Quick way to go from unencrypted to encrypted connection

[jftuga]

I just updated about 20 servers from using an unencrypted connection to an encrypted connection. They all use the same rc4.key file.

On a server that you have manually turned on encryption...

1) Save the rc4.key and MSRC4Plugin_NoReg.dsm to a folder where you will run the batch file from (see below).

2) run regedit to:
HKLM\SOFTWARE\ORL\WinVNC3
copy UseDSMPlugin and the DSMPlugin values, by right clicking, export, save as Win 9x/NT4 .reg file.

Now do the same for:
HKLM\SOFTWARE\ORL\WinVNC3\Default

Save this file as uvnc.reg... (example below is truncated for brevity)

Code: Select all

REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\ORL\WinVNC3]
"UseDSMPlugin"=dword:00000001
"DSMPlugin"=hex:02,04,04,43,34,04,02,05,04,04,02,02,
00,03,01,00,00,00,00,01,04,04,01,30,02,04,01,00,01,03,
00,00,38,00,00,00,xx,00,00,00,xx,00,00,00,00,00,00,00

[HKEY_LOCAL_MACHINE\SOFTWARE\ORL\WinVNC3\D002ult]
"UseDSMPlugin"=dword:00000001
"DSMPlugin"=hex:02,04,04,43,34,04,02,05,04,04,02,02,
00,03,01,00,00,00,00,01,04,04,01,30,02,04,01,00,01,03,
00,00,38,00,00,00,xx,00,00,00,xx,00,00,00,00,00,00,00

3) You will need two Process Utility programs from sysinternals...
http://www.microsoft.com/technet/sysint ... ities.mspx
psservice and psexec

4) Run this batch file, with the remote server name as the only command line argument...

Code: Select all

@echo off

set ARG=%1
if not DEFINED ARG goto USAGE

set DEST="\\%1\c$\Program Files\UltraVNC"

copy rc4.key %DEST%
copy MSRC4Plugin_NoReg.dsm %DEST%
copy uvnc.reg %DEST%

psexec \\%1 -i regedit /s "c:\Program Files\UltraVNC\uvnc.reg"
psservice \\%1 restart winvnc
goto END

:USAGE
@echo.
@echo Give remote server name on command-line.
@echo.
goto END

:END

Good luck!
-John

[jftuga]

Has anyone tried this with the AES plugin instead of the MSRC4 plugin?

Thanks,
-John