---
title: Using MFA for RDP Connections
slug: kronpam-reference-guide-3-9-0/using-mfa-for-rdp-connections
description: Learn how to set up Multi-Factor Authentication (MFA) for an RDP connection using the Kron PAM mobile app. This step-by-step document covers prerequisites, logging in to the Kron PAM Web GUI, and configuring MFA parameters. Enhance your RDP server's secur
docTags: 
createdAt: 2022-07-31T17:28:00.000Z
---

To activate MFA for an RDP connection:

:::hint{type="success"}
Admin and users have the QR code, installed the Kron PAM Mobile Client Application, scanned the QR code with the Kron PAM Mobile Client Application, and OTP is enabled for the user group that will be using MFA for RDP connections (See sections [Sending the MFA QR Code to Users](docId\:r-Q1GHQ5jOx1b8rV1q9KD), [Creating a Connection Between Kron PAM and the Kron PAM Mobile Client Application](docId\:A3GIZ4czOLC5WC9pTfOSA), [Enabling Multi-Factor Authentication (MFA)](docId\:EWfFlZCOkk4zsgvVXeAJU) )
:::

1. Log in to **Kron PAM Web GUI**.
2. Navigate to **Administration **> **System Configuration Manager**.
3. Set these required parameters:
   **sc.rdp.connection.otp.enabled=true** (one-time-password enabled for RDP connections)
   **sc.rdp.otp.cache.enabled=true** (If the cache parameter is activated, after entering an MFA the user will not be asked for OTP during the cache duration)
   **sc.rdp.otp.cache.seconds=240 **(OTP cache duration in seconds)
4. After these settings, a user belonging to an enabled user group will be asked for a token when logging in to an RDP server. Note that a GUI restart may be required, especially for changes to OTP cache for RDP: 
   `sudo systemctl restart pam-gui`

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/BrhpGUEcYPAFR3_yk98Kh_image.png "Using MFA to Establish an RDP Connection")