Help & FAQ for Linux

The help that comes with Alcedo RDP for Linux, so you can read it before you install. In the app it is under the ? button in the sidebar.

Using Mac? Read the Mac help & FAQ.

Getting Started

Alcedo RDP connects your Linux desktop to Windows PCs and servers over Remote Desktop (RDP), and to Azure Virtual Desktop, Windows 365 Cloud PCs and on-premises Remote Desktop Services feeds.

How it works

Each remote computer you use is saved as a connection. Connections appear as cards in the main window, can be grouped and marked as favorites, and remember every setting for that computer — resolution, which local devices to share, and performance options. When you connect, the remote desktop opens in its own window.

Add a connection

  1. Click Add Connection in the toolbar.
  2. On the General tab enter a display name and the computer's host name or IP address. The default RDP port is 3389.
  3. Optionally enter the username, domain and password. Passwords are stored in your desktop's keyring (GNOME Keyring or KDE Wallet via the Secret Service), never in plain text.
  4. Review the Display, Resources, Experience and Gateway tabs — see Connection Settings — then click Save.

Connect

Double-click a connection card, or click its ▶ button. If no password is saved you are asked to sign in; the credentials you enter are saved to the keyring and to the connection so you aren't asked again. The first time you reach a server whose certificate isn't trusted, Alcedo shows the certificate details and lets you Reject it, Accept once, or Always trust it.

Import and workspaces

Import connections…
In the ⋯ menu. Reads standard .rdp files as saved by Microsoft Remote Desktop — including RemoteApp, gateway and load-balancing settings — and JSON exports from Alcedo on Linux or macOS, creating a connection for each one. A file with no connection in it is skipped, so a stray text file never becomes a connection.
Export connections…
In the ⋯ menu. Tick the connections, then save them as one JSON file — every setting, importable back into Alcedo on Linux or macOS — or as one .rdp file per connection for any Remote Desktop client. Passwords are never exported; enter them again after an import.
Add workspace feed…
In the ⋯ menu. Enter the RD Web Access feed URL of your on-premises Remote Desktop Services deployment (usually ending in /RDWeb/Feed/webfeed.aspx), your username and password, and every published desktop and RemoteApp is imported as a connection in the group you choose.

Organize

Groups
Set a group name on a connection's General tab. Groups appear in the sidebar so related computers stay together.
Favorites
Click the star on a card to pin it to the Favorites list.
Right-click a card
Opens a menu to Connect, Edit, Duplicate, favorite or Delete it. Duplicate makes a copy (“… copy”) with the same settings and password, ready to tweak.
Recent
Connections you have used, newest first — also the clock button at the bottom of the sidebar.
Search
The search field filters the current list by name and host.

Connection Settings

Every option in the New / Edit Connection dialog (the pencil on a card). Settings are stored per connection.

General

Connection type
Desktop opens the full Windows desktop. RemoteApp runs one program on the remote computer and shows its windows on your desktop as if they were local.
Display Name / Group
The label shown on the card and in the session window title, and the sidebar group the connection belongs to.
Host / Port
Host name or IP address of the remote computer, and the port it listens on (3389 unless your administrator changed it).
Username / Domain / Password
Pre-fills the sign-in. Leave the domain empty for local accounts. The password is kept in the system keyring.
Remote application
For RemoteApp connections: the program alias (for example ||CALC) or full path on the remote computer, plus optional working directory and arguments.
Legacy TLS compatibility
On the Gateway tab. Only needed if a connection fails with a TLS handshake error (code 0x0008): some older servers, or a security appliance in front of them, reject this client's modern handshake because it no longer offers the old SHA-1 signature. Turning this on re-adds it so the connection can complete. The failed screen also offers a one-time Retry with legacy TLS.

Display

Match window size (recommended)
The remote desktop is resized to fit the session window whenever you resize it or enter full screen, and the remote UI scale follows your local display scaling. Requires Windows 8.1 / Server 2012 R2 or newer.
Custom
Pins the remote desktop to the width and height you enter. The window shows it at true size and adds black bars if the window is larger; it never upscales.
Start session in fullscreen
Opens the session directly in full screen, sized to your monitor. Leave with the toolbar's Exit Fullscreen button.
Color depth
32-bit gives the best picture; lower depths save bandwidth on very slow links.

Resources

Which local devices the remote session can use. Everything here is off by default except the clipboard; turn on only what you need.

Local folder share
Mounts a folder from this computer inside the session. It appears under This PC in the remote File Explorer with the drive name you choose.
Clipboard
Copy and paste text and images between your desktop and the remote session.
Audio playback
Play the remote session's sound on this computer.
Microphone
Send your microphone to the remote session.
Printers
Standard RDP printer redirection: your local printers appear as printers inside the remote session.
TSPrint / TSScan / TSWebCam
TerminalWorks add-ons for printing, scanning and webcam redirection. Each needs the matching server component installed on the remote computer — see Print, Scan & Webcam.

Experience

Connection Speed
A preset from Modem to LAN that switches the visual effects below in bulk. Slower presets turn effects off so the session stays responsive on slow links; LAN keeps everything on.
Visual Effects
Individual Windows effects you can allow or suppress: Wallpaper, Themes, Window Drag (show contents while dragging), Animations, Font Smooth (ClearType) and Aero/Glass (desktop composition). All On / All Off set them together.

The modern graphics pipeline and RemoteFX codecs are always negotiated automatically; there is nothing to configure.

Gateway

Use Remote Desktop Gateway
Routes the connection through an RD Gateway server so you can reach computers on a corporate network from outside it. Enter the gateway server and port (443) your IT administrator gave you.
Use the same credentials as the RDP session
On by default. Turn it off to sign in to the gateway with a different username, domain and password.

In a Session

Every connection opens in its own window; you can keep several sessions open side by side.

The session toolbar

Move the pointer to the very top edge of the session window and a toolbar slides in. It hides again when the pointer leaves it.

Ctrl+Alt+Del
Sends the secure attention sequence to the remote computer — lock Windows, change your password or open Task Manager. Ctrl+Alt+End on the keyboard does the same.
⊞ Win
Sends the Windows key to the remote computer — opens the Start menu, or drives Windows shortcuts your own desktop would otherwise catch.
Fullscreen / Exit Fullscreen
Toggles full screen for this session — or press F11 (or Ctrl+Alt+Enter). With Match window size, the remote desktop is resized to your monitor.
Disconnect
Ends the session and shows the disconnected screen. Your programs keep running on the remote computer; you are simply disconnected from it.

Resizing and scaling

With Match window size (the default), resizing the window asks the remote computer to change its desktop size to match, so the picture stays pixel-for-pixel. With a Custom size the picture is shown at its true size and letterboxed. The remote UI scale (100 %, 150 % …) follows your local display scaling.

Clipboard

Text and images are synchronized both ways while Clipboard is enabled for the connection. File copy and paste is not supported.

RemoteApp sessions

For RemoteApp connections the session window only shows a status panel; each window the remote program opens appears as its own window on your desktop and can be moved, resized and closed like a local one. End session closes the program and disconnects.

When the connection drops

If the network drops, Alcedo tries to reconnect automatically for a short while and shows Reconnecting over the frozen session. A successful reconnect brings your programs and windows back exactly as they were.

If it can't get back in, or the server disconnected you on purpose — you were signed out, another device took the session over, or the connection failed — the window shows Disconnected or Connection failed with the reason, and offers Reconnect and Close.

Cloud & Workspaces

Azure Virtual Desktop, Windows 365 Cloud PCs and on-premises Remote Desktop Services feeds show up next to your own connections.

Sign in with a work or school account

  1. Open Azure & Cloud PCs in the sidebar and click Sign In (also available in Settings).
  2. Your browser opens the Microsoft sign-in page. Sign in with your Microsoft Entra ID account; Alcedo asks for permission to read your Cloud PCs and Virtual Desktop resources.
  3. Back in Alcedo, your workspaces and Cloud PCs are listed. Click Refresh any time to fetch the latest list.

Tip The first time you open a Virtual Desktop resource, Microsoft requires a second device-code sign-in. Alcedo copies the code to the clipboard and opens the verification page — paste the code there and the dialog closes by itself.

Workspaces and Cloud PCs

Windows 365 Cloud PCs
Cloud PCs assigned to you, with their status. Click Connect to start a session. Cloud PCs are launched through your Virtual Desktop feed, so a Cloud PC that isn't published in the feed can't be opened here.
Azure Virtual Desktop workspaces
Each workspace lists its desktops and RemoteApp programs. RemoteApps open as individual windows on your desktop instead of a full desktop.
Session Settings (⚙ on a card)
Cloud resources can't be edited like normal connections, but each card has Session Settings to choose the shared devices — clipboard, audio, microphone, printers, TSPrint, TSScan, TSWebCam — plus shared folders, the graphics codecs and whether it starts in full screen. Options you leave alone follow Settings › Cloud › Session defaults.
Entra-joined session hosts
Some hosts require you to sign in to the session itself. Alcedo shows the Microsoft sign-in page in a dialog and continues connecting automatically once you are signed in.

On-premises Remote Desktop Services

Use ⋯ › Add workspace feed… with the RD Web Access feed URL from your own Remote Desktop Services deployment, plus your domain username and password. The published desktops and apps are imported as regular connections that you can edit, group and favorite like any other.

App Settings

The gear button at the bottom of the sidebar. Three tabs; every change applies immediately.

General

Dark appearance
Alcedo's signature dark look. Turn it off for the light theme. The choice is remembered.
Developer mode
Adds a Logging tab to every connection (the Edit dialog, and Session Settings on a cloud card) with a switch per add-on log: TSPrint, TSScan, TSWebCam. While a session with a switch on is running, that add-on writes its log to /tmp — see Troubleshooting › Collecting logs. Starting Alcedo with --dev turns Developer mode on for that run.
Help & Support
This guide (also F1), the TerminalWorks support site, and Report an issue, which opens an email to support with the app version already filled in.

Cloud

Microsoft account
Sign in for Azure Virtual Desktop and Windows 365, or sign out. Signing out clears the cloud lists and the saved tokens; your own connections are untouched.
Session defaults
The shared devices, folders, graphics codecs and full-screen choice every Azure Virtual Desktop and Windows 365 session starts with. Cloud cards have no editable connection, so this is where their defaults live; a card's own Session Settings (⚙) override only the options you change there, and everything else keeps following the defaults.

About

The app version and build number — include them when reporting an issue — and links to Help, the website and support.

Where things are stored

Connections
A JSON file in your user data directory (~/.local/share/TerminalWorks/Remotely).
Passwords and tokens
The desktop keyring through the Secret Service (GNOME Keyring, KDE Wallet). If no keyring is running, passwords can't be saved and Alcedo asks for them on every connection.
Trusted certificates
Fingerprints you chose to Always trust are remembered; a changed certificate is flagged the next time you connect.

Keyboard & Mouse

Inside a session every key you press goes to the remote computer, including modifiers and the Super (Windows) key where your desktop environment lets it through.

In a session

Ctrl+Alt+End
Send Ctrl+Alt+Del to the remote computer (the local OS reserves Ctrl+Alt+Del)
F11
Toggle full screen (Ctrl+Alt+Enter does the same)
Top edge hover
Reveal the session toolbar (Ctrl+Alt+Del, Windows key, Fullscreen, Disconnect)
Mouse wheel
Vertical and horizontal scrolling are forwarded, including touchpad two-finger scrolling
Pinch
Touchpad pinch zooms the remote program (sent as Ctrl + mouse wheel). Needs a desktop that reports pinch gestures — Wayland does, X11 doesn't.
Right / middle click
Forwarded as on Windows

Main window

F1
Open this help
Double-click a card
Connect

Print and Scan dialogs

Enter
Print
Esc
Cancel the dialog

Tip Some desktop environments grab shortcuts such as Super, Alt+Tab or Alt+F4 before Alcedo sees them. Use the session in full screen, or change the shortcut in your desktop's keyboard settings, if you need those keys on the remote side.

Troubleshooting

"Connection failed"

The disconnected screen shows the reason reported by the remote computer or by the network layer. Common causes:

Wrong address or port
Check the host name / IP and that port 3389 (or your custom port) is reachable — a firewall or VPN may be blocking it.
Remote access is off
On the Windows PC, Settings › System › Remote Desktop must be enabled and your account allowed to connect.
Sign-in failed
Re-enter the password and try adding the domain. For a local account on the PC use the computer name as the domain, or a leading ".\".
No Remote Desktop licenses
Windows Server needs Remote Desktop licensing (RDS CALs) once its 120-day grace period ends. If the server can't reach a license server or has no licenses left it refuses the session; only the server administrator can fix that. Windows 10/11 Pro PCs never need licenses.

"We couldn't establish a secure connection" (TLS)

The remote PC accepted the connection but the TLS handshake failed (error code 0x0008). The common cause on the Linux client is a server, or a TLS-inspecting firewall in front of it, that rejects a handshake offering only modern signatures — the client's OpenSSL no longer advertises the old SHA-1 one that Windows still does.

On the failed screen, click Retry with legacy TLS to reconnect once with that signature re-enabled. To make it permanent for that connection, turn on Legacy TLS compatibility on its Gateway tab. It is a small security downgrade, so use it only where a connection needs it; the real fix is a certificate or TLS update on the server.

Certificate warning

On the first connection to a server with a self-signed or otherwise untrusted certificate, Alcedo shows its details. Accept once trusts it for this session only; Always trust remembers it. If the certificate of a known server suddenly changes, be cautious — verify with your administrator before accepting.

Another device connected to this session

Windows allows one active connection per user session. When you (or a colleague using the same account) connect from another computer, that computer takes the session over and this one is disconnected. Reconnect from the computer you want to use and the session moves back.

Passwords aren't remembered

Alcedo stores passwords in the desktop keyring. If no Secret Service is available — a minimal window manager without GNOME Keyring or KDE Wallet, or a locked keyring — saving fails silently and you are asked for the password each time. Start or unlock your keyring, or install gnome-keyring.

Sign-in to on-premises servers always fails

NTLM sign-in (workgroup PCs, RD Web feeds) needs the OpenSSL legacy provider for MD4/RC4. The AppImage bundles it; if you built Alcedo yourself and the terminal shows "OpenSSL legacy provider unavailable", install your distribution's OpenSSL legacy provider package.

Display server notes

The AppImage runs on X11 (XWayland on Wayland desktops) by default because that is the most dependable choice for a bundled Qt. To try native Wayland, start it with QT_QPA_PLATFORM=wayland.

Printing problems (TSPrint)

TSPrint Server sends each print job to Alcedo, which shows the Print dialog and hands the document to CUPS. If a job never arrives, the dialog shows the wrong paper or tray, or nothing comes out of the printer, the client-side log shows each step.

Log file
/tmp/tsprint_debug.log — the handshake with the server, every job (document name, size, the paper, orientation, copies and duplex the server asked for), the printer, paper and tray chosen in the dialog, what was submitted to CUPS and any error.

Scanning problems (TSScan)

Alcedo lists the scanners SANE knows about (what scanimage -L shows) and sends the list to TSScan Server when the remote application asks. If the remote side shows no scanners or its application closes while loading devices, the client-side log tells us what was found and exactly what was sent.

Log file
/tmp/tsscan_debug.log — every TSScan step with a timestamp: scanner discovery (each scanner's name and its length, and how long it took), the server's commands, the replies and the scan itself.

Webcam problems (TSWebCam)

Alcedo lists the cameras it can capture from (V4L2 devices with a raw format) and streams H.264 to TSWebCam Server, which shows them as a virtual camera in the session. If no camera is listed or the picture never starts, the client-side log shows the cameras found and the capture pipeline.

Log file
/tmp/tswebcam_debug.log — the cameras found with their formats and resolutions, what was advertised, the handshake, capture start and stop with resolution, frame rate and encoder, frame counters and the watchdog that fires when the camera delivers nothing.

Collecting logs

Every launch writes alcedo-app.log and alcedo-freerdp.log to /tmp (or $TMPDIR) for the session itself; they are recreated on each launch.

The add-on logs — tsprint_debug.log, tsscan_debug.log and tswebcam_debug.log — are written only on request: turn on Developer mode in Settings › General (or start Alcedo with --dev), switch the add-on on in the connection's Logging tab (Edit dialog, or Session Settings on a cloud card), then connect and reproduce the problem. They are appended across launches with a banner per run and trimmed once they pass 2 MB. Attach the files to a Report an Issue email — together with the Windows Event Viewer entry when the remote application crashed.

Still stuck?

Visit the TerminalWorks support site, or use Report an Issue to email [email protected]. Please include the message shown on the disconnected screen, the Windows version of the remote computer and your Linux distribution — the email template fills in the app version for you. The log files in /tmp (see Collecting logs above) help with anything that can't be seen on screen.