Installing, Configuring, and Using JumpServer Client

JumpServer Client is a desktop application installed on the user’s workstation to simplify connecting to target systems. Its installation is optional — all basic features are also available through the web interface.

This article includes examples of applications supported in the Windows version.
On macOS and Linux, a different set of applications is available.

Important: All session monitoring features, SSH command blocking, SQL query logging and filtering, and file transfer in RDP and SFTP are fully supported and work exactly the same as when connecting through the web interface.

Installation

While in the JumpServer web terminal, open the menu:
Help → Download

Choose the appropriate version for your operating system and install it.

Configuration

Launch JumpServer Client — you will see the login window. Enter the address of your JumpServer instance, and the list of available target systems will appear.

In the upper-right corner, click the gear icon to open the client settings.

Here you can specify the paths to locally installed applications for different session types — for example, PuTTY or MobaXterm for SSH — so that JumpServer can launch connections through those applications.

Note: You must both specify the correct application path and enable its usage
(the green toggle switch next to the application name).

Similarly, you can configure local database clients that will be used for DB connections:

With these settings:

• DBeaver will automatically launch for Oracle and PostgreSQL connections

• SQL Server Management Studio will launch for SQL Server connections

Usage

To start a session directly from JumpServer Client:

1. Click the desired connection.

2. Select the protocol and the account (credential) to be used for authentication.

You can also start sessions from the JumpServer web interface by selecting
SSH Client, DB Client, or SFTP Client when launching a session:

Note: During the first connection attempt, your browser will likely display a security prompt asking permission to open an external application. You must allow this.

Need help?

Support during the JumpServer PAM Enterprise Edition pilot

Have you started testing JumpServer PAM EE and encountered an issue? Our process includes organizing email threads or Telegram groups for prompt issue resolution. If you are sure you were not added to such a group, please contact your supplier or reach out to us at support@afi-d.ru

Training for your specialists on configuring and administering JumpServer PAM

As part of an active technical support subscription, we will train your specialists in installation, configuration, administration of JumpServer PAM, as well as recovery from errors and incidents.

Training is conducted online, according to a pre-agreed plan, and includes mandatory practical knowledge verification with the issuance of personalized certificates (upon successful exam completion).

Video tutorials

Visit our channel on YouTube with video tutorials covering the configuration of all JumpServer PAM sections. The videos are in Russian and are updated with each new release.

Technical support for the free JumpServer PAM Community Edition

The idea of implementing a complex but business-critical PAM system can be intimidating due to the perceived complexity of setup, administrator and security team training, and changes to account management processes.

To make the deployment and configuration of JumpServer Community Edition comfortable, and to ensure you can always rely on professional assistance, AFI Distribution offers an annual technical support subscription.

The support package priced at 1.5 million RUB per JumpServer Community Edition instance (with no limits on the number of users or target systems) includes everything required to use PAM:

• Russian-language documentation;
• usage scenarios and recommended deployment architectures;
• training for administrators and information security specialists on working with JumpServer;
• tips and solutions for common questions;
• notifications about new releases with verified upgrade instructions;
• integration with RADIUS and multi-factor authentication “Multifactor” ;
• direct access to an engineer (no first-line support) with a clear SLA.