Lira RDP Security

Operations and recovery

Operations and recovery

Controlled engineering guidance

An engineering assistant for safe RDP configuration

Inside the authenticated Lira console, the assistant evaluates the current server state and builds a safe sequence for certificates, MFA and access recovery.

Readiness assessment

Checks agent connectivity, event collection, updates and Windows Firewall before recommending a change.

RDP certificates

Identifies prerequisites and directs the administrator through the existing audited certificate workflow.

Staged MFA

Verifies enrollment and recovery prerequisites before enforcement, reducing the risk of losing administrative access.

Recovery and audit

Keeps changes within role-based, logged Lira workflows and preserves a clear route back to server access.

The assistant is available only after authentication. It does not expose server commands or management access on the public website, and high-risk operations continue to require administrator confirmation.

Open the Lira console

RDP TLS · Let's Encrypt · DNS-01

Trusted RDP certificates—automated, not calendar-driven

Lira monitors certificates across the server fleet, issues publicly trusted Let's Encrypt certificates, and deploys them to Remote Desktop through the agent.

Ready-made PFX/PEM files, commercial CA certificates, and multiple DNS names (SANs) are supported as well.

RDP TLS certificate guide

Full capability list

Portal + Windows agent. Commands go outbound over HTTPS; optional WinRM fallback when the agent is offline.

Monitoring
  • Windows Security 4624/4625 for RDP logon type 10; MSSQL failed logins
  • Attack-source map, real-time event stream, session view, and notifications for significant events
  • Audit log of blocks, unblocks, installs, and maintenance commands

Blocking
  • Time-limited automatic blocks in Windows Firewall and optional centralized synchronization with OPNsense
  • Trusted CIDR whitelist removes matching central and local blocks
  • Manual unblock, synchronized rule counts, and an auditable action trail

MFA & access
  • MFA at Windows logon (TOTP) with portal enrollment
  • Multi-tenant RBAC; optional portal MFA and business SSO (OIDC)
  • Per-agent API tokens — rotatable from the console

Server park maintenance
  • Windows Update scan/install, recurring schedules, reboot windows, and IANA time zones
  • Defender status, scans, threat remediation, independent Microsoft SQL Server and PostgreSQL exclusion profiles, and manual exclusion management
  • CPU, RAM and disk pressure; firewall profiles; local Windows users; RDP TLS and certificate state

Install the Windows agent

Agent installation becomes available after the organization is registered. The secure portal automatically generates an individual key linked to your organization and provides a personalized installation command. This ensures that each server is connected to the correct environment without using shared installation credentials.

Contact support

Product assistant and tickets — we reply by email.

Ask about the product

Pricing, trial, agent install, MFA, firewall sync — answers in the portal.

Open support console

Direct contact and updates

Continue the conversation on Telegram

Contact the Vyvick team privately or follow the official engineering channel.

@vyvick

Contact the Vyvick team

Ask about Lira, a pilot deployment, licensing or cooperation in a private conversation with the corporate account.

Contact us on Telegram
@VyvickTechnology

Engineering and product updates

Follow Lira, Elovit and Niya publications, operational guidance and product announcements in one channel.

Follow the Telegram channel

Do not send passwords, MFA codes, recovery codes or infrastructure access keys through Telegram. Technical incidents remain documented in the support portal.