Workbench is a more efficient and convenient connection tool than Virtual Network Computing (VNC) and allows multiple users to connect to a single Elastic Compute Service (ECS) instance at the same time. Workbench supports the following authentication methods for logons to instances: password-based authentication, key-based authentication, and credential-based authentication.
Prerequisites
A logon password or a key pair is configured for the instance to which you want to connect. For information about how to configure a logon password for an instance, see Reset the logon password of an instance.
NoteYou cannot bind key pairs to Windows instances in the ECS console. If you want to use a key pair to connect to a Windows instance, you can enable the sshd service (such as Cygwin SSHD or WinSSHD in Windows) and configure a key pair for the instance. For more information about how to enable the sshd service in Windows, see Get started with OpenSSH for Windows.
The instance is in the Running state.
Security group rules are added to allow the IP addresses related to Workbench to access the instance.
Procedure
By default, a Workbench remote session persists for 6 hours. If you do not perform operations for 6 hours, the remote connection is closed. You must reconnect to the instance.
Log on to the ECS console.
In the left-side navigation pane, choose .
In the upper-left corner of the top navigation bar, select a region.
On the Actions page, find the instance to which you want to connect, and click Remote connection in the Actions column.
In the Remote connection dialog box, click Sign in now in the Workbench section.
In the Instance Login dialog box, configure parameters.
Configure the required parameters that are described in the following table.
Parameter
Description
Instance
The information about the current instance is automatically populated. You can also enter the IP address or the name of another instance.
Connection
To connect to an instance that resides in a VPC, use the public or private IP address of the instance.
To connect to an instance that resides in the classic network, use the public or internal IP address of the instance.
For information about different network types, see Overview and IP addresses of ECS instances in the classic network.
Authentication
Select an authentication method. The following authentication methods are supported:
Password-based: Enter a username, such as Administrator, and a password.
Credential-based: Select or create a credential.
Credentials are used to store instance information such as usernames, passwords, and keys. You can use credentials to connect to instances in a secure manner without the need to enter usernames and passwords. For more information, see the Create a credential in Workbench section of this topic.
In the lower part of the dialog box, click More Options to show the optional parameters. The following table describes the parameters.
Parameter
Description
Resource Group
By default, All is selected. You can select a resource group from the drop-down list.
Region
By default, All is selected. You can select a region from the drop-down list.
Protocol
By default, Remote Desktop (RDP) is selected.
NoteIf you want to use SSH to connect a Windows instance, install the Cygwin SSHD or WinSSHD service on the instance. For information about how to enable the sshd service in Windows, see Get started with OpenSSH for Windows.
Port
When Protocol is set to Remote Desktop (RDP), this parameter is automatically set to 3389.
If you have specified a different port as the remote desktop port, enter the port number.
NoteWhen Protocol is set to Terminal Connection (SSH), this parameter is automatically set to 22.
Click OK.
If all the prerequisites are met but the instance cannot be connected, perform the following operations on the instance:
Check whether a remote desktop service (such as Remote Desktop Services in Windows) is enabled. If not, enable a remote desktop service.
Check whether the required remote desktop port is enabled. If not, enable the port. The default remote desktop port is port 3389.
Check the group of the user that you used to connect to the instance. If you connect to the Windows instance as a non-administrator user, make sure that the user belongs to the Remote Desktop Users group.
Create a credential in Workbench
Perform the following operations to create a credential for an instance in Workbench. Then, you can use the credential to connect to the instance.
Log on to the ECS console.
In the left-side navigation pane, choose .
In the upper-left corner of the top navigation bar, select a region.
On the Actions page, find the instance to which you want to connect, and click Remote connection in the Actions column.
In the Remote connection dialog box, click Sign in now in the Workbench section.
In the Instance Login dialog box, configure parameters.
Create a credential.
Configure the required parameters that are described in the following table.
Parameter
Description
Instance
The information of the current instance is automatically populated. You can also select another instance from the drop-down list.
Connection
To connect to an instance that resides in a VPC, use the public or private IP address of the instance.
To connect to an instance that resides in the classic network, use the public or internal IP address of the instance.
Authentication
Select Credential-based.
Select Create Credential from the Credential drop-down list.
In the Add Credential dialog box, configure the parameters that are described in the following table.
Parameter
Description
Credential Name
Enter a name for the credential.
Username
Enter a username. Example: Administrator.
Credential Type
Only Password is available for Windows instances.
Material Name
Enter a name for the authentication material.
Password
Enter the logon password of the instance.
Fingerprint
The fingerprint is automatically generated based on the authentication material.
Click OK.
In the Instance Login dialog box, select the credential that you created from the Credential drop-down list and click OK.