Remote Desktop

Remote Desktop

CouchLiteOS includes a Remote Desktop (RDP) client (FreeRDP 3) for Windows PCs and Linux machines running xrdp. One session runs at a time.

Add a connection

Settings > REMOTE DESKTOP > ADD CONNECTION. Every field works with a controller: A / Cross edits a field, Left/Right switches ON/OFF, X / Triangle (or F12) opens the on-screen keyboard; finish typing with TYPE + ENTER.

Field	Values
DISPLAY NAME	Required
HOST	Name or IPv4 address (CouchLiteOS is IPv4-only)
PORT	Default 3389
USERNAME	Required; DOMAIN\user and user@domain work too
DOMAIN	Optional
RESOLUTION	NATIVE (this screen), FIT (follows the window), or CUSTOM (a preset such as 1920x1080, or type a size)
FULLSCREEN	ON / OFF
AUDIO	ON plays the remote sound here; OFF leaves it on the remote PC
CLIPBOARD	ON shares text both ways (no file transfer)
SAVE PASSWORD	OFF (default) asks every time; ON stores it unencrypted in a root-only file

Then SAVE CONNECTION. Pick a saved connection for CONNECT, EDIT CONNECTION, FORGET SAVED PASSWORD, FORGET CERTIFICATE or DELETE CONNECTION.

Passwords

• By default you type the password with the on-screen keyboard at each connection. It is never written to a log.
• A saved password is tied to the host, port, username and domain it was saved for; changing any of them turns SAVE PASSWORD off until you save it again.
• Wrong passwords are never retried automatically, so the account cannot be locked out by retries.
• Support files never include passwords or usernames.

Certificates (first connection)

1. Before the first connection CouchLiteOS shows the server's SHA-256 certificate fingerprint. Compare it with the server:
   • Windows (PowerShell): Get-ChildItem 'Cert:\LocalMachine\Remote Desktop' | ForEach-Object { [BitConverter]::ToString([Security.Cryptography.SHA256]::Create().ComputeHash($_.RawData)) } (Windows' Thumbprint column is SHA-1, a different value)
   • xrdp: openssl x509 -in /etc/xrdp/cert.pem -noout -fingerprint -sha256
2. TRUST AND CONNECT remembers it.
3. If it ever changes, the connection is blocked with CERTIFICATE CHANGED - CONNECTION BLOCKED. If the server's certificate was replaced on purpose, verify the new one, then use FORGET CERTIFICATE and connect again.

Launcher buttons

Pin a connection to the home screen with PIN TO LAUNCHER. It appears in APPS. Then:

• BUTTON LABEL changes its text.
• BUTTON POSITION moves it up or down.
• CONTROLLER SHORTCUT assigns LB/L1, RB/R1, View/Select or Menu/Start. On the home screen that button (or F5-F8) starts the connection. Each shortcut belongs to one button.
• UNPIN FROM LAUNCHER removes it. Settings > APPLICATIONS can also enable, disable, reorder or delete it.

During a session

• Tap Guide for the quick menu. Hold the Home shortcut for ACTIVE APPLICATIONS: A resumes the session, Y / Square closes it.
• On a keyboard, use Ctrl+Alt+H to get Home (Settings > CONTROLS > KEYBOARD HOME KEY changes it or turns it off). The Super key goes to the remote PC.
• Volume and brightness keys control this box, not the remote PC.
• If the connection drops, it reconnects by itself.

Troubleshooting

Message	Do
COULD NOT REACH host:port	Check the host, port and the PC's firewall. IPv4 only.
CERTIFICATE CHANGED - CONNECTION BLOCKED	See Certificates above
Authentication failed / wrong password / account locked out	Check username, domain and password, then connect again
The saved password is missing	Save it again with SAVE PASSWORD
xrdp shows its own login screen	Known with Debian 13's xrdp: sign in again in xrdp's dialog

The RDP client in Debian 13 is marked experimental by its developers.