Private key management

First connection to Devolutions Hub

When connecting to your Devolutions Hub for the first time, a Private Key will be created. The storage method depends on whether you already have a Devolutions Account or not and on whether Single Sign-on (SSO) is enabled on the hub:

• If you already have a Devolutions Account, your Private Key will be stored using your password.
• If you do not have a Devolutions Account and your hub does not offer Single Sign-on (SSO), your Private Key will be stored using the password that will be created.
• If you do not have a Devolutions Account and you connect to a hub using Single Sign-on (SSO), you will be prompted to choose a storage method for your Private Key.
  • Mobile Device (Recommended): Your Private Key can be stored on the Workspace mobile app. You will receive a push notification to easily approve new devices.
  • QR Code: Download and print your Private Key as a QR code. When required to approve new devices, you will need to scan the QR Code.
  • Password: Approve new devices by entering a password.

Storage management

After the first connection, you can add/modify more methods. You can do this in your Devolutions Portal.

All three methods can be enabled at the same time, and you will always have at least one configured storage method for your Private Key. Your active storage method will have a checkmark inside a green circle next to it, while an unconfigured one will have an "x" inside a red circle.

See the examples below:

Store on a Mobile Device (Recommended)

This method is recommended because there is no need to remember a password or store your QR code somewhere. This is especially useful for access from a new device or a private browsing session, as your password is not stored in your browser in this situation.

Follow the steps below to configure this method.

1. In the Private Key Storage Methods section of your Devolutions Portal, click Configure in the mobile device method box.

   

2. Download the Workspace mobile app.

   

3. Once done, click Continue. A QR code will appear.
4. In the Workspace mobile app, access the Authenticator space.
5. Click Add, then Scan a QR code.
6. Scan the QR code in the browser with your mobile device.

   

The pairing process will begin. After it ends (it should only take a few seconds), your Private Key will be stored on the Workspace mobile app.

Unpair

At any moment, you can decide to delete that storage configuration by clicking on Unpair. This option is useful if you have pairing problems with your mobile device and want to redo the configuration from the start.

Store as a QR Code

If you do not have access to a mobile device or if you want an additional method, this option is the best alternative. Follow the steps below to configure this method.

1. In the Private Key Storage Methods section of your Devolutions Portal, click Configure in the QR code method box.

   

2. Either Download or Print the QR code. Whichever you choose, be sure to keep it in a safe place.

   

Regenerate

If you encounter problems using this method to authenticate or if you lost your QR code, you can generate a new one by clicking on the vertical ellipsis and selecting Regenerate a new QR Code. You can also delete the current code without generating a new one by selecting Delete Current QR Code.

Store Using a Password

Follow the steps below to configure this method.

1. In the Private Key Storage Methods section of your Devolutions Portal, click Configure in the password method box.

   

2. In the Password fields, enter a password that follows the specified rules written underneath. Be sure to keep it in a sake place.
3. Click on Create password.

If you want to change this password, click on the Change Password icon.

Follow the steps, then click Change Password when done.