---
title: Temporarily Disabling RDP Keylogging
slug: kronpam-reference-guide-3-9-0/temporarily-disabling-rdp-keylogging
description: Learn how to configure the RDP Session Key-Logger to log specific keystrokes while obscuring sensitive data. Discover how admins can set a customized shortcut key and exclude certain keys from being logged. Additionally, find out how to disable the key lo
docTags: 
createdAt: 2022-07-28T09:53:55.000Z
---

The RDP Session Keystroke Logger logs all keystrokes in clear text. This can include critical information including passwords. Admins can configure two properties from the System Configuration Manager page to set a keyboard shortcut that blocks keylogging. To obscure certain data, follow these steps:

1. Navigate to **Administration **> **System Config Man> Add New System Parameter.**
2. Set the **nsso.remote.desktop.key.logger.hidden.key.limit** parameter with the required key limit.
3. Set the **nsso.remote.desktop.key.logger.key.hiding** parameter with the shortcut key to be used to obscure certain data.

When users press the key chosen for the second parameter twice within 500 milliseconds (half a second), keylogging will be paused for the number of strokes set in the first parameter above.

The default shortcut key is ESC. Potential keys that can be set up in System Config. Manager:

| \[Alt]    | \[F10] | \[F8]         | \[Print]        |
| --------- | ------ | ------------- | --------------- |
| \[Begin]  | \[F11] | \[F9]         | \[Right]        |
| \[Break]  | \[F12] | \[Home]       | \[Scroll\_Lock] |
| \[Ctrl]   | \[F2]  | \[Insert]     | \[Shift]        |
| \[Delete] | \[F3]  | \[Left]       | \[Shift\_Lock]  |
| \[Down]   | \[F4]  | \[Num\_Lock]  | \[Tab]          |
| \[End]    | \[F5]  | \[Page\_Down] | \[Up]           |
| \[Escape] | \[F6]  | \[Page\_Up]   |                 |
| \[F1]     | \[F7]  | \[Pause]      |                 |



:::hint{type="info"}
If **nsso.remote.desktop.key.logger.hidden.key.limit** is not defined manually in the System Config Man., the default hidden key limit is 15 keys.
:::

When key logging is disabled for a certain time in an RDP session, it shows in the logs as illustrated in this figure:

::Image[]{src="https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/ZBoLjdgPoEhJTHFQCW34q_image.png" size="48" width="384" height="475" position="center" caption="Logs for Hidden Keys" showCaption="true"}

To disable keystroke log hiding feature for specific user groups:

1. Navigate to** Policy > Portal Functions.**
2. Open the **Function Group Definition** tab and click **Add**.
3. Fill in the **Function Group Name** and select the **Function** as **single.connect.rdp.disallow\.hiding.keys**
4. Click** Save**.
5. Open the** Realm Definition** tab.
6. Configure the realm for the user group, as well as the **disallow hiding keys** function.