Desktop Environment : GNOME Remote Desktop2025/05/14

	Configure the GNOME Remote Desktop Services to enable remote connections from a client computer.
[1]	If you have the GNOME desktop installed, it will already be installed as a dependency, but if it is not installed, install it as follows.

[root@dlp ~]#

dnf -y install gnome-remote-desktop

[2]	If Firewalld is running, allow RDP service.

[root@dlp ~]#

firewall-cmd --add-service=rdp

success
[root@dlp ~]#

firewall-cmd --runtime-to-permanent

success

[3]

If you want to enable remote desktop for each user, log in to the desktop and set it as follows.
However, if the user who set it logs out, the rdp port will no longer listen.

Open [Settings] - [System] - [Remote Desktop], then following screen is displayed.
Enable [Desktop Sharing] and [Remote Control] on here.

The port is set to the default RDP port [3389], but if another user is already using it, change it to another port.
For the Login user and password section, Set the user name and password for the RDP connection.

[4]	This is a connection from a client computer. It shown Windows 11 as an example. When you start Remote Desktop Connection and connect, you will be shown a screen for entering your username and password. Enter the username and password you set in [3].

[5]	If authentication is successful, the remote desktop screen will be displayed.

[6]	To enable remote desktop with root privileges, set it as follows. In this case, the username and password to connect to the remote desktop service are the same for each user, and after connecting, the normal login screen is displayed and each user logs in with their own OS username and password.

# create certificate

[root@dlp ~]#

mkdir -p /var/lib/gnome-remote-desktop/.local/share/gnome-remote-desktop

[root@dlp ~]#

cd /var/lib/gnome-remote-desktop/.local/share/gnome-remote-desktop

[root@dlp gnome-remote-desktop]#

openssl req -new -x509 -nodes -newkey ec:<(openssl ecparam -name secp384r1) -keyout tls.key -out tls.crt -days 3650

-----
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [XX]:JP
State or Province Name (full name) []:Hiroshima
Locality Name (eg, city) [Default City]:Hiroshima
Organization Name (eg, company) [Default Company Ltd]:GTS
Organizational Unit Name (eg, section) []:Server World
Common Name (eg, your name or your server's hostname) []:dlp.srv.world
Email Address []:root@srv.world

[root@dlp gnome-remote-desktop]#

chown -R gnome-remote-desktop:gnome-remote-desktop /var/lib/gnome-remote-desktop/.local

[root@dlp gnome-remote-desktop]#

# Enable RDP
# [Init TPM credentials ***] message is no problem
# it appears on older computers that do not have a TPM device

[root@dlp ~]#

grdctl --system rdp set-tls-key /var/lib/gnome-remote-desktop/.local/share/gnome-remote-desktop/tls.key

Init TPM credentials failed because No TPM device found, using GKeyFile as fallback.
[root@dlp ~]#

grdctl --system rdp set-tls-cert /var/lib/gnome-remote-desktop/.local/share/gnome-remote-desktop/tls.crt

[root@dlp ~]#

grdctl --system rdp set-credentials

Username: rdpuser     # set any username for RDP connection
Password:             # set password of the user above

[root@dlp ~]#

grdctl --system rdp enable

[root@dlp ~]#

grdctl --system status

Init TPM credentials failed because No TPM device found, using GKeyFile as fallback.
Overall:
        Unit status: active
RDP:
        Status: enabled
        Port: 3389
        TLS certificate: /var/lib/gnome-remote-desktop/.local/share/gnome-remote-desktop/tls.crt
        TLS fingerprint: 23:23:27:94:45:c0:8b:20:18:74:0c:28:b8:be:89:0a:a5:47:05:f1:8a:64:55:c6:9d:b1:24:70:62:68:b3:46
        TLS key: /var/lib/gnome-remote-desktop/.local/share/gnome-remote-desktop/tls.key
        Username: (hidden)
        Password: (hidden)

[root@dlp ~]#

systemctl daemon-reload

[root@dlp ~]#

systemctl start gnome-remote-desktop

[7]	This is a connection from a client computer. It shows Windows 11 as an example. When you start Remote Desktop Connection and connect, you will be shown a screen for entering your username and password. Enter the RDP connection user and password you set in [6].

[8]	If the remote desktop connection is successful, the login screen will be displayed. Log in as your own OS user. The operation is the same as normal remote desktop operation after logging in.

Matched Content