Using gateway.berkeley.edu
Campus provides a Remote Desktop Gateway service, allowing CalNet ID–authenticated users to securely proxy their remote desktop connection to winterm.eecs.berkeley.edu (or other RDP-enabled hosts). To use this service in connecting to winterm.eecs, you will first authenticate to CalNet via DUO, and then you will authenticate to winterm.eecs using your EECS Windows/LDAP password.
The following steps illustrate this process.
Launch Remote Desktop Connection, and click on “Show Options”
Enter the Computer name (winterm.eecs.berkeley.edu) and your User name; then click the Advanced tab
Click the Settings… button
Select the option to “Use these RD Gateway server settings” and enter gateway.berkeley.edu for the Server.
Leave unchecked the box at the very bottom, because winterm.eecs will use your EECS Windows/LDAP password instead.
Now, when you click OK and then Connect, you’ll be prompted to login to gateway.berkeley.edu.
Use your campus credentials (CalNet username and password) to login here. Be sure to add the campus domain before your username.
You will see the connection initiating, during which time you should receive an automatic DUO Push (CalNet 2-step) There are no options for alternate DUO approvals; it will just Push to your mobile device.
Assuming your DUO Push was successful and approved, you will be prompted for the credentials to login to winterm.eecs.berkeley.edu.
We had already entered our EECS username in an earlier step, so should just need to enter our EECS Windows/LDAP password here.
At this point, the connection will be secured, and you’ll be presented with your remote desktop on winterm.eecs.
These screenshots are from the Windows version of the Microsoft Remote Desktop App (Microsoft Store), but the Microsoft Remote Desktop App for MacOS (App Store) is very similar.
Click on “+ Add” to add a new PC connection
Enter winterm.eecs.berkeley.edu as the PC name. Use the “+” to add your EECS User account (eecs\username and password).
Click on “Show more“.
Click on the “+” to add Gateway information.
Enter gateway.berkeley.edu as the Server name. Use the “+” to add your campus User account (campus\username and CalNet passphrase).
Click Save (for the Gateway configuration), and Save again (for the remote PC configuration).
Now, when you click on your saved PC, you should receive an automatic DUO Push (CalNet 2-step) There are no options for alternate DUO approvals; it will just Push to your mobile device.
Assuming your DUO Push was successful and approved, the connection will be secured, and you’ll be presented with your remote desktop on winterm.eecs.