|
This article is translated to Serbo-Croatia language by Jovana Milutinovich
How is the connection established?
Server discovery.
The viewer and Server belong to a group ( sample: MySupportOrganistion)
The server also has a hostname or custom name ( accesscode)
Viewer send groupname to "access server".
Server send groupname + hostname to "access server"
The access server send a list of servers belonging to the same group back the Viewer.
Server viewer connection.
When the viewer request a connection, the access server send the origin of the viewer connection
to the server and from the server to viewer. Using this information, the server and viewer establish
a direct connection. Data goes direct from server to viewer, no data bouncing like with the repeater.
Encryption:
Once a direct link between server and viewer is made, the stream is encrypted (AES 256bit).
The encryption key is auto exchanged using DH ( like ssl), each time you make a connection
a new key is used. The key is then merged with the local passwd and this merged key is used
as encryption key.
1) server and Viewer are 100% local, data never get transmitted over the net, if password are wrong
decryption fail and connection quit.
2) Groupname and Hostname are exchanged between "access servers" viewer and server.
This data is not encrypted and need to be considered as public.
Even when the "access servers" get hacked, they can't do nothing with that info without knowing the
local passwords. Keeping a part of the encryption key local, even a third man attack fail.
modules:
1) Chat
The Chat module allow you to talk and to transfer files.
To transfer a file, drag/drop a file on the chat gui.
2) SendMessage
Send a fast message
3) Desktop access
Video and keyboard access to a remote desktop.
Ctrl-alt-del if server is running as service
You can connect to the console session or an active RDP session
The modules run as seperate exe, it's normal that you see the exe multiple times in the taskmanager
when the modules are active.
Server modes
*Started by user
When PCHelpWare is started by the user (as application) you always need to enter a password and
accesscode. It doesn't require special user priveledge, just keep in mind that UAC elevated windows
can't be controled nor can you switch desktops.
Group is taken from ini file
Tray icon allow to quit.
*Runing as service
Running as service, passwd/group/name are extracted from the ini file.
You need to use the service manager to start/stop the service. The Tray icon
indicate that the desktop module is running. The module is under service control,
manual closing the module via the systray cause the server to restart it...
*settings:
You can only set the settings of the server via a seperate application.
This app just populate the ini file, changes take effect after the server is restarted.
Installation
Download Viewer+sfx builder
http://www.uvnc.eu/download/setup_viewer.zip
Server service, only needed if you want to install the server as service.
http://www.uvnc.eu/download/setup_server.zip
A sfx(mini server) can be used to give easy access to a desktop but doesn't allow
you to remote logon/logoff access UAC controled. The mini sfx always require aproval
before you can takeover the desktop. Typical usage: remote support
The server running as service allow full access, typical usage: remote access.
 Setup_viewer:
PCHelpWareV2Viewer.exe
PCHelpWareV2Player.exe
setup_server:
Server Settings PCHelpWareV2.exe
PCHelpWareV2 Server.exe
Basic setup
Viewer setup
Group: This is a Custom name that's used to indentify server and viewers. You can only connect to servers that belong to the same group as the viewer. You can add multiple viewer groups to monitor servers that belong to different groups.
Password: This password is only used to save the viewer settings ( including server passwords)
Create SFX
Create SC open the customization properties.
You can modify icons,bitmaps,text...
Use the same group as a group set by the viewer.
You can set a predefined "accesscode" and "access password", the viewer save
the password so you don't have to enter it again on connection.
Create SC button, create a sfx ( saved on the desktop in the pchw subfolder)
If you run the sfx exe, and allow it in the firewall is should be visable like
"Rudi-PC".
Connection
If password was not set via SC tool and let the user set it you need to
manual add it first before you can initiate a p2p connection.
Icons flash during p2p setup
2 green screens indicate p2p encrypted tunnel is active
A Trayicon balloon indicate connection has been made.
Now you can use the modules
Chat/Send Message or Open Desktop
Open Desktop always require user permission.. ( accept dialog box)
FileTransfer: Is part of the Chat module ( drag and rop files on the window to copy remote)
Download link
http://www.uvnc.eu/download/setup_viewer.zip
http://www.uvnc.eu/download/setup_server.zip
Feedback
http://forum.ultravnc.info/viewtopic.php?f=65&t=29146
|
