4 ms·
The VDI angle makes the most sense out of all the answers I've seen. However, I can't imagine anyone concerned about security would do BYOD for laptops or desk
by donmcronald 5y ago
The VDI angle makes the most sense out of all the answers I've seen. However, I can't imagine anyone concerned about security would do BYOD for laptops or desktops.
Every person I've ever seen using VDI has a company PC plus a virtual desktop, so there's no cost savings there. The main advantages I can see are easier backups and not having to worry about network bandwidth too much (just enough for RDP is good), but there are drawbacks too like dealing with remote printing, a lack of support for hardware security tokens, etc..
For example, try to get a YubiKey working [1] with WebAuthN or FIDO when using RDP / VDI. It's basically impossible and you're stuck with crappy 2FA like TOTP.
1. https://demo.yubico.com/webauthn-technical/registration https://demo.yubico.com/webauthn-technical/registration
- Godel_unicode 5y agoYubikey webauthn over RDP works just fine for me.
- jb0x168 5y agoIs there an extension needed or is this a recent addition? I've spent way too long reconfiguring yubikeys to act as an OTP device so that they work over RDP. (edit: reconfiguration is needed to capture the device ID/secret and get them registered to our MFA provider as an OTP token, I realize they do OTP OOB :) )