Configure Remote Desktop (MacOS version)

Note to faculty/staff: Before using Remote Desktop for the first time, you must open a ticket requesting access AND complete a short online training session.

The instructions below are divided into four sections. The first two sections are required - "Install Cloudflare WARP for macOS" and "Enable the Cloudflare WARP certificate for macOS." If you already have a Remote Desktop connection that you've been using, follow the steps in the third section ("Edit an existing Remote Desktop connection") to update your connection. If you are setting up Remote Desktop for the first time, or would just prefer to set up a brand new connection, you can jump to the last section "Set up a new Remote Desktop connection."    


This process should only be set up on the device you'll be using from off-campus, and not on any campus-side desktop computers.

Install the Cloudflare WARP client for macOS

Before installing and setting up the WARP Client, ensure that your device is running MacOS Mojave (10.14) or higher. It is not compatible with older operating systems such as High Sierra (10.13).

  1. On Mac device you'll be using at home (to remote into your campus PC), download the Cloudflare WARP client for macOS from: https://cloudflarewarp.com/

select macos

  1. Go to your Downloads folder and open the Cloudflare_WARP.pkg file to being the installation.
  1. Once installed, when the Warp/disconnected pop-up appears, click the settings button (gear icon) and select Preferences.

select preferences

  1. Click the Account tab and then click Login with Cloudflare Zero Trust.

click login to cloudflare

  1. Enter "buffalostate" in the Enter your Team name box.

enter buffalostate

  1. Click Next when the "What is Cloudflare Zero Trust?" bubble appears. 

click next

  1. Click Accept when the "Your privacy" bubble appears. 

click accept

  1. Your default web browser will open to a Microsoft sign-in page. Sign-in using your Buffalo State email and password, and complete the multi-factor verification.
enter your email address complete mfa
  1. When the Zero Trust pop-up appears, click on the button to toggle it on. When "on" the Zero Trust button will turn blue and say "Connected"; when "off" it will turn gray and say "Disconnected". In general, you should toggle Zero Trust on when you use Remote Desktop and toggle it off when you are done with your remote session. 
Zero Trust is Disconnected ("Off") Zero Trust is Connected ("On")

zero trust disconnected

zero trust connected

Enable the Cloudflare WARP certificate for macOS

Follow these steps to enable the Cloudflare WARP certificate on your Mac.  

  1. Click Go > Utilities and open Keychain Access.

open keychain access

  1. In the System Keychains area on the left, click System and then select the Certificates tab.

go to system and then certificates

  1. Double-click Cloudflare for Teams ECC Certificate Authority (the one with the red X symbol).
  2. Click the arrow to expand the Trust section.
  3. In the When using this certificate drop-down, select Always Trust. Close the window when done.

Expand trust and choose always trust

  1. When prompted, enter the admin username and password for your computer and click Update Settings. The certificate is now trusted and the red x symbol should be gone.

Edit an existing Remote Desktop connection

If you already have a Remote Desktop shortcut that you've been using, follow these steps to make sure your connection is configured properly.

  1. Open Windows App for Mac (previously called Remote Desktop), hover your cursor over the existing connection, click the elipses (". . .") icon, and choose Edit.
     
  2. In the Gateway section, click the drop-down and select No gateway. Click to Save changes.
     
  3. For the Device Name or PC Name, be sure .bsclogon.buffalostate.edu is added after the actual Device Name for your computer. Click to Save changes.
     
  4. To test your connection, be sure Cloudflare WARP is enabled, and then double-click the entry for your connection in the Windows App (formerly Remote Desktop).

Set up a new Remote Desktop connection

If you are setting up remote connection in the Windows App for the first time, follow the steps below.

  1. Download the latest version of Windows App (formerly Remote Desktop) from the App Store. You can skip this step if you already have the app installed.
     
  2. Open the Windows App and click the + ("plus") icon in the upper-right corner and choose Add PC to add a new computer.
     
  3. Enter the Device Name of your campus PC followed by .bsclogon.buffalostate.edu in the PC name field.
    (For example, if your device name were DN4129PDE, you would enter "DN4129PDE.bsclogon.buffalostate.edu" with no quotation marks.)

enter device name

  1. For the Credentials field, choose Add Credentials from the pulldown options.

add user account

  1. Enter "bsclogon\" followed by your Buffalo State username in the Username field. If you like, you can add a Friendly name (i.e., something like "Buffalo State") as a custom label before clicking Add to complete this step.

enter your account info and click add

  1. Your settings should now look similar to the image below. You may want to give your connection a friendly name like "Remote to Work - no Gateway." Click Add to save the connection.

check settings and click add

  1. To remote into your campus PC, double-click on the saved connection within the Windows App (formerly Remote Desktop). You can also hover your cursor over the connection, and then click the Elipses (". . .") icon to either Connect from there, or choose to Export the connection as a shortcut on your computer.

double click to connect to your PC

  1. Click Continue at the "certificate couldn't be verified" screen. You should now be signed into your work PC.

click continue

  1. When you are ready to disconnect from your work PC, click Microsoft Remote Desktop from the menu bar and select Quit Remote Desktop.
     
  2. Re-authentication pop-up notification: The next time you use Remote Desktop, if more than twelve hours has passed, you will see the pop-up message below prompting you to re-authenticate. Click on the pop-up to proceed.

click on pop-up

Note: If you are getting a message "Safari Can't Open the Page" when attempting to complete the re-authentication process, be sure to follow the "Enable the Cloudflare WARP certificate for macOS" instructions above.  
Print Article

Related Articles (2)

Frequently asked questions related to using Cloudflare WARP (ZTNA)
Learn how to set up your Remote Desktop connection using Cloudflare ("Zero Trust") on your PC

Related Services / Offerings (1)

Request remote access to a Windows desktop on campus.
Loading...