Computer Security: 5 ways to remotely connect to CERN

The Computer Security team’s article on remote access hardening.

What it anchors

  • 2FA deployed to the CERN SSO in 2023–2024, and activated on Windows Terminal Services (RDP) and LXPLUS (SSH) in September 2025, the latter via a PAM module.
  • The rollout fulfils a recommendation of the 2023 cybersecurity audit; supported factors include smartphone apps, YubiKeys and fingerprint readers.