Installation

Installation

Prerequisites

To install IAP Desktop, you'll need:

• Windows 8, Windows Server 2012, or higher
• Internet access (at least to Google APIs), either directly, via NAT, or proxy
• You do not need admin rights unless you are installing on Windows Server (Windows Server disables per-user installations by the default)

To use IAP Desktop, you also need:

• A Google Cloud project. If you are a Project Owner of the project, you have all permissions needed to use IAP Desktop. Otherwise, you need a combination of the following roles:

  • Compute Instance Admin or Compute Admin (to list and access VM instances)
  • IAP-secured Tunnel User (to use IAP TCP forwarding)

• A firewall rule that permits access from Identity-Aware-Proxy to VM instances. You can create such a firewall rule by using the following command:

  gcloud compute firewall-rules create allow-rdp-ingress-from-iap \
      --direction=INGRESS \
      --action=allow \
      --rules=tcp:3389 \
      --source-ranges=35.235.240.0/20
  

Installation

To install IAP Desktop, follow these steps:

1. Double-click the downloaded installer package

2. Follow the instructions of the installer. Once you reach the Completed IAP Desktop Setup Wizard step, click Finish to launch IAP Desktop:

   

3. Because this is the first time you use IAP Desktop, you are prompted to sign in.

   

4. Click Sign in with Google and follow the instructions in the browser.

5. In the Add project dialog, type the name or ID of a Google Cloud project that contains Windows VM instances, then click OK.

   

6. Notice that the project and all Windows VM instances are added to the Project Explorer window:

   

This completes the installation of IAP Desktop.