All Products
Search

This Product

    Bastionhost:Application management

    Document Center

    Bastionhost:Application management

    Last Updated:Jun 10, 2025

    This topic describes application-related concepts and deployment flow.

    Concepts

    • Application server: A jump server between a bastion host and applications.

    • Remote client: A client that is used to access applications on an application server, such as a browser or a database client tool.

      Note

      Web applications support configuration of username and password auto-fill and destination access policies. Custom applications do not support these features.

    • Application: An application that O&M engineers want to access by using a remote client, such as an HTTP or HTTPS website or a database.

    Supported versions

    Enterprise Edition and SM Edition.

    Note

    If your Bastionhost instance is Basic Edition, you need to upgrade to the corresponding version. For more information, see Upgrade instance type.

    Configuration flow

    Managing applications through Bastionhost generally involves the following steps:

    1. Prepare an application server: The administrator needs to prepare a Windows host as the application server and deploy Windows Server Remote Desktop Service and RemoteApp applications on the application server. For configuration steps, see Deploy Windows Server as an application server.

      Note

      We recommend that you use Windows Server 2016, Windows Server 2019, or Windows Server 2022 as the operating system for the application server.

    2. Import and add the application server to Bastionhost: Import the prepared application server into Bastionhost and add the imported application server on the application page of Bastionhost.

    3. Deploy the application server: Publish the USMDriver.exe RemoteApp program on the application server.

    4. Synchronize Bastionhost users to the application server: After deploying the application server, you need to synchronize Bastionhost users to the application server and create corresponding accounts for them. After successful synchronization, O&M personnel can log on to the application server using these accounts to perform O&M operations.

    5. Add remote clients in Bastionhost: Add remote clients for accessing application assets on the application server, such as browsers and database client tools.

    6. Add and configure applications in Bastionhost: Add client applications or web applications and grant access to the appropriate O&M personnel.

    image