---
title: Temporarily Disabling RDP Key Logging 
slug: kronpam-reference-guide-legacy-ui-3-4-0/temporarily-disabling-rdp-key-logging
description: Learn how to configure the RDP Session Key-Logger to log specific keystrokes while obscuring sensitive data. Discover how admins can set a customized shortcut key and exclude certain keys from being logged. Additionally, find out how to disable the key lo
docTags: 
createdAt: 2022-07-28T09:53:55.000Z
---

The RDP Session Key-Logger logs all key motions in clear text. Critical information like passwords is recorded when users enter them. Admins can configure two properties from the System Configuration Manager page to define a shortcut keyboard button and the number of keys not to be logged. To obscure certain data, follow these steps:

1. Navigate to **Administration **> **System Config Man**.
2. Set the **nsso.remote.desktop.key.logger.hidden.key.limit** parameter with the required key limit
3. Set the **nsso.remote.desktop.key.logger.key.hiding** parameter with the key to be used to obscure certain data

When users press the defined key twice in 500 milliseconds, keys pressed after that are not logged up to the defined hidden key limit. The number of pressed keys that will not be logged is defined with the nsso.remote.desktop.key.logger.hidden.key.limit property. The shortcut button for users can be configured with the nsso.remote.desktop.key.logger.key.hiding property. The parameter set with this property can be used to activate keylogging in RDP connections. 

The default shortcut key is ESC. Potential keys that can be set up in System Config Man.:

| \[Alt]    | \[F10] | \[F8]         | \[Print]        |
| --------- | ------ | ------------- | --------------- |
| \[Begin]  | \[F11] | \[F9]         | \[Right]        |
| \[Break]  | \[F12] | \[Home]       | \[Scroll\_Lock] |
| \[Ctrl]   | \[F2]  | \[Insert]     | \[Shift]        |
| \[Delete] | \[F3]  | \[Left]       | \[Shift\_Lock]  |
| \[Down]   | \[F4]  | \[Num\_Lock]  | \[Tab]          |
| \[End]    | \[F5]  | \[Page\_Down] | \[Up]           |
| \[Escape] | \[F6]  | \[Page\_Up]   |                 |
| \[F1]     | \[F7]  | \[Pause]      |                 |



:::hint{type="info"}
If **nsso.remote.desktop.key.logger.hidden.key.limit** is not defined manually in the System Config Man., the default hidden key limit is 15 keys.
:::



When key logging is disabled for a certain time in an RDP session, it shows in the logs as illustrated in this figure:

::Image[]{src="https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/QNGKveTOM2k1q0Hk0UX6N_image.png" size="42" width="380" height="471" caption="Logs for Hidden Keys" position="center" showCaption="true"}

To disable the key log hiding feature on certain user groups:

1. Navigate to **Policy Control** > **Portal Functions**.
2. Open the **Function Group Definition** tab.
3. Enter the **Function Group Name** then select the Function as **single.connect.rdp.disallow\.hiding.keys**.
4. Click **Save**.
5. Open the **Realm Definition** tab.
6. Configure the realm for the user group, as well as the **disallow hiding key **function.