xfreerdp3(1) xfreerdp3 xfreerdp3(1) (NAME) xfreerdp3 - X11 FreeRDP (SYNOPSIS) xfreerdp3 [file] [options] [/v:server[:port]] (DESCRIPTION) xfreerdp3 (RDP) X11 FreeRDP . RDP Windows . ogon gnome-remote-desktop xrdp VRDP ( VirtualBox) . (OPTIONS) /a:addin[,options], /addin:addin[,options] (Addin) /azure:[tenantid:id],[use-tenantid[:[on|off]],[ad:url][avd-access:format string],[avd-token:format string],[avd-scope:format string] AzureAD /action-script:file-name (:~/.config/freerdp/action.sh) /admin, /console ( ) +aero (desktop composition) (:off) /app:program:[path|||alias],cmd:command,file:filename,guid:guid,icon:filename,name:name,workdir:directory,hidef:[on|off] (Remote application) /assistance:password (Remote assistance) /auto-request-control: +async-channels () (:off) +async-update (:off) /audio-mode:[[none|2]|[server|1]|[redirect|0]] +auth-only (:off) /auth-pkg-list:[[none],]!ntlm,kerberos,!u2u ( '!' ). . 'none' . -authentication () (:on) +auto-reconnect (:off) /auto-reconnect-max-retries:retries 0 [0,1000] /bpp:depth bpp (:16) /buildconfig /cache:[bitmap[:on|off],codec[:rfx|nsc],glyph[:on|off],offscreen[:on|off],persist,persist-file:filename] /cert:[deny,ignore,name:name,tofu,fingerprint:hash:hash as hex[,fingerprint:hash:another hash]] . ! * deny ... . * ignore ... ( ). * name ... . * tofu ... . * fingerprints ... . /client-build-number:number ( [MS-RDPESC] ) /client-hostname:name /clipboard:[[use-selection:atom],[direction-to:[all|local|remote|off]],[files-to[:all|local|remote|off]]] : * use-selection: ... ( X11) X . CLIPBOARD . PRIMARY X . * direction-to:[all|local|remote|off] * files-to:[all|local|remote|off] (:on) -compression, -z (:on) /compression-level:level (0,1,2) +credentials-delegation (:off) /d:domain (Domain) -decorations (:on) /disp /drive:name,path . /drive:hotplug,* . "Drives that I plug in later" MSTSC . +drives (:off) /dump:record|replay,file:file[,nodelay] /dvc:channel[,options] (Dynamic virtual channel) +dynamic-resolution (:off) /echo, /echo Echo -encryption () (: on) /encryption-methods:[40,][56,][128,][FIPS] RDP /endpointfedauth:token FedAuth Hyper-V /f (++ ) +fipsmode FIPS (: off) /floatbar[:sticky:[on|off],default:[visible|hidden],show:[always|fullscreen|window]] (floatbar) ( /sticky ) -fonts (ClearType) (: on) +force-console-callbacks () //... (: off) /frame-ack:number (frame acknowledgement) /args-from:file:file|stdin|fd:number|env:name stdin (file descriptor). . . /from-stdin[:force] stdin. . /gateway:g:gateway[:port],u:user,d:domain,p:password,usage-method:[direct|detect],access-token:token,type:[rpc|http[,no-websockets][,extauth-sspi-ntlm]|auto[,no-websockets][,extauth-sspi-ntlm]]|arm,url:wss://url,bearer:oauth2-bearer-token, /gw:g:gateway[:port],u:user,d:domain,p:password,usage-method:[direct|detect],access-token:token,type:[rpc|http[,no-websockets][,extauth-sspi-ntlm]|auto[,no-websockets][,extauth-sspi-ntlm]]|arm,url:wss://url,bearer:oauth2-bearer-token Gateway /gdi:sw|hw GDI /geometry (Geometry) +gestures (: off) /gfx[:[[progressive[:on|off]|RFX[:on|off]|AVC420[:on|off]AVC444[:on|off]],mask:value,small-cache[:on|off],thin-client[:on|off],progressive[:on|off],frame-ack[:on|off]] RDP8 -grab-keyboard (: on) -grab-mouse (: on) /h:height (: 768) -heartbeat PDU (heartbeat) (: on) /help, /? +home-drive (: off) /ipv4[:[:force]], /4[:[:force]] A IPv4 AAAA IPv6 /ipv6[:[:force]], /6[:[:force]] AAAA IPv6 A IPv4 /jpeg JPEG /jpeg-quality:percentage JPEG /kbd:[layout:[0xid|name],lang:0xid,fn-key:value,type:value,subtype:value,unicode[:on|off],remap:key1=value1,remap:key2=value2,pipe:filename] : * layout: * lang: * fn-key: Function * remap: RDP . /list:kbd-scancode . : 'a' 's' (US): /kbd:remap:0x1e=0x1f,remap:0x1f=0x1e * pipe: (named pipe) RDP /kerberos:[kdc-url:url,lifetime:time,start-time:time,renewable-lifetime:time,cache:path,armor:path,pkinit-anchors:path,pkcs11-module:name] Kerberos /load-balance-info:info-string (Load balance info) /list:[kbd|kbd-scancode|kbd-lang[:value]|smartcard[:[pkinit-anchors:path][,pkcs11-module:name]]|monitor|tune|timezones] (: List available options for subcommand) /log-filters:tag:level[,tag:level[,...]] wLog(7) /log-level:[OFF|FATAL|ERROR|WARN|INFO|DEBUG|TRACE] wLog(7) /max-fast-path-size:size fast-path /max-loop-time:time +menu-anims (: off) /microphone[:[sys:sys,][dev:dev,][format:format,][rate:rate,][channel:channel]], /mic[:[sys:sys,][dev:dev,][format:format,][rate:rate,][channel:channel]] () /monitors:id[,id[,...]] [] ( ) -mouse-motion (: on) +mouse-relative (: off) /mouse:[relative:[on|off],grab:[on|off]] : * relative: * grab: /multimon[:force] +multitouch (: off) -multitransport multitransport (: on) -nego (: on) /network:[invalid|modem|broadband|broadband-low|broadband-high|wan|lan|auto] /nsc, /nscodec NSCodec /orientation:[0|90|180|270] +old-license ( CAL hwId 0) (: off) /p[:password] . /p . /parallel[:name[,path]] /parent-window:window-id /pcb:blob (Preconnection Blob) /pcid:id (Preconnection Id) /pheight:height ( ) /play-rfx:pcap-file pcap rfx /port:number -suppress-output (: on) +print-reconnect-cookie base64 (: off) /printer[:name[,driver[,default]]] /proxy:[proto://][user:password@]host[:port] : ( ). "http" "socks5" . /pth:password-hash, /pass-the-hash:password-hash Pass the hash ( ) /pwidth:width ( ) /rdp2tcp:executable path[:arg...] TCP /reconnect-cookie:base64-cookie base64 /redirect-prefer:FQDN|IP|NETBIOS,[...] /relax-order-checks, /relax-order-checks RDP /restricted-admin, /restrictedAdmin (Restricted admin) /rfx RemoteFX /rfx-mode:[image|video] RemoteFX /scale:[100|140|180] (: 100) /scale-desktop:percentage ( 100 500) (: 100) /scale-device:100|140|180 app store (: 100) /sec:rdp[:[on|off]]|tls[:[on|off]]|nla[:[on|off]]|ext[:[on|off]]|aad[:[on|off]] . /sec:nla NLA /sec:nla:[on|off] NLA /serial[:name[,path[,driver[,permissive]]]], /tty[:name[,path[,driver[,permissive]]]] /server-name:name (TLS, Kerberos) /shell:shell /shell-dir:dir /size:widthxheight percent%[wh] (: 1024x768) /smart-sizing[:widthxheight] /smartcard[:str[,str...]] . /smartcard-logon[:[[cert:path|cert:base64(PEM)],[key:path|key:base64(PEM)],pin:pin,csp:csp name,reader:reader,card:card]] ( ) . /sound[:[sys:sys,][dev:dev,][format:format,][rate:rate,][channel:channel,][latency:latency,][quality:quality]], /audio[:[sys:sys,][dev:dev,][format:format,][rate:rate,][channel:channel,][latency:latency,][quality:quality]] () /span /spn-class:service-class SPN /ssh-agent, /ssh-agent SSH Agent /sspi-module:SSPI module path SSPI /winscard-module:WinSCard module path WinSCard /disable-output . /t:title, /title:title -themes (: on) /timeout:time in ms, /timeout:time in ms : (: 9000) /timezone:windows timezone ( ) /list:timezones /tls:[ciphers|seclevel|secrets-file|enforce] TLS: * ciphers:[netmon|ma|] * seclevel: : 1 : [0-5] TLS . https://docs.openssl.org/3.0/man3/SSL_CTX_set_security_level * secrets-file: * enforce[:[ssl3|1.0|1.1|1.2|1.3]] SSL/TLS . TLS . TLS 1.2 . windows 7 1.0 -toggle-fullscreen Alt+Ctrl+Enter (: on) /tune:setting:value,setting:value [] freerdp ! (:) /u:[[domain]user|user[@domain]] +unmap-buttons (: off) /usb:[dbg,][id:vid:pid#...,][addr:bus:addr#...,][auto] USB /v:server[:port] hostname|URL|IPv4|IPv6 vsock:// /some/path/to/pipe |:1234 TCP /vc:channel[,options] /version /video /prevent-session-lock[:time in sec] ( : 180 ) /vmconnect[:vmid] Hyper-V ( 2179 ) /w:width (: 1024) -wallpaper (: on) +window-drag (: off) /window-position:xposxypos /wm-class:class-name WM_CLASS /workarea . . () RDP . . ++ ++ ++c ++ Action Script . . $XDG_CONFIG_HOME/freerdp/action.sh /action:script: . . key-local . (ENVIRONMENT VARIABLES) wlog xfreerdp3 wLog (wlog(7)) . /log-level /log-filters . FREERDP_ASKPASS SSH_ASKPASS (GLOBAL CONFIGURATION (client common)) : . /etc/FreeRDP/certificates.json . JSON : deny JSON boolean SSL ignore JSON boolean deny-userconfig JSON boolean certificate-db JSON array JSON objects : type JSON string sha256 hash JSON string (hex) 0123456789abcdef X11 : /etc/FreeRDP/xfreerdp.json JSON : isActionScriptAllowed JSON boolean . ( ) . (EXAMPLES) #!/bin/bash # we got a key combination if [ "$1" = "key" ]; then # we only got one argument 'key' # list all supported combinations with echo if [ $# -eq 1 ]; then echo "ctrl+alt+f1" echo "ctrl+alt+f2" else # We want the action for a single combination # use 'key-local' to not forward to RDP session if [ "$2" = "ctrl+alt+f1" ]; then echo "key-local" fi if [ "$2" = "ctrl+alt+f2" ]; then echo "/usr/local/bin/somescript.sh" fi fi fi if [ "$1" = "xevent" ]; then if [ $# -eq 1 ]; then echo "FocusIn" echo "SelectionClear" else if [ "$2" = "SelectionNotify" ]; then echo "/usr/local/bin/someprogram" fi fi fi ctrl+alt+f1 ctrl+alt+f2 (0 > 0 < 0 ) xfreerdp3 connection.rdp /p:Pwd123! /f connection.rdp Pwd123! xfreerdp3 /u:USER /size:50%h /v:rdp.contoso.com rdp.contoso.com USER . (h) (w) /size:50%w . . xfreerdp3 /u:CONTOSO\\JohnDoe /p:Pwd123! /v:rdp.contoso.com rdp.contoso.com CONTOSO\\JohnDoe Pwd123! xfreerdp3 /u:JohnDoe /p:Pwd123! /w:1366 /h:768 /v:192.168.1.100:4489 192.168.1.100 4489 JohnDoe Pwd123!. 1366 768 . xfreerdp3 /u:JohnDoe /p:Pwd123! /vmconnect:C824F53E-95D2-46C6-9A18-23A5BB403532 /v:192.168.1.100 192.168.1.100 JohnDoe Pwd123! Hyper-V ( 2179 ) C824F53E-95D2-46C6-9A18-23A5BB403532 +clipboard /drive:home,/home/user /home/user (home) /smartcard: device /printer:, device driver /serial: device /parallel: device /sound:sys:alsa sys:alsa /microphone:sys:alsa sys:alsa /multimedia:sys:alsa sys:alsa /usb:id,dev:054c:0268 USB 054c:0268 /kbd:remap:29=58,remap:58=29 Control (29) Caps Lock (58). http://www.freerdp.com (AUTHORS) FreeRDP freerdp 2026-09-03 xfreerdp3(1)