---
title: Using MFA for RDP Connections
slug: kronpam-getting-started-guide/using-mfa-for-rdp-connections
description: Learn how to activate a One-Time Password (OTP) for a Remote Desktop Protocol (RDP) connection using Kron PAM. This comprehensive document provides step-by-step instructions, including accessing the Kron PAM Web GUI, navigating the System Configuration Ma
docTags: 
createdAt: 2023-09-08T14:36:47.725Z
---

To activate OTP for an RDP connection to a target device, follow the steps below:

1. Log in to the Kron PAM Web GUI. 
2. Navigate to **Administration** > **System Configuration Manager**
3. Click the **Add **button to open a pop-up screen. Then click **Add New System Parameter**
4. Set the required parameters below.

| **Parameters**                     | **Description**                                                                                                       |
| ---------------------------------- | --------------------------------------------------------------------------------------------------------------------- |
| sc.rdp.connection.otp.enabled=true | One-time password enabled for RDP connections                                                                         |
| sc.rdp.otp.cache.enabled=true      | If the cache parameter is activated, the user will not be asked for OTP during the cache duration after entering OTP. |
| sc.rdp.otp.cache.seconds=240       | Cache time in seconds                                                                                                 |

After these settings, users in enabled user groups will be asked for a token when logging in to an RDP server.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/y0rkpgAC1J4337MQAO7ml_image.png)