Installing a Secure pcAnywhere 10.

5 Remote
on Windows

Introduction
This is the procedure I used to set-up a secure pcAnywhere 10.5 remote on Windows
2000 Professional. It should work similarly for other versions of pcAnywhere and
Windows.

This information is provided as-is with NO WARRANTY expressed or implied. You
agree to use it at your own risk. The author(s) cannot be held liable for the use or misuse
of this information.
Assumptions
1. The host has already been set-up
2. There is a caller account already set-up on the host for this remote user
3. Certificates for the host and remote have already been generated
Procedure
Insert the pcAnywhere CD into the drive. This should automatically bring up a menu that
looks like this:
















Copyright 2002-2007 J AMM Consulting, Inc. Page 1
All trademarks are property of their respective holders.

Select I nst al l pcAnywher e 10. 5. This will bring up a menu that looks like this:

















Select Remot e Onl y.
This will bring up a setup wizard.
Follow the instructions on the screens to install it.

Once finished, it will ask you to update the pcAnywhere software.
Allow it to run the update.
If it asks you to register the product, you can do so, or hit the Ski p button.
Once the installation is finished, it will ask to restart the computer. Allow it to do so.
Once the machine reboots, you should see an icon on the desktop for Symant ec
pcAnywher e. It should look like this:






Create a folder c: \ Pr ogr amFi l es\ Symant ec\ pcAnywher e\ Cer t s

Copy the . p12 file for the remote user into the Cer t s directory.
Copy the . p7b file for the host into the Cer t s directory.

Using Windows Explorer, navigate to the Cer t s directory.

Double-click on the . p12 file for the remote user.

This will start the Certificate Import Wizard.

Copyright 2002-2007 J AMM Consulting, Inc. Page 2
All trademarks are property of their respective holders.

You should first encounter the Welcome panel for the wizard. It should look like this:

















Hit the Next button.

This will bring you to a panel asking for the file you want to import. It should look like
this:
















Confirm that the file name input is pre-filled with the full path to the . p12 file for the
remote user and hit the Next button.

Copyright 2002-2007 J AMM Consulting, Inc. Page 3
All trademarks are property of their respective holders.

This will bring you to a panel asking for the password to use for the private key. It
should look like this:

















Do the following:
1. Leave the password input blank
2. Ensure the Enabl e st r ong pr i vat e key pr ot ect i on box is not checked
3. Check the box for Mar k t he pr i vat e key as expor t abl e
The result should look like the panel pictured above. When finished, hit the Next button.

Copyright 2002-2007 J AMM Consulting, Inc. Page 4
All trademarks are property of their respective holders.

This will bring you to a panel asking for the certificate store to use. It should look like
this:
















Do the following:
1. Select the radio button for Pl ace al l cer t i f i cat es i n t he f ol l owi ng
st or e
2. Hit the Br owse button
3. On the choose dialog that comes up, select the Per sonal store and hit the OK
button to close the browse dialog
The result should look like the panel pictured above. When finished, hit the Next button.

This will bring you to the Completing the Certificate Import Wizard panel. It should look
like this:
















Hit the Fi ni sh button.

Copyright 2002-2007 J AMM Consulting, Inc. Page 5
All trademarks are property of their respective holders.

You should get a dialog stating that the import was successful. It should look like this:






Hit the OK button to close it.

Using Windows Explorer, navigate to c: \ Pr ogr amFi l es\ Symant ec\ pcAnywher e and
double-click on the MachKey. exe program. This will bring up a window that looks like
this:



















This shows you a listing of the certificates in your personal store and the machines store.
We need to copy the remote user certificate we just imported into the machine store. To
do so, select the certificate with the remote users name and hit the Copy t o Machi ne
St or e button. This will add the certificate to the machine store as shown in the picture
above. When finished, close the MachKey utility.

Copy the cer t cons. exe file from c: \ Pr ogr amFi l es\ Symant ec\ pcAnywher e into the
Cer t s directory you created earlier.

Go to a DOS prompt and do the following:
cd c: \ Pr ogr amFi l es\ Symant ec\ pcAnywher e\ Cer t s
cer t cons pca. st or e [The name of the hosts . p7b file]
Exit the DOS prompt.

Copyright 2002-2007 J AMM Consulting, Inc. Page 6
All trademarks are property of their respective holders.

Double-click the pcAnywhere icon on the desktop it to run the program.
If it asks you to register the product, you can do so, or hit the Ski p button.

Once the program runs, you will get a screen that looks like this:

















Double-click on the Add Remot e icon.

Copyright 2002-2007 J AMM Consulting, Inc. Page 7
All trademarks are property of their respective holders.

This will bring up a dialog to allow you to configure a new remote session. The first
panel you encounter will be for setting up the connection. It should look like this:























Confirm that the TCP/ I P device is checked.

Copyright 2002-2007 J AMM Consulting, Inc. Page 8
All trademarks are property of their respective holders.

Now, click on the Set t i ngs tab. You should get a screen that looks like this:























Do the following:
1. Fill in the Net wor k host PC t o cont r ol or I P addr ess input to the IP
address or name of the host machine.
2. Under the Logi n i nf or mat i on area, check the box to Aut omat i cal l y l ogi n t o
host upon connect i on
3. Enter your login name in the Logi n name input
4. Enter your password in the Passwor d input
5. Leave the Domai n input empty
When you are finished, it should look similar to the panel pictured above.

Copyright 2002-2007 J AMM Consulting, Inc. Page 9
All trademarks are property of their respective holders.

Now, click on the Secur i t y Opt i ons tab. You should get a screen that looks like this:























Do the following:
1. For the Level selection box, choose Publ i c key
2. Check the box for Deny l ower encr ypt i on l evel
3. Hit the button for the Publ i c key Encr ypt i on Wi zar d

This will bring up the Public Key Encryption Wizard. You should get a screen that looks
like this:














Hit the Next button.
Copyright 2002-2007 J AMM Consulting, Inc. Page 10
All trademarks are property of their respective holders.


This will bring you to a panel to select your certificate. It should look like this:















Check the box next to the certificate for the remote user and hit the Next button.

This will bring you to a panel to select your certificate store. It should look like this:















Hit the Br owse button. In the chooser dialog that comes up, navigate to the pca. st or e
file in the Cer t s directory and hit OK to close the chooser dialog. When finished, hit the
Next button.

Copyright 2002-2007 J AMM Consulting, Inc. Page 11
All trademarks are property of their respective holders.

This will bring you to a confirmation pane that looks like this:















Hit the Finish button. This will take you back to the Secur i t y Opt i ons tab in the
properties for the new remote session. It should look like this:























Note that the Pr i vat e key cont ai ner and Cer t i f i cat e common name inputs have
been filled-in. When finished, hit the OK button.

Copyright 2002-2007 J AMM Consulting, Inc. Page 12
All trademarks are property of their respective holders.

This will create an icon for the new remote connection and prompt you to fill in a name
for the connection. Give it the name or IP address of the server. It should look like this:
















Double-click on the remote icon you just created to connect to the host computer.

Let J AMM Consul t i ng sec ur e your net w or k
and syst ems!

Visit us at http://www.J AMMConsulting.com for examples of our work
and how we can grow your business



Copyright 2002-2007 J AMM Consulting, Inc. Page 13
All trademarks are property of their respective holders.