{
"slug": "remote-desktop-protocol-rdp-anydesk-forwarding-hardware-keys",
"topic_id": "TOPIC-086",
"cluster": "Remote Workforce & Insider Threat",
"tier": "Tier B",
"title": "Why a hardware key will not work down a remote desktop tunnel",
"summary": "Remote access forwards input and screen. It cannot forward a physical touch on a device attached to the machine at the far end, and that limitation is a security property.",
"lede": "An operative controlling a laptop remotely can move the mouse, type, read the screen and run anything on it. The one thing they cannot do is press a button on a security key plugged into a desk they are not sitting at.",
"date": "2024-11-15",
"category": "Future of Work",
"author_id": "tobias-lindqvist-rao",
"tags": [
"RDP",
"remote access",
"hardware keys",
"user presence",
"FIDO2",
"insider threat"
],
"image_title": "Hardware Key Remote Desktop Tunnel",
"schema": "Article",
"key_takeaways": [
"User presence in FIDO2 requires a physical interaction with the authenticator itself, which remote protocols cannot synthesise.",
"Device redirection features can forward a USB authenticator across a session, which reverses the property — this must be disabled.",
"The control's value depends on the key being physically where the legitimate person is, and on redirection being off."
],
"body": [
{
"type": "h2",
"text": "What remote access can and cannot forward"
},
{
"type": "diagram",
"kind": "compare",
"alt": "What a remote session can forward, and the two things it cannot",
"caption": "The distinction is between input the OS receives as events and interaction the authenticator verifies internally.",
"nodes": [],
"left": {
"title": "Forwardable",
"items": [
"Keyboard input",
"Mouse movement and clicks",
"Screen contents",
"Clipboard, files, audio"
]
},
"right": {
"title": "Not forwardable",
"items": [
"A capacitive touch on a security key",
"A fingerprint on the local sensor",
"— unless device redirection is on",
"which reverses the property entirely"
]
}
},
{
"type": "table",
"head": [
"Capability",
"Forwardable over a remote session"
],
"rows": [
[
"Keyboard input",
"Yes"
],
[
"Mouse movement and clicks",
"Yes"
],
[
"Screen contents",
"Yes"
],
[
"Clipboard",
"Yes, if enabled"
],
[
"File transfer",
"Yes, if enabled"
],
[
"Audio",
"Yes, if enabled"
],
[
"A capacitive touch on a security key",
"No"
],
[
"A fingerprint on the local sensor",
"No"
]
]
},
{
"type": "p",
"html": "The distinction is between input the operating system receives as events and interaction with a device that verifies presence internally. The authenticator's user-presence check is performed by the authenticator, not reported to it."
},
{
"type": "h2",
"text": "What the flags mean"
},
{
"type": "p",
"html": "An authenticator sets two flags in its response."
},
{
"type": "ul",
"items": [
"User present — someone physically interacted with the authenticator, typically a touch",
"User verified — the authenticator additionally verified the user with a biometric or PIN"
]
},
{
"type": "p",
"html": "Both are asserted by the authenticator and covered by its signature. Software on the host cannot set them, because the host does not produce the signature."
},
{
"type": "h2",
"text": "The redirection problem"
},
{
"type": "p",
"html": "This is where the property is commonly lost, and it is worth being blunt about it."
},
{
"type": "p",
"html": "Remote desktop implementations support device redirection: a USB device attached to the client machine is presented to the remote session as though attached there. Where this includes authenticators, a key held by the remote operator satisfies the presence check for the session."
},
{
"type": "code",
"text": "# Without redirection\n operative's machine ──RDP─→ corporate laptop\n └─ security key here\n → presence check requires someone at the laptop. BLOCKED\n\n# With USB redirection enabled\n operative's machine ──RDP─→ corporate laptop\n └─ security key here (redirected)\n → presence check satisfied by the operative. BYPASSED"
},
{
"type": "p",
"html": "So the control depends on a configuration setting, and the default in some environments permits redirection because it is a legitimate convenience for travelling staff."
},
{
"type": "h2",
"text": "What to configure"
},
{
"type": "ol",
"items": [
"Disable USB and smart card redirection for remote sessions to corporate endpoints. This is the single decisive setting.",
"Prefer platform authenticators for the sensitive checks — a fingerprint sensor built into the laptop cannot be redirected.",
"Detect remote session presence and require verification from a separate device, such as the employee's phone, when a session is remote.",
"Audit third-party remote tools, which have their own redirection features and are often installed outside IT's inventory."
]
},
{
"type": "p",
"html": "The fourth is the practical gap. Corporate remote desktop policy is usually managed; consumer remote access tools installed by a user are not, and they are what appears in these arrangements."
},
{
"type": "h2",
"text": "The legitimate remote access case"
},
{
"type": "p",
"html": "Plenty of employees legitimately connect to a machine remotely — a workstation from home, a jump host, a lab system. A control that blocks all of that is not deployable."
},
{
"type": "p",
"html": "The workable arrangement: the verification comes from a device the employee holds in their hand, not from the machine they are controlling. Their phone, wherever they are, produces the signature. The remote session is irrelevant because the credential was never on the remote machine."
},
{
"type": "p",
"html": "This also happens to be more robust than relying on redirection settings, because it does not depend on a configuration that someone might change."
},
{
"type": "h2",
"text": "Being honest about the limits"
},
{
"type": "p",
"html": "If the facilitator is willing to press the key when asked, the control is defeated. That is collusion, and it is a different problem — though it does change the arrangement's economics, since the facilitator must now be available and involved rather than passively hosting a laptop."
},
{
"type": "p",
"html": "The control also only applies where it is required. An organisation that requires verification at login and nowhere else has gained little, because the remote session continues afterwards."
},
{
"type": "h2",
"text": "The setting that decides it"
},
{
"type": "p",
"html": "Remote desktop implementations support device redirection, presenting a USB device attached to the client as though attached to the session. Where that includes authenticators, a key held by the remote operator satisfies the presence check — so the control depends on a configuration setting, and the default in some environments permits redirection because it is a genuine convenience for travelling staff."
},
{
"type": "table",
"caption": "Configuration that makes or breaks the control",
"head": [
"Setting",
"Effect"
],
"rows": [
[
"USB / smart card redirection disabled",
"Presence check requires someone at the endpoint"
],
[
"Redirection enabled",
"The remote operator's key satisfies it — control bypassed"
],
[
"Platform authenticator used instead",
"Built-in sensor cannot be redirected"
],
[
"Consumer remote tools installed outside IT inventory",
"Their own redirection features, unmanaged"
]
]
},
{
"type": "h2",
"text": "Objections and honest limits"
},
{
"type": "p",
"html": "“We block remote access entirely.” Few organisations can. Legitimate remote work to a workstation, a jump host or a lab system is normal, and a control that blocks all of it is not deployable."
},
{
"type": "p",
"html": "“So a willing facilitator defeats it.” Yes. That is collusion, and it is a different problem. It does change the economics: the facilitator must be actively available at each challenge rather than passively hosting a laptop."
}
],
"faq": [
{
"q": "Why can't a touch be forwarded?",
"a": "The authenticator performs the presence check internally and signs the result. The host does not produce the signature, so software on it cannot assert the flag."
},
{
"q": "What breaks this control?",
"a": "USB device redirection in remote sessions, which presents a key attached to the remote operator's machine as though attached locally."
},
{
"q": "How do legitimate remote workers use this?",
"a": "The credential lives on a device in their hand — typically their phone — not on the machine they are controlling. The remote session becomes irrelevant."
},
{
"q": "Does this stop a willing facilitator?",
"a": "No. That is collusion. It does change the economics, since the facilitator must be actively available rather than passively hosting a laptop."
}
],
"sources": [
{
"t": "W3C Web Authentication: An API for accessing Public Key Credentials Level 3",
"u": "https://www.w3.org/TR/webauthn-3/"
},
{
"t": "Microsoft — Remote Desktop Protocol device redirection",
"u": "https://learn.microsoft.com/en-us/azure/virtual-desktop/redirection-remote-desktop-protocol"
},
{
"t": "CISA cybersecurity advisories",
"u": "https://www.cisa.gov/news-events/cybersecurity-advisories"
},
{
"t": "FIDO CTAP 2.2 specification",
"u": "https://fidoalliance.org/specs/fido-v2.2-ps-20250714/fido-client-to-authenticator-protocol-v2.2-ps-20250714.html"
}
],
"related": [
{
"slug": "dprk-it-worker-laptop-farm-prevention-guide",
"title": "Hiring one person and employing another",
"category": "Future of Work"
},
{
"slug": "fido2-aaguid-attestation-enterprises-restrict-authorization-corporate",
"title": "AAGUID attestation and hardware policy",
"category": "Developer"
},
{
"slug": "continuous-authentication-vs-per-action-gating-actually-stops",
"title": "Continuous authentication versus per-action gating",
"category": "Comparison"
}
],
"image": "https://cdn.twc.sh/images/igcache/Hardware%20Key%20Remote%20Desktop%20Tunnel/1500_900/blog.jpg",
"wordcount": 902,
"url": "/blog/remote-desktop-protocol-rdp-anydesk-forwarding-hardware-keys.html",
"reading_time": "4 min read",
"meta_description": "Remote access forwards input and screen. It cannot forward a physical touch on a key attached at the far end, and that is a security property.",
"hub": {
"slug": "topics/remote-workforce-identity",
"title": "Remote workforce identity"
},
"answer": "Not unless device redirection is enabled. RDP, AnyDesk and TeamViewer forward keyboard, mouse and screen. They cannot synthesise a capacitive touch on a key attached to the far machine, because the authenticator performs the presence check itself and signs the result.",
"answer_q": "Can a security key be used over a remote desktop session?",
"entities": [
{
"name": "Remote Desktop Protocol",
"type": "Thing",
"url": "https://learn.microsoft.com/en-us/azure/virtual-desktop/redirection-remote-desktop-protocol",
"primary": true
},
{
"name": "AnyDesk",
"type": "SoftwareApplication",
"url": "https://anydesk.com/"
}
],
"glossary": [
{
"term": "User presence",
"def": "A physical interaction with the authenticator itself, asserted in a flag the authenticator signs. Host software cannot set it."
},
{
"term": "Device redirection",
"def": "Presenting a peripheral attached to the client machine as though attached to the remote session."
},
{
"term": "Jump host",
"def": "An intermediate system used to reach a protected environment. Legitimate, common, and a place remote-session assumptions quietly break."
}
],
"checklist": {
"title": "Configuring this correctly",
"id": "configure",
"desc": "Four steps, and the fourth is the usual gap.",
"steps": [
{
"name": "Disable USB and smart card redirection for remote sessions.",
"text": "The single decisive setting."
},
{
"name": "Prefer platform authenticators for sensitive checks.",
"text": "A built-in sensor cannot be redirected."
},
{
"name": "Verify from a device in the person's hand.",
"text": "Their phone, wherever they are — more robust than relying on a configuration someone might change."
},
{
"name": "Audit consumer remote tools.",
"text": "Corporate RDP policy is managed; a user-installed remote tool is not, and that is what appears in facilitator arrangements."
}
]
},
"cta": {
"title": "Where this fits in Manav",
"html": "Manav issues the challenge to a credential on the person's own device rather than to the machine they are operating. The remote session becomes irrelevant, and the control no longer depends on a redirection setting staying disabled.",
"href": "../docs.html",
"label": "See device-bound challenges"
}
}