Remote Desktop

Remote Desktop allows you to easily access and control the client desktops within the network under the Synology Router from anywhere as long as you have Internet access, without further need of a client software.

General Management

To set up Remote Desktop:

Click Synology VPN on the left panel, and go to Remote Desktop.
Tick Enable Remote Desktop.
Specify the settings below:
- Self-owned domain name: Click Edit to configure the Domain Settings.
- HTTPS port: Specify the HTTPS port for remote desktop connections. The default port is 9488.
- Disallow duplicate logins: Tick to prevent accounts from creating multiple connections via this protocol.
Click Apply to finish the setup. A customized URL for the VPN Plus web portal will appear for use.

To install a third-party certificate to the Synology Router:

The network administrator can purchase a certificate from a trusted third-party and install it to the Synology Router. After installation, all clients can smoothly access the VPN Plus web portal without seeing browser alerts.

Go to SRM Control Panel > Services > Certificate.
Under the Action section, click Import certificate.
Click Browse and provide the acquired private key and certificate.
Click OK to finish the import.

To install the Synology Router certificate to local devices:

If no trusted third-party certificate is available, the network administrator can create a self-signed certificate from the Synology Router, and install it to all client devices.

Go to SRM Control Panel > Services > Certificate.
Under the Action section, click Create certificate > Create self-signed certificate. Follow the wizard's instructions to create a certificate for the VPN Plus web portal.
Under the Server certificate section, click Export certificate to download the self-signed certificate.
Share this certificate with local users. Ask them to install it to their devices as instructed in the Usage Guide.

Usage Guide

The sections below will guide you through how to use the Remote Desktop service to access the client desktops within the network of your Synology Router from elsewhere.

To access a Windows desktop remotely:

Before you start:

Make sure if the remote desktop feature is available on the version of Windows desktop you wish to access remotely. Here, we will take Windows 10 for example.
On such Windows desktop, go to Control Panel > System and Security.
Under System, click Allow remote access.
In the Remote tab, select Allow remote connections to this computer, and then click OK.
Back in Control Panel, click Allow an app through Windows Firewall under Windows Defender Firewall.
Tick to allow Remote Desktop through the firewall, and then click OK.
Go to Control Panel > Network and Internet.
Under Network and Sharing Center, click View network status and tasks.
Check out Network Connection Details and note down the IPv4 Address of this Windows desktop.

Visit the VPN Plus web portal URL with a web browser. You may get the URL from the IT staff of your company or organization.
Log in with your user credentials.
Click Remote Desktop on the left panel.
Click Create to add a remote desktop to access, and configure the following settings:
- Name: Enter a customized name of the remote desktop.
- Remote connection: Select Microsoft Remote Desktop (RDP) from the drop-down list.
- Remote address: Enter the internal IP address and port of the remote desktop you wish to access.
  Note: Default port number for RDP service is 3389. If it does not work, please check the actual firewall setting on such Windows client first.
- Quality: Select the remote desktop quality according to your preference and network environment.
  Note: Higher quality may consume more network bandwidth.
- Username and Password: Enter the login credentials of the remote desktop.
- Resolution: Specify the screen resolution during the remote desktop session.
- Tick Enable audio over Remote Desktop to transfer audio content between your local client system and the remote desktop.
  Note: Enabling this function may consume more network bandwidth. This function is not supported by Internet Explorer.
- Tick Fullscreen mode to launch the remote desktop in a full screen.
Click Apply when the setup is complete.
You will see the created remote desktop in the list. Click on such item to start the session.
Note: You can also click on the gear icon to edit the settings, or the X button to delete the item.

To access a Mac desktop remotely:

Before you start:

On the Mac desktop you wish to access remotely, go to System Preferences > Sharing, and then tick Remote Management.
Note down the user credentials of such macOS which will be used for the remote access from VPN Plus web portal.

Visit the VPN Plus web portal URL with a web browser. You may get the URL from the IT staff of your company or organization.
Log in with your user credentials.
Click Remote Desktop on the left panel.
Click Create to add a remote desktop to access, and configure the following settings:
- Name: Enter a customized name of the remote desktop.
- Remote connection: Select Apple Remote Desktop (VNC) from the drop-down list.
- Remote address: Enter the internal IP address and port of the remote desktop you wish to access.
  Note: Default port number for VNC service is 5900. If it does not work, please check the actual firewall setting on such Mac client first.
- Quality: Select the remote desktop quality according to your preference and network environment.
  Note: Higher quality may consume more network bandwidth.
- Username and Password: Enter the login credentials of the remote desktop.
- Tick Fullscreen mode to launch the remote desktop in a full screen.
Click Apply when the setup is complete.
You will see the created remote desktop in the list. Click on such item to start the session.
Note: You can also click on the gear icon to edit the settings, or the X button to delete the item.

To access a customized desktop remotely:

Visit the VPN Plus web portal URL with a web browser. You may get the URL from the IT staff of your company or organization.
Log in with your user credentials.
Click Remote Desktop on the left panel.
Click Create to add a remote desktop to access, and configure the following settings:
- Name: Enter a customized name of the remote desktop.
- Remote connection: Select Custom from the drop-down list.
- Protocol: Select RDP or VNC according to your need.
- Remote address: Enter the internal IP address and port of the remote desktop you wish to access.
  Note: Default port number for RDP service is 3389, and for VNC is 5900. If it does not work, please check the actual firewall setting on such remote client first.
- Quality: Select the remote desktop quality according to your preference and network environment.
  Note: Higher quality may consume more network bandwidth.
- Username and Password: Enter the login credentials of the remote desktop.
- Resolution (only available for RDP protocol): Specify the screen resolution during the remote desktop session.
- Tick Enable audio over Remote Desktop (only available for RDP protocol) to transfer audio content between your local client system and the remote desktop.
  Note: Enabling this function may consume more network bandwidth. This function is not supported by Internet Explorer.
- Tick Fullscreen mode to launch the remote desktop in a full screen.
Click Apply when the setup is complete.
You will see the created remote desktop in the list. Click on such item to start the session.
Note: You can also click on the gear icon to edit the settings, or the X button to delete the item.

To install a certificate to your device:

If no trusted third-party certificate is available on VPN Plus Server, you can download and install a self-signed certificate on your computer to avoid repeated browser alerts.

Go to the VPN Plus web portal.
Click the person icon on the top-right corner.
Click Configurations.
In the pop-up window, click Download to download the ca.crt certificate to your computer.

Follow the steps below to install the certificate according to the computer platform.

For Windows:

Double-click the ca.crt file on your computer.
Click Open > Install Certificate... > Next.
Select Place all certificates in the following store.
Click Browse and choose Trusted Root Certification Authorities.
Click OK and follow the wizard's instructions to finish installation.
Reopen the browser to make the certificate take effect.

For Mac:

Double-click the ca.crt file on your computer.
Select System for Keychain, and click Add.
Enter the user credentials and click Modify Keychain.
Open Keychain Access on your Mac computer.
On the left panel, select System under Keychains and then select Certificates under Category.
Find and double-click the certificate.
In the pop-up window, click Trust, and select Always Trust for When using this certificate.
Close the pop-up and follow the instructions to finish installation.

Was this article helpful?

Yes ／ No