p><div class=\"note\" style=\"margin-left: 0.5in; margin-right: 0.5in;\"><table border=\"0\" summary=\"Note\"><tr><td rowspan=\"2\" align=\"center\" valign=\"top\" width=\"25\"><img alt=\"[Note]\" src=\"images/note.gif\"></td><th align=\"left\">Note</th></tr><tr><td align=\"left\" valign=\"top\"><p>Ed25519 keys are not available in FIPS mode.</p></td></tr></table></div></dd><dt><span class=\"term\"><span class=\"guilabel\"><strong>Key Length</strong></span></span></dt><dd><p>Select the length (complexity) of the key to be generated. Available \n    options are: </p><div class=\"itemizedlist\"><ul class=\"itemizedlist\" style=\"list-style-type: disc; \"><li class=\"listitem\"><p>DSA/RSA keys: 1024, 2048, 3072, 4096, 5120, 6144, 7168, 8192 bits</p><div class=\"note\" style=\"margin-left: 0.5in; margin-right: 0.5in;\"><table border=\"0\" summary=\"Note\"><tr><td rowspan=\"2\" align=\"center\" valign=\"top\" width=\"25\"><img alt=\"[Note]\" src=\"images/note.gif\"></td><th align=\"left\">Note</th></tr><tr><td align=\"left\" valign=\"top\"><p>In FIPS mode (conforming to FIPS 186-3) the available DSA key lengths are limited to\n          1024, 2048 and 3072 bits.</p></td></tr></table></div></li><li class=\"listitem\"><p>ECDSA keys: 256, 384, 521 bits</p></li><li class=\"listitem\"><p>Ed25519 keys: 512 bits</p></li></ul></div><p>Larger keys of the same key type are more secure, but also slower to generate. A\n    256-bit ECDSA key and a 3072-bit DSA or RSA key provide equivalent security.</p></dd></dl></div><p>As soon as a new key has been generated, the Wizard proceeds to \nuploading the key to a remote server. In case you want to upload an existing \nkey to a remote server, select the key file in the Keys and Certificates \nview, and click <span class=\"command\"><strong>Upload</strong></span>. The following dialog appears in \nboth cases:</p><div class=\"figure\"><a name=\"publickey-upload-wizard\"></a><div class=\"figure-contents\"><div class=\"mediaobject\" align=\"center\"><img src=\"images/publickey-upload-wizard.png\" align=\"middle\" alt=\"Uploading a key\"></div></div><p class=\"title\"><b>Figure A.18. Uploading a key</b></p></div><br class=\"figure-break\"><p>In the <span class=\"command\"><strong>Upload Public Key</strong></span> view of the wizard, define \nthe remote host where to upload the key:</p><div class=\"variablelist\"><dl class=\"variablelist\"><dt><span class=\"term\"><span class=\"guilabel\"><strong>Quick connect</strong></span></span></dt><dd><p>Select this option to define the remote <span class=\"command\"><strong>Host name</strong></span> and \nyour <span class=\"command\"><strong>user name</strong></span> there. The default Secure Shell port is 22.</p></dd><dt><span class=\"term\"><span class=\"guilabel\"><strong>Connection profile</strong></span></span></dt><dd><p>Select a <span class=\"command\"><strong>Connection profile</strong></span> from the drop-down list\nthat specifies the desired remote host and user name.</p></dd></dl></div><p>Click <span class=\"command\"><strong>Upload</strong></span> to upload the key to the selected server. \nIf you are already connected to the remote server host, the key upload starts \nimmediately. If you are not connected, you will be prompted to authenticate \non the server (by default with password).</p><p>The public key will be uploaded to the default user home directory \n(<code class=\"code\">%USERPROFILE%\\.ssh2</code> on Windows, <code class=\"code\">$HOME/.ssh2</code> on Unix).</p></div><div class=\"sect3\"><div class=\"titlepage\"><div><div><h4 class=\"title\"><a name=\"stconf-cipher\"></a>Defining Ciphers</h4></div></div></div><p>On the <span class=\"command\"><strong>Ciphers</strong></span> tab, you can define the \nencryption algorithms used for the profile.</p><div class=\"figure\"><a name=\"broker-cipher\"></a><div class=\"figure-contents\"><div class=\"mediaobject\" align=\"center\"><img src=\"images/broker-cipher.png\" align=\"middle\" alt=\"Defining a cipher list for the profile\"></div></div><p class=\"title\"><b>Figure A.19. Defining a cipher list for the profile</b></p></div><br class=\"figure-break\"><p>Select the <span class=\"command\"><strong>Use Defaults</strong></span> check box to use the \nalgorithms defined on the <span class=\"command\"><strong>Default Connection</strong></span> page \n(<a class=\"xref\" href=\"stconf-general.html#default-cipher\" title=\"Defining Ciphers\">Defining Ciphers</a>), or define a cipher list using the arrow \nbuttons. The ciphers are tried in the order they are specified.</p><p>Tectia proprietary algorithms are marked with \n<span class=\"command\"><strong>(Tectia)</strong></span> and are operable with Tectia products only. They \ncorrespond to the algorithms that end with <code class=\"option\">@ssh.com</code> in the \nConnection Broker configuration file.</p></div><div class=\"sect3\"><div class=\"titlepage\"><div><div><h4 class=\"title\"><a name=\"stconf-mac\"></a>Defining MACs</h4></div></div></div><p>On the <span class=\"command\"><strong>MACs</strong></span> tab, you can configure the \nmessage integrity algorithms used for the profile.</p><div class=\"figure\"><a name=\"broker-mac\"></a><div class=\"figure-contents\"><div class=\"mediaobject\" align=\"center\"><img src=\"images/broker-mac.png\" align=\"middle\" alt=\"Defining a MAC list for the profile\"></div></div><p class=\"title\"><b>Figure A.20. Defining a MAC list for the profile</b></p></div><br class=\"figure-break\"><p>Select the <span class=\"command\"><strong>Use Defaults</strong></span> check box to use the \nalgorithms defined on the <span class=\"command\"><strong>Default Connection</strong></span> page \n(<a class=\"xref\" href=\"stconf-general.html#default-mac\" title=\"Defining MACs\">Defining MACs</a>), or define a MAC list using the arrow \nbuttons. The MACs are tried in the order they are specified.</p><p>Tectia proprietary algorithms are marked with \n<span class=\"command\"><strong>(Tectia)</strong></span> and are operable with Tectia products only. They \ncorrespond to the algorithms that end with <code class=\"option\">@ssh.com</code> in the \nConnection Broker configuration file.</p></div><div class=\"sect3\"><div class=\"titlepage\"><div><div><h4 class=\"title\"><a name=\"stconf-kex\"></a>Defining KEXs</h4></div></div></div><p>On the <span class=\"command\"><strong>KEXs</strong></span> tab, you can configure the \nkey exchange methods used for the profile.</p><div class=\"figure\"><a name=\"broker-kex\"></a><div class=\"figure-contents\"><div class=\"mediaobject\" align=\"center\"><img src=\"images/broker-kex.png\" align=\"middle\" alt=\"Defining a KEX list for the profile\"></div></div><p class=\"title\"><b>Figure A.21. Defining a KEX list for the profile</b></p></div><br class=\"figure-break\"><p>Select the <span class=\"command\"><strong>Use Defaults</strong></span> check box to use the \nmethods defined on the <span class=\"command\"><strong>Default Connection</strong></span> page \n(<a class=\"xref\" href=\"stconf-general.html#default-kex\" title=\"Defining KEXs\">Defining KEXs</a>), or define a KEX list using the arrow \nbuttons. The KEXs are tried in the order they are specified.</p><p>Tectia proprietary algorithms are marked with \n<span class=\"command\"><strong>(Tectia)</strong></span> and are operable with Tectia products \nonly. They correspond to the algorithms that end with <code class=\"option\">@ssh.com</code> in \nthe Connection Broker configuration file.</p></div><div class=\"sect3\"><div class=\"titlepage\"><div><div><h4 class=\"title\"><a name=\"stconf-server\"></a>Defining Server Connections</h4></div></div></div><p>On the <span class=\"command\"><strong>Server</strong></span> tab, you can define advanced \nserver connection settings for the profile.</p><div class=\"figure\"><a name=\"broker-server\"></a><div class=\"figure-contents\"><div class=\"mediaobject\" align=\"center\"><img src=\"images/broker-profile-server.png\" align=\"middle\" alt=\"Defining server connection settings for the profile\"></div></div><p class=\"title\"><b>Figure A.22. Defining server connection settings for the profile</b></p></div><br class=\"figure-break\"><div class=\"variablelist\"><dl class=\"variablelist\"><dt><span class=\"term\"><span class=\"command\"><strong>Use Defaults</strong></span></span></dt><dd><p>Select the check box to use the values defined on the \n<span class=\"command\"><strong>Default Connection</strong></span> page (<a class=\"xref\" href=\"stconf-general.html#default-server\" title=\"Defining Server Connections\">Defining Server Connections</a>) for the \nserver connection settings.</p></dd><dt><span class=\"term\"><span class=\"command\"><strong>Idle timeout</strong></span></span></dt><dd><p>Specify how long idle time (after all connection \nchannels are closed) is allowed for a connection before automatically \nclosing the connection. The default is 5 seconds. Setting a longer time \nallows the connection to the server to remain open even after a session (for \nexample, Tectia SSH Terminal GUI) is closed. During this time, a new session to the \nserver can be initiated without re-authentication. Setting the time to 0 \n(zero) terminates the connection immediately when the last channel to the \nserver is closed.</p></dd><dt><span class=\"term\"><span class=\"command\"><strong>TCP connection timeout</strong></span></span></dt><dd><p>Specify for how long a TCP connection will be attempted to a Secure \nShell server. Define the timeout in seconds. After the defined time the TCP \nconnection will be released in case the remote server is down or unreachable. \nSetting the value as 0 (zero) means that the default system TCP timeout will \nbe used.</p></dd><dt><span class=\"term\"><span class=\"command\"><strong>Keepalive interval</strong></span></span></dt><dd><p>Specify an interval (in seconds) for sending keepalive messages to a \nSecure Shell server. The default is 0, meaning that no keepalive messages \nare sent.</p></dd><dt><span class=\"term\"><span class=\"command\"><strong>Exclusive connection</strong></span></span></dt><dd><p>Select this check box if you want that the profile always opens a new \nconnection, instead of reusing a currently open connection.</p></dd><dt><span class=\"term\"><span class=\"command\"><strong>Show server banner</strong></span></span></dt><dd><p>Select the check box if you want to have the server banner message \nfile (if it exists) visible to users before login.</p></dd><dt><span class=\"term\"><span class=\"command\"><strong>Enabled Hostkey Algorithms</strong></span></span></dt><dd><a class=\"indexterm\" name=\"idp6954\"></a><a class=\"indexterm\" name=\"idp6956\"></a><p>This list shows the host key signature algorithms used for server authentication\nwith host keys or certificates. The algorithms that will be used are those that are\ndefined in both Tectia Server and Connection Broker configuration files. This way the use of only certain\nalgorithms, such as SHA-2, can be enforced by the server.</p><p>The host key algorithms are tried in the order they are specified, with one\nexception: If a host key of a server already exists in the host key store of the\nclient, its algorithm is preferred. You can use the up and down arrow buttons to\nmodify the order of the algorithms.</p></dd><dt><span class=\"term\"><span class=\"command\"><strong>Disabled Hostkey Algorithms</strong></span></span></dt><dd><p>The host key algorithms listed here are not used for server authentication. To\ndisable a host key algorithm, select it in the <span class=\"command\"><strong>Enabled Hostkey\nAlgorithms</strong></span> list and click the right arrow button.</p></dd></dl></div></div><div class=\"sect3\"><div class=\"titlepage\"><div><div><h4 class=\"title\"><a name=\"stconf-proxy\"></a>Defining Proxy Settings</h4></div></div></div><a class=\"indexterm\" name=\"idp6969\"></a><p>On the <span class=\"command\"><strong>Proxy</strong></span> tab, you can select proxy settings for \nthe profile.</p><div class=\"figure\"><a name=\"broker-proxy\"></a><div class=\"figure-contents\"><div class=\"mediaobject\" align=\"center\"><img src=\"images/broker-proxy.png\" align=\"middle\" alt=\"Defining proxy settings for the profile\"></div></div><p class=\"title\"><b>Figure A.23. Defining proxy settings for the profile</b></p></div><br class=\"figure-break\"><div class=\"variablelist\"><dl class=\"variablelist\"><dt><span class=\"term\"><span class=\"command\"><strong>No proxy</strong></span></span></dt><dd><p>Select this option if you do not want to use a proxy.</p></dd><dt><span class=\"term\"><span class=\"command\"><strong>Use proxy rules</strong></span></span></dt><dd><p>Select this option to use the proxy rules defined in the \n<span class=\"command\"><strong>General</strong></span> settings <span class=\"command\"><strong>Proxy Rules</strong></span> page \n(<a class=\"xref\" href=\"stconf-general.html#stconf-proxyrule\" title=\"Defining Proxy Rules\">Defining Proxy Rules</a>).</p></dd><dt><span class=\"term\"><span class=\"command\"><strong>Specify a proxy for this profile only</strong></span></span></dt><dd><p>Click <span class=\"command\"><strong>Add</strong></span> to add a new proxy definition for this \nprofile.</p><div class=\"figure\"><a name=\"broker-add-proxy-profile\"></a><div class=\"figure-contents\"><div class=\"mediaobject\" align=\"center\"><img src=\"images/broker-add-proxy-profile.png\" align=\"middle\" alt=\"Defining alternate proxy for the profile\"></div></div><p class=\"title\"><b>Figure A.24. Defining alternate proxy for the profile</b></p></div><br class=\"figure-break\"><p>Select the <span class=\"command\"><strong>Type</strong></span> of the rule. The type can be \n<span class=\"command\"><strong>Direct</strong></span>, <span class=\"command\"><strong>Socks4</strong></span>, \n<span class=\"command\"><strong>Socks5</strong></span>, or <span class=\"command\"><strong>Http</strong></span>.</p><p>For other types than direct, enter the address of the proxy  \n<span class=\"command\"><strong>Server</strong></span> and <span class=\"command\"><strong>Port</strong></span>.</p></dd></dl></div></div><div class=\"sect3\"><div class=\"titlepage\"><div><div><h4 class=\"title\"><a name=\"stconf-tunneling\"></a>Defining Tunneling</h4></div></div></div><a class=\"indexterm\" name=\"idp7014\"></a><a class=\"indexterm\" name=\"idp7016\"></a><p>Tunneling, or port forwarding, is a way of forwarding otherwise unsecured \nTCP traffic through an encrypted Secure Shell connection (tunnel). You can secure for \nexample POP3, SMTP, and HTTP connections that would otherwise be \nunsecured. </p><p>The tunneling settings for the connection profile are configured using the \n<span class=\"command\"><strong>Tunneling</strong></span> tab. Any changed tunneling settings will take \neffect the next time you log in.</p><div class=\"figure\"><a name=\"broker-tunneling\"></a><div class=\"figure-contents\"><div class=\"mediaobject\" align=\"center\"><img src=\"images/broker-tunneling.png\" align=\"middle\" alt=\"Defining tunneling through a profile\"></div></div><p class=\"title\"><b>Figure A.25. Defining tunneling through a profile</b></p></div><br class=\"figure-break\"><div class=\"note\" style=\"margin-left: 0.5in; margin-right: 0.5in;\"><table border=\"0\" summary=\"Note\"><tr><td rowspan=\"2\" align=\"center\" valign=\"top\" width=\"25\"><img alt=\"[Note]\" src=\"images/note.gif\"></td><th align=\"left\">Note</th></tr><tr><td align=\"left\" valign=\"top\"><p>The client-server applications using the tunnel will carry out their \nown authentication procedures (if any) the same way they would without the \nencrypted tunnel. </p></td></tr></table></div><div class=\"sect4\"><div class=\"titlepage\"><div><div><h5 class=\"title\"><a name=\"idp10\"></a>Forwarding Options</h5></div></div></div><a class=\"indexterm\" name=\"idp7029\"></a><a class=\"indexterm\" name=\"idp7031\"></a><a class=\"indexterm\" name=\"idp7034\"></a><a class=\"indexterm\" name=\"idp7036\"></a><a class=\"indexterm\" name=\"idp7039\"></a><a class=\"indexterm\" name=\"idp7042\"></a><p>It is possible to define separately for each connection profile \nwhether X11 and/or agent forwarding are enabled, or whether the general \ndefault forwarding settings are applied to the profile. </p><div class=\"variablelist\"><dl class=\"variablelist\"><dt><span class=\"term\"><span class=\"command\"><strong>Use Defaults</strong></span></span></dt><dd><p>Select this option to make the profile follow the default settings for \nX11 and agent forwarding defined on the \n<span class=\"command\"><strong>Defaults - Tunneling</strong></span> tab \n(<a class=\"xref\" href=\"stconf-general.html#default-tunneling\" title=\"Defining Default Tunneling Settings\">Defining Default Tunneling Settings</a>). \n</p></dd><dt><span class=\"term\"><span class=\"command\"><strong>Tunnel X11 connections</strong></span></span></dt><dd><p>To allow X11 forwarding for this connection profile, select this check box.</p><p>Tectia Client can securely tunnel (forward) X11 graphic connections from the \nremote host computer to an X Windows server running on the local computer. \n</p><div class=\"note\" style=\"margin-left: 0.5in; margin-right: 0.5in;\"><table border=\"0\" summary=\"Note\"><tr><td rowspan=\"2\" align=\"center\" valign=\"top\" width=\"25\"><img alt=\"[Note]\" src=\"images/note.gif\"></td><th align=\"left\">Note</th></tr><tr><td align=\"left\" valign=\"top\"><p>A prerequisite for X11 tunneling is that you have an X emulator \n(such as eXceed or Reflection X) running in passive mode on the Windows \ncomputer. </p></td></tr></table></div><p>To tunnel (forward) X11 traffic, do the following actions: </p><div class=\"orderedlist\"><ol class=\"orderedlist\" type=\"1\"><li class=\"listitem\"><p>Install an X server (X emulation) program on Windows \n(eXceed, Reflection X, or the like).</p></li><li class=\"listitem\"><p>Start Tectia Client. </p></li><li class=\"listitem\"><p>Select the <span class=\"command\"><strong>Tunneling</strong></span> tab of the \nConnection Profiles page and make sure that the <span class=\"command\"><strong>Tunnel X11 \nconnections</strong></span> check box is selected. </p></li><li class=\"listitem\"><p>Save your settings for Tectia Client. \n</p></li><li class=\"listitem\"><p>Restart Tectia Client and log into the remote host. \n</p></li><li class=\"listitem\"><p>Start the X server (X emulation) program. \n</p></li><li class=\"listitem\"><p>To test the tunneling, run xterm or xclock from \nTectia Client.</p></li></ol></div><p>For more information, see <a class=\"xref\" href=\"client-tunnel-x11.html\" title=\"X11 Forwarding\">X11 Forwarding</a>.</p></dd><dt><span class=\"term\"><span class=\"command\"><strong>Allow Agent Forwarding</strong></span></span></dt><dd><p>To allow agent forwarding on the client side for this connection profile, \nselect this check box.</p><p>In agent forwarding, Secure Shell connections and public-key \nauthentication data are forwarded from one server to another without the \nuser having to authenticate separately for each server.</p><p>For more information, see <a class=\"xref\" href=\"client-tunnel-agent.html\" title=\"Agent Forwarding\">Agent Forwarding</a>.</p></dd></dl></div></div><div class=\"sect4\"><div class=\"titlepage\"><div><div><h5 class=\"title\"><a name=\"idp11\"></a>Local Tunnels</h5></div></div></div><a class=\"indexterm\" name=\"idp7091\"></a><a class=\"indexterm\" name=\"idp7093\"></a><a class=\"indexterm\" name=\"idp7095\"></a><p>There are two types of tunnels that can be defined for application \ntunneling, local (outgoing) tunnels and remote (incoming) tunnels. </p><p>Local tunnels protect TCP connections that your local \ncomputer forwards from a specified local port to a specified port on the \nremote host computer you are connected to. It is also possible to forward \nthe connection beyond the remote host computer, but the connection is \nencrypted only between Tectia Client and Tectia Server.</p><p>Remote tunnels protect TCP connections that a remote host \nforwards from a specified remote port to a specified port on your local \ncomputer.</p><p>To edit local tunnel definitions, click the <span class=\"command\"><strong>Local \ntunnels</strong></span> tab.</p><p>To add a new local tunnel, click <span class=\"command\"><strong>Add</strong></span>. The \n<span class=\"command\"><strong>Local Tunnel</strong></span> dialog box opens.</p><div class=\"figure\"><a name=\"broker-tunneling-out\"></a><div class=\"figure-contents\"><div class=\"mediaobject\" align=\"center\"><img src=\"images/broker-tunneling-out.png\" align=\"middle\" alt=\"Defining a local tunnel\"></div></div><p class=\"title\"><b>Figure A.26. Defining a local tunnel</b></p></div><br class=\"figure-break\"><p>The following fields are used to define a local tunnel:</p><div class=\"itemizedlist\"><ul class=\"itemizedlist\" style=\"list-style-type: disc; \"><li class=\"listitem\"><p><span class=\"command\"><strong>Type</strong></span>: Select the type of the tunnel from \nthe drop-down list. Valid choices are TCP and FTP. If you are tunneling an \nFTP connection, set the tunnel type as FTP. For other protocols, set the \ntunnel type as TCP.</p><div class=\"note\" style=\"margin-left: 0.5in; margin-right: 0.5in;\"><table border=\"0\" summary=\"Note\"><tr><td rowspan=\"2\" align=\"center\" valign=\"top\" width=\"25\"><img alt=\"[Note]\" src=\"images/note.gif\"></td><th align=\"left\">Note</th></tr><tr><td align=\"left\" valign=\"top\"><p>If the Secure Shell server and the FTP server are located on \ndifferent computers, FTP tunneling works only if FTP is set to run in \npassive mode. If the Secure Shell server and the FTP server are located on \nthe same computer, tunneling works regardless of whether FTP is running in \npassive or active mode. \nFor more information on FTP tunneling, see <a class=\"xref\" href=\"tunnel-nontransparent-ftp.html\" title=\"Non-Transparent FTP Tunneling\">Non-Transparent FTP Tunneling</a>.\n</p></td></tr></table></div></li><li class=\"listitem\"><p><span class=\"command\"><strong>Listen port</strong></span>: This is the number of the \nlocal port which the tunnel listens to or captures.</p><div class=\"note\" style=\"margin-left: 0.5in; margin-right: 0.5in;\"><table border=\"0\" summary=\"Note\"><tr><td rowspan=\"2\" align=\"center\" valign=\"top\" width=\"25\"><img alt=\"[Note]\" src=\"images/note.gif\"></td><th align=\"left\">Note</th></tr><tr><td align=\"left\" valign=\"top\"><p>The protocol or application that you wish to create the tunnel for \nmay have a fixed port number (for example 143 for IMAP) that it needs to \nuse to connect successfully. Other protocols or applications may require \nan offset (for example 5900 for VNC) that you will have to take into an \naccount.</p></td></tr></table></div></li><li class=\"listitem\"><p><span class=\"command\"><strong>Allow local connections only</strong></span>: Select \nthis option if you want to allow only local connections to be made. This \nmeans that other computers will not be able to use the tunnel created by \nyou. By default, only local connections are allowed. This is the right \nchoice for most situations.</p><p>Consider the security implications carefully if you decide to also \nallow outside connections. </p></li><li class=\"listitem\"><p><span class=\"command\"><strong>Destination host</strong></span>: This field defines \nthe destination host for the tunneling. The default value is \n<code class=\"code\">localhost</code>.</p><div class=\"note\" style=\"margin-left: 0.5in; margin-right: 0.5in;\"><table border=\"0\" summary=\"Note\"><tr><td rowspan=\"2\" align=\"center\" valign=\"top\" width=\"25\"><img alt=\"[Note]\" src=\"images/note.gif\"></td><th align=\"left\">Note</th></tr><tr><td align=\"left\" valign=\"top\"><p>The destination host is resolved by the Secure Shell server, \nso here <code class=\"code\">localhost</code> refers to the Secure Shell server host you are \nconnecting to.</p></td></tr></table></div></li><li class=\"listitem\"><p><span class=\"command\"><strong>Destination port</strong></span>: The destination port \ndefines the port that is used for the forwarded connection on the \ndestination host. </p></li></ul></div><p>To edit a tunnel definition, select a tunnel from the list and click \n<span class=\"command\"><strong>Edit</strong></span>. The <span class=\"command\"><strong>Local Tunnel</strong></span> dialog \nopens.</p><p>To delete a tunnel definition, select a tunnel from the list and click \n<span class=\"command\"><strong>Delete</strong></span> to remove a tunnel. Note that the selected tunnel \nwill be removed immediately, with no confirmation dialog. </p><p>For more information on local tunnels, see \n<a class=\"xref\" href=\"tunnel-local.html\" title=\"Local Tunnels\">Local Tunnels</a>.</p></div><div class=\"sect4\"><div class=\"titlepage\"><div><div><h5 class=\"title\"><a name=\"idp12\"></a>Remote Tunnels</h5></div></div></div><a class=\"indexterm\" name=\"idp7146\"></a><a class=\"indexterm\" name=\"idp7148\"></a><a class=\"indexterm\" name=\"idp7150\"></a><p>Remote (incoming) tunnels protect TCP connections that the remote host forwards \nfrom a specified remote port to the specified port on your local computer. \n</p><p>Click the <span class=\"command\"><strong>Remote tunnels</strong></span> tab to edit incoming \ntunnel definitions. Click <span class=\"command\"><strong>Add</strong></span> to open the \n<span class=\"command\"><strong>Remote Tunnel</strong></span> dialog box.</p><div class=\"figure\"><a name=\"broker-tunneling-in\"></a><div class=\"figure-contents\"><div class=\"mediaobject\" align=\"center\"><img src=\"images/broker-tunneling-in.png\" align=\"middle\" alt=\"Defining a remote tunnel\"></div></div><p class=\"title\"><b>Figure A.27. Defining a remote tunnel</b></p></div><br class=\"figure-break\"><p>The following fields are used to define a remote tunnel:</p><div class=\"itemizedlist\"><ul class=\"itemizedlist\" style=\"list-style-type: disc; \"><li class=\"listitem\"><p><span class=\"command\"><strong>Type</strong></span>: Select the type of the tunnel \nfrom the drop-down list. Valid choices are TCP and FTP. \nFor more information on FTP tunneling, see <a class=\"xref\" href=\"tunnel-nontransparent-ftp.html\" title=\"Non-Transparent FTP Tunneling\">Non-Transparent FTP Tunneling</a>.\n</p></li><li class=\"listitem\"><p><span class=\"command\"><strong>Listen port</strong></span>: Enter the port that the tunnel \nlistens to or captures from the remote host computer. </p><div class=\"note\" style=\"margin-left: 0.5in; margin-right: 0.5in;\"><table border=\"0\" summary=\"Note\"><tr><td rowspan=\"2\" align=\"center\" valign=\"top\" width=\"25\"><img alt=\"[Note]\" src=\"images/note.gif\"></td><th align=\"left\">Note</th></tr><tr><td align=\"left\" valign=\"top\"><p>Privileged ports (below 1024) can be forwarded only when logging in \nwith root privileges on the remote host computer.</p></td></tr></table></div></li><li class=\"listitem\"><p><span class=\"command\"><strong>Destination host</strong></span>: Define \nthe destination host for the port forwarding. The default value is \nlocalhost. </p><div class=\"note\" style=\"margin-left: 0.5in; margin-right: 0.5in;\"><table border=\"0\" summary=\"Note\"><tr><td rowspan=\"2\" align=\"center\" valign=\"top\" width=\"25\"><img alt=\"[Note]\" src=\"images/note.gif\"></td><th align=\"left\">Note</th></tr><tr><td align=\"left\" valign=\"top\"><p>Here localhost refers to your local computer. Also note that if the \nconnection from the remote host computer is forwarded beyond your local \ncomputer, that connection is unsecured. </p></td></tr></table></div></li><li class=\"listitem\"><p><span class=\"command\"><strong>Destination port</strong></span>: Define the port that is \nused for the forwarded connection on the destination host. \n</p></li></ul></div><p>To edit a tunnel definition, select a tunnel from the list and click \n<span class=\"command\"><strong>Edit</strong></span>. The <span class=\"command\"><strong>Remote Tunnel</strong></span> dialog \nopens.</p><p>To delete a tunnel definition, select a tunnel from the list and click \n<span class=\"command\"><strong>Delete</strong></span> to remove a tunnel. Note that the selected tunnel \nwill be removed immediately, with no confirmation dialog. </p><p>For more information on remote tunnels, see \n<a class=\"xref\" href=\"client-tunnel-remote.html\" title=\"Remote Tunnels\">Remote Tunnels</a>.</p></div></div><div class=\"sect3\"><div class=\"titlepage\"><div><div><h4 class=\"title\"><a name=\"stconf-window\"></a>Defining Windows Settings</h4></div></div></div><a class=\"indexterm\" name=\"idp7191\"></a><a class=\"indexterm\" name=\"idp7194\"></a><p>The type of the Tectia window that is opened initially is configured using \nthe <span class=\"command\"><strong>Windows</strong></span> tab. The selected GUI version, \n<span class=\"command\"><strong>Tectia SSH Terminal GUI</strong></span> or <span class=\"command\"><strong>Tectia Secure File Transfer GUI</strong></span>,\nwill be opened first when this profile is accessed.</p><div class=\"figure\"><a name=\"broker-window\"></a><div class=\"figure-contents\"><div class=\"mediaobject\" align=\"center\"><img src=\"images/broker-profile-window.png\" align=\"middle\" alt=\"Defining initial Tectia window type\"></div></div><p class=\"title\"><b>Figure A.28. Defining initial Tectia window type</b></p></div><br class=\"figure-break\"><div class=\"note\" style=\"margin-left: 0.5in; margin-right: 0.5in;\"><table border=\"0\" summary=\"Note\"><tr><td rowspan=\"2\" align=\"center\" valign=\"top\" width=\"25\"><img alt=\"[Note]\" src=\"images/note.gif\"></td><th align=\"left\">Note</th></tr><tr><td align=\"left\" valign=\"top\"><p>When a profile is added from the Tectia Connections Configuration GUI using the <span class=\"command\"><strong>Add \nProfile</strong></span> option, the initial window type of the new profile is \nautomatically set to be the same as in the current GUI view.</p></td></tr></table></div></div><div class=\"sect3\"><div class=\"titlepage\"><div><div><h4 class=\"title\"><a name=\"stconf-color\"></a>Defining Color Settings</h4></div></div></div><a class=\"indexterm\" name=\"idp7210\"></a><p>The colors used in the Tectia SSH Terminal GUI can be selected using the \n<span class=\"command\"><strong>Colors</strong></span> page.</p><p>The color settings can be defined either globally or per profile. When \ncolors are defined in Tectia terminal Global Settings, the <span class=\"command\"><strong>Use Global \nColors</strong></span> option is not available, but the color settings will affect \nall connection profiles. See <a class=\"xref\" href=\"settings-colors.html\" title=\"Selecting Colors\">Selecting Colors</a>.</p><div class=\"figure\"><a name=\"broker-colors\"></a><div class=\"figure-contents\"><div class=\"mediaobject\" align=\"center\"><img src=\"images/broker-colors.png\" align=\"middle\" alt=\"Defining Tectia terminal colors\"></div></div><p class=\"title\"><b>Figure A.29. Defining Tectia terminal colors</b></p></div><br class=\"figure-break\"><p><span class=\"command\"><strong>Use Global Colors</strong></span>: Select this check box if you \nwant to apply the global color settings to this profile. When this check box \nis selected, you cannot modify the color settings. </p><div class=\"variablelist\"><dl class=\"variablelist\"><dt><span class=\"term\"><span class=\"command\"><strong>Text Colors</strong></span></span></dt><dd><p>The text colors affect the terminal window background color and the \ncolor of text in both a connected window and a disconnected window. \n</p><div class=\"itemizedlist\"><ul class=\"itemizedlist\" style=\"list-style-type: disc; \"><li class=\"listitem\"><p><span class=\"command\"><strong>Foreground</strong></span>: Select the desired \nforeground color from the drop-down menu. Foreground color is used for \ntext in a window that has a connection to a remote host computer. You can \nselect from sixteen colors. Black is the default foreground color. \n</p></li><li class=\"listitem\"><p><span class=\"command\"><strong>Background</strong></span>: Select the desired \nbackground color from the drop-down menu. You can select from sixteen \ncolors. White is the default background color. </p></li><li class=\"listitem\"><p><span class=\"command\"><strong>Selection</strong></span>: Select the desired \nbackground color for mouse-selected texts from the drop-down menu.\nYou can select from sixteen colors. Aquamarine is the default \nselection color. </p></li><li class=\"listitem\"><p><span class=\"command\"><strong>Disconnected</strong></span>: Select the desired \nforeground color for terminal windows that have no connection to a remote \nhost computer. You can select from sixteen colors. Gray is the default \nforeground color for a disconnected terminal window. </p></li></ul></div></dd><dt><span class=\"term\"><span class=\"command\"><strong>Cursor Color</strong></span></span></dt><dd><p>Select the desired cursor color from the drop-down menu. You can \nselect from sixteen colors. Navy is the default cursor color. </p></dd><dt><span class=\"term\"><span class=\"command\"><strong>ANSI Colors</strong></span></span></dt><dd><p>With ANSI control codes it is possible to change the color of text \nin a terminal window. With the ANSI Colors setting you can select to use \nthis feature. Even if you disable ANSI colors, you can still select your \nfavorite text and background colors to be used in the terminal window. \n</p><p>Select the <span class=\"command\"><strong>Enable ANSI Colors</strong></span> check \nbox to allow ANSI colors to be used in the terminal window. By default, \nANSI colors are selected. </p></dd><dt><span class=\"term\"><span class=\"command\"><strong>Reverse Colors</strong></span></span></dt><dd><p>By reversing the display colors you can quickly change the display \nfrom positive (dark on light) to negative (light on dark) to improve \nvisibility. </p><p>Select the <span class=\"command\"><strong>Reverse Video</strong></span> check box to \nchange the foreground color into background color and vice versa. This \nsetting affects the whole terminal window when you click \n<span class=\"command\"><strong>OK</strong></span>. </p></dd></dl></div></div><div class=\"sect3\"><div class=\"titlepage\"><div><div><h4 class=\"title\"><a name=\"stconf-keyboard\"></a>Defining Terminal Settings</h4></div></div></div><a class=\"indexterm\" name=\"idp7265\"></a><p>The settings used for the Tectia Client terminal are configured using \nthe <span class=\"command\"><strong>Terminal</strong></span> tab. Keyboard mappings take effect when you \nstart a new connection or reset the terminal. </p><div class=\"figure\"><a name=\"broker-keyboard\"></a><div class=\"figure-contents\"><div class=\"mediaobject\" align=\"center\"><img src=\"images/broker-keyboard.png\" align=\"middle\" alt=\"Defining Tectia terminal settings\"></div></div><p class=\"title\"><b>Figure A.30. Defining Tectia terminal settings</b></p></div><br class=\"figure-break\"><div class=\"variablelist\"><dl class=\"variablelist\"><dt><span class=\"term\"><span class=\"command\"><strong>User Defined Keymap File</strong></span></span></dt><dd><a class=\"indexterm\" name=\"idp7279\"></a><a class=\"indexterm\" name=\"idp7281\"></a><p>Use this option to create additional keyboard shortcuts or to modify \nthe existing ones. The additional key mappings are saved into a separate text\nfile with the <code class=\"code\">.sshmap</code> file extension. The current keymap file \nis displayed in the text field. </p><p>If you have defined an alternative keymap settings file, you can load \nit by typing the path and file name in the text field, or by clicking \n<span class=\"command\"><strong>Browse</strong></span>. Clicking <span class=\"command\"><strong>Browse</strong></span> will open an \n<span class=\"command\"><strong>Open</strong></span> dialog box that allows you to locate an alternative \nkeymap file. </p><p>You can modify the current key mappings and add new ones by clicking\n  <span class=\"command\"><strong>Edit</strong></span>. Clicking <span class=\"command\"><strong>Edit</strong></span> will open the \n  <span class=\"command\"><strong>Tectia Keymap Editor</strong></span>, where you can create a new key \n  mapping by clicking <span class=\"command\"><strong>Add</strong></span>. Clicking <span class=\"command\"><strong>Add</strong></span> \n  will open the <span class=\"command\"><strong>Tectia Shortcut</strong></span> dialog box.</p><p>To define a keyboard shortcut, on the <span class=\"command\"><strong>Function</strong></span>\ndrop-down list, select the function you want to map a key to. Depending on\nthe function, you may further define it using an additional text box or \ndrop-down list that appears when you select a function. In the text box in \nthe lower left of the dialog box, press the key or key combination you \nwant to map to the function.</p><div class=\"figure\"><a name=\"broker-keymap\"></a><div class=\"figure-contents\"><div class=\"mediaobject\" align=\"center\"><img src=\"images/broker-keymap.png\" align=\"middle\" alt=\"Adding a keyboard shortcut using Tectia Keymap Editor\"></div></div><p class=\"title\"><b>Figure A.31. Adding a keyboard shortcut using Tectia Keymap Editor</b></p></div><br class=\"figure-break\"><p>To use the new key mapping, restart Tectia Client and reconnect to the server \n  using the same connection profile for which you made the mapping. Notice that \n  the key mapping only applies to this specific connection profile.</p></dd><dt><span class=\"term\"><span class=\"command\"><strong>Predefined Keyboard Inputs</strong></span></span></dt><dd><p>Select the <span class=\"command\"><strong>Backspace sends Delete</strong></span> check \n  box if you want to map the Backspace key to the Delete operation. \n  </p><p>Select the <span class=\"command\"><strong>Delete Sends Backspace</strong></span> check \n  box if you want to map the Delete key to the Backspace operation. \n  </p><p>Select the <span class=\"command\"><strong>Enter sends CR + LF</strong></span> check \n  box if you want to map the Enter key to send the carriage return (CR) and \n  line feed (LF) characters. Otherwise only the line feed character will be \n  sent. </p><p>Select the <span class=\"command\"><strong>Lock Function Keys</strong></span> check box \n  if you want to lock the function keys. </p><p>Select the <span class=\"command\"><strong>Line Wrap</strong></span> check box if you \n  want the text lines to wrap at the terminal window edge. By default, line \n  wrapping is on. </p><p>Select the <span class=\"command\"><strong>Use Alt as \n  meta key (send Escape)</strong></span> check box if you want the Alt key to \n  function as the meta key in the same way as the Escape key. If this option \n  is selected, you can for example press the Alt+X key combination to \n  simulate the Escape followed by X. </p></dd><dt><span class=\"term\"><span class=\"command\"><strong>Keypad Mode</strong></span></span></dt><dd><p>Select how you want the numeric keypad on the right-hand \nside of the regular keyboard to function. </p><p>Select <span class=\"command\"><strong>Numeric Keypad</strong></span> to use the keypad to enter\nnumbers. </p><p>Select <span class=\"command\"><strong>Application Keypad</strong></span> to use the keypad for \napplication control (with the keypad keys functioning as cursor keys, Home, \nEnd, Page Up, Page Down, Insert and Delete). </p></dd><dt><span class=\"term\"><span class=\"command\"><strong>Terminal answerback</strong></span>\n<a class=\"indexterm\" name=\"idp7332\"></a></span></dt><dd><p>Use the <span class=\"command\"><strong>Terminal answerback</strong></span> drop-down \nlist to select the same terminal answerback mode that is used by the Tectia Server \nrelated to the profile.</p></dd><dt><span class=\"term\"><span class=\"command\"><strong>Euro character</strong></span>\n<a class=\"indexterm\" name=\"idp7340\"></a></span></dt><dd><p>Use the <span class=\"command\"><strong>Euro character</strong></span> drop-down list to \nselect the support mode for the euro character (€). </p><p>The supported options are Windows (where euro is mapped as 0x80) and ISO \n8859-15 (euro mapped as 0xA4). Select the same character set that is used by the \nTectia Server related to the profile.</p><p>Note however that enabling the euro character support will disable the \n8-bit terminal control codes.</p></dd></dl></div></div><div class=\"sect3\"><div class=\"titlepage\"><div><div><h4 class=\"title\"><a name=\"stconf-filetransfer\"></a>Defining File Transfer Settings</h4></div></div></div><a class=\"indexterm\" name=\"idp7349\"></a><p>The <span class=\"command\"><strong>File Transfer</strong></span> tab defines which files are \ntransferred using ASCII mode and which newline conventions are applied. </p><div class=\"figure\"><a name=\"broker-filetransfer\"></a><div class=\"figure-contents\"><div class=\"mediaobject\" align=\"center\"><img src=\"images/broker-filetransfer.png\" align=\"middle\" alt=\"Defining Tectia file transfer settings\"></div></div><p class=\"title\"><b>Figure A.32. Defining Tectia file transfer settings</b></p></div><br class=\"figure-break\"><div class=\"variablelist\"><dl class=\"variablelist\"><dt><span class=\"term\"><span class=\"command\"><strong>ASCII transfer with old servers</strong></span></span></dt><dd><p><span class=\"command\"><strong>Detect Windows server from the version string</strong></span>: \nSecure Shell client and server exchange version strings when setting up the \nconnection. Select this check box to automatically detect Windows servers \nand use the correct setting for them. For this feature to work correctly, \nthe Windows server has to specify \"windows\" in its version string. </p><p>Select the <span class=\"command\"><strong>Unix</strong></span> check box to use \nUnix compatible line breaks (LF).</p><p>Select the <span class=\"command\"><strong>Windows</strong></span> check box \nto use Windows compatible line breaks (CRLF). </p><p>Select the <span class=\"command\"><strong>Ask before ASCII transfer</strong></span> check box\nto make Tectia Client ask you to specify the server type \nbefore each ASCII file transfer. </p></dd></dl></div></div><div class=\"sect3\"><div class=\"titlepage\"><div><div><h4 class=\"title\"><a name=\"stconf-favorites\"></a>Defining Favorite Folders</h4></div></div></div><p>In the <span class=\"command\"><strong>Favorites Folders</strong></span> tab, you can create a list \nof commonly used remote directories. These favorites can then be easily \nselected from a drop-down menu in the file transfer window. </p><div class=\"figure\"><a name=\"broker-favorites\"></a><div class=\"figure-contents\"><div class=\"mediaobject\" align=\"center\"><img src=\"images/broker-favorites.png\" align=\"middle\" alt=\"Defining favorite remote folders for file transfer\"></div></div><p class=\"title\"><b>Figure A.33. Defining favorite remote folders for file transfer</b></p></div><br class=\"figure-break\"><div class=\"variablelist\"><dl class=\"variablelist\"><dt><span class=\"term\"><span class=\"command\"><strong>Favorite Folders</strong></span></span></dt><dd><p>This list contains the favorite folders you have defined for \nthe current connection profile. You can add, remove, and sort the favorites \nby using <span class=\"command\"><strong>Add</strong></span>, <span class=\"command\"><strong>Delete</strong></span>, and the arrow \nbuttons below the list. </p><p>If you are defining a remote favorite that is located on a Windows \nSecure Shell server, the folder on the Windows server must be specified as \nfollows: <code class=\"code\">/drive/folder/subfolder</code>.</p><p>A valid favorite folder definition would be, for example:</p><pre class=\"screen\">/C/Documents and Settings/All Users/Desktop</pre></dd><dt><span class=\"term\"><span class=\"command\"><strong>Home Folder</strong></span></span></dt><dd><p>In the <span class=\"command\"><strong>Home Folder</strong></span> field you can enter the \ndirectory where any new SFTP connections associated with this profile will \nstart. If you leave the field empty, new connections will use the remote \nhome folder that has been specified for your user account on the remote host \ncomputer. </p></dd></dl></div></div></div><div class=\"navfooter\"><table width=\"100%\" summary=\"Navigation footer\"><hr><tr><td width=\"40%\" align=\"left\"></td><th width=\"20%\" align=\"center\"></th><td width=\"40%\" align=\"right\"><a accesskey=\"h\" href=\"index.html\"><img src=\"images/home.gif\" alt=\"Home\"></a><a href=\"ix01.html\"><img src=\"images/index.gif\"></a> <a accesskey=\"p\" href=\"stconf-general.html\"><img src=\"images/prev.gif\" alt=\"Prev\"></a> <a accesskey=\"u\" href=\"broker-conf-windows.html\"><img src=\"images/up.gif\" alt=\"Up\"></a> <a accesskey=\"n\" href=\"stconf-userauth.html\"><img src=\"images/next.gif\" alt=\"Next\"></a>  </td></tr></table></div><div class=\"copyrightfooter\" align=\"center\"><p class=\"footer\">\n  Copyright <img src=\"images/copyright.gif\"> 2020 SSH Communications Security Corporation<br>\n  This software is protected by international copyright laws. All rights reserved.<br><a href=\"http://www.ssh.com/about/contact\">Contact Information</a></p></div></div>","head":"<head><meta http-equiv=\"Content-Type\" content=\"text/html; charset=UTF-8\"><title>Defining Connection Profiles</title><link rel=\"stylesheet\" type=\"text/css\" href=\"sshx.css\"><meta name=\"generator\" content=\"DocBook XSL Stylesheets V1.79.1\"><link rel=\"home\" href=\"index.html\" title=\"Tectia® Client 6.4\"><link rel=\"up\" href=\"broker-conf-windows.html\" title=\"Tectia Connections Configuration GUI\"><link rel=\"prev\" href=\"stconf-general.html\" title=\"Defining General Settings\"><link rel=\"next\" href=\"stconf-userauth.html\" title=\"Defining User Authentication\"></head>","url":"/manuals/client-user/64/defining-profiles.html"}}}