About This Guide

Intended Audience

This document is intended for end users who connect to systems through Keycyte PAM.

It describes the Client Panel, the web portal that you use to open privileged sessions, request access and work with the credentials assigned to you. Configuring servers, roles, policies and users is described in the Administrator Guide.

What This Guide Covers

What You Can Do Depends on Your Roles

Your administrator decides which servers and accounts you see and what you can do with them. For example, copying passwords, transferring files, using the clipboard, sharing sessions and connecting without approval are controlled by roles. If an option described in this guide is missing or does not work for you, contact your Keycyte PAM administrator.

Conventions

Signing In

You sign in to Keycyte PAM on the sign-in page at https://pam.example.com/auth/login.html. Depending on how your account is configured, the sign-in can include accepting a user agreement, changing your password and entering a multi-factor authentication (MFA) code.

The sign-in page is shown in English or Turkish, according to the language of your browser.

Signing In with a Password

Use this procedure for local Keycyte PAM accounts, directory (Active Directory/LDAP) accounts and RADIUS accounts.

To sign in with a password:

1. Open https://pam.example.com in your browser.

2. In the Username field, enter your user name.

3. In the Password field, enter your password.

   Tip

   A Caps Lock is on warning appears under the field when Caps Lock is active. Click the eye icon to show or hide the password.

4. If a user agreement is displayed, accept it. See Accepting the User Agreement.

5. Click Sign in.

6. Complete any additional step that the page displays:

   • Changing Your Password at First Sign-In
   • Entering an MFA Code
   • Setting Up MFA for the First Time
   • Choosing the Admin Panel or Client Panel

The Client Panel opens.

If your password is about to expire, the page shows Your password expires in <n> day(s). Please change it soon. before it opens the panel.

Sign-In Errors

Signing In with Microsoft

If your organization uses Microsoft Entra ID, the Sign in with Microsoft button appears under the sign-in form. The button is shown only when your administrator has enabled Entra ID sign-in.

To sign in with Microsoft:

1. On the sign-in page, click Sign in with Microsoft.
2. Complete the sign-in on the Microsoft page.

You are returned to Keycyte PAM. Users who have administrative rights are taken to the Admin Panel; other users are taken to the Client Panel.

If the Microsoft sign-in fails, you return to the sign-in page with an error message.

Accepting the User Agreement

If your administrator has enabled a user agreement, a checkbox with the agreement link (by default I agree to the Terms of Service) appears above the Sign in button. You cannot sign in until you select it.

To accept the user agreement:

1. Click the agreement link to read the agreement. The agreement opens in a window; click Close to return.
2. Select the agreement checkbox.

The Sign in button becomes available.

Changing Your Password at First Sign-In

When an administrator creates your local account or resets your password, you may be required to set a new password before you continue. In this case the page shows You must change your password before continuing and displays the New Password and Confirm Password fields.

To change your password:

1. In the New Password field, enter a new password.

   The rules under the field are marked as you type:

   • At least 8 characters
   • An uppercase letter
   • A lowercase letter
   • A number

2. In the Confirm Password field, enter the new password again.

3. Click Sign in.

If the password is accepted, the sign-in continues. If it is rejected, for example because it does not meet the password policy or matches a password you used before, the page shows the reason.

Entering an MFA Code

If MFA is enabled for your account, the page shows the MFA Code field after you enter a correct password.

To enter an MFA code:

1. Get the code:
   • Authenticator app: open your authenticator app and read the current code for Keycyte PAM.
   • Email or SMS: Keycyte PAM sends a code to your email address or phone number when the field appears.
2. In the MFA Code field, enter the code.
3. Click Sign in.

If the code is wrong, the page shows Invalid MFA code. Repeated wrong codes lock your account temporarily.

Using a Backup Code

If your administrator gave you backup codes, you can enter a backup code in the MFA Code field instead of a code from your authenticator app. Each backup code can be used only once.

RADIUS Challenge

If your account is authenticated by a RADIUS server that asks for a second factor, the page shows the message returned by the RADIUS server and the MFA Code field. Enter the requested value and click Sign in.

Setting Up MFA for the First Time

If your administrator enabled authenticator-app MFA for your account without sending you the setup details, the page shows a QR code the first time you sign in.

To set up MFA:

1. Open an authenticator app on your phone, for example Microsoft Authenticator or Google Authenticator.

2. Scan the QR code shown on the sign-in page.

   If you cannot scan it, click Can’t scan? Show secret and enter the displayed secret in the authenticator app manually.

3. In the MFA Code field, enter the 6-digit code that the app displays.

4. Click Sign in.

The setup is complete. On later sign-ins you enter a code from the app as described in Entering an MFA Code.

If the code is rejected, make sure the clock on your phone is correct and try again.

Choosing the Admin Panel or Client Panel

If your account has both administrative and end-user rights, the page shows Select Application after a successful password sign-in.

To choose a panel:

• Click Client Panel to connect to systems and use your vaults.
• Click Admin Panel to manage Keycyte PAM.

Users with only end-user rights go directly to the Client Panel. Users with only administrative rights go directly to the Admin Panel.

Signing Out

To sign out:

1. At the bottom of the sidebar in the Client Panel, click the sign-out button. The button shows your user name.

You are signed out and the sign-in page opens. Signing out closes all sessions that are open in the Client Panel.

Session Timeout

Your sign-in session ends after a period of inactivity that is set by your administrator. Moving the mouse, typing, scrolling or clicking in the Client Panel counts as activity and keeps the session alive, also while a remote session is open.

When the session has expired, the next action in the Client Panel opens the sign-in page. Sign in again to continue.

You can also be signed out in the following cases:

• An administrator ends your sign-in session. A message is displayed and you are signed out after a few seconds.
• Your administrator allows only one active sign-in per user, and you sign in from another browser or device.

Client Panel

The Client Panel is the web portal in which you connect to the systems assigned to you. It consists of a sidebar on the left and a tabbed work area on the right.

Sidebar

The sidebar contains, from top to bottom:

Server Tree

The server tree shows only the servers that your roles allow you to access. It contains the following items, in this order:

1. Custom folders — folders that you create yourself in Settings > Custom Menu. See Organizing Servers in Custom Folders.
2. Protocol folders — servers are grouped automatically by connection type, in this order: RDP, VNC, SSH, TELNET, APP, 3rd, WEBAPP, MYSQL, POSTGRESQL, MSSQL, KUBERNETES. A folder appears only if it contains at least one server. Servers are sorted by name.
3. Shared Sessions — appears when another user has shared an active session with you. See Sharing Sessions.
4. Static entries — always present at the end of the tree:
   • Private Vault — your personal secrets. See Private Vault.
   • Password Vault — the credentials assigned to you. See Password Vault.
   • Settings — your personal settings. See Settings.

Click a folder to expand or collapse it. Click a server to open a new connection tab for it. Hover over a server to see its name and address.

The tree is refreshed automatically when your access changes, for example when a session is shared with you.

Searching for a Server

To search for a server:

1. In the Search Server field at the top of the sidebar, type part of the server name, address or description.

The tree shows only the matching servers. The static entries are always shown. To show all servers again, clear the field.

Tabs

Every page and every connection opens in its own tab above the work area.

The Dashboard tab is always the first tab and cannot be closed.

Clicking a server in the tree always opens a new tab, so you can open several sessions to the same server. Clicking Private Vault, Password Vault or Settings switches to the existing tab if it is already open.

Sessions in tabs that are not in front stay connected.

Dashboard

The Dashboard tab opens when you sign in. It shows a summary of your access and your recent connections.

Quick Connect

Quick Connect lists up to 10 servers that you connected to most recently, with the newest first. Each card shows the server name, the connection type and the server address.

To reconnect from Quick Connect:

1. On the Dashboard tab, click a server card under Quick Connect.

A connection tab for the server opens, or comes to the front if it is already open. Continue as described in Opening a Browser Session.

If you have not connected to any server yet, the section shows No recent connections.

Connecting to Systems

Keycyte PAM connects you to target systems without showing you the passwords of the target accounts. The connection runs through Keycyte PAM, which applies your roles: which accounts you can use, whether approval or MFA is required, whether the session is recorded, and which tools are available in the session.

You can connect in two ways:

• In the browser — open a server from the Client Panel. Graphical connections (for example RDP and VNC) and terminal connections (SSH, Telnet, Kubernetes) open in a tab. No client software is needed.
• With a native client — connect with your own SSH client through the Keycyte PAM SSH proxy.

In This Section

Opening a Browser Session

You open a session to a server from the server tree or from Quick Connect on the Dashboard. The session runs in a tab of the Client Panel.

Before You Begin

• The server must appear in your server tree. If it does not, ask your administrator for access.
• At least one account must be assigned to you for the server, unless automatic sign-in is enabled for it.

Opening a Session

To open a session:

1. In the server tree, expand the folder that contains the server, and click the server.

   A new tab opens and shows the account selection card, with the server name and the line <PROTOCOL> — Select Account.

   

2. Click the account that you want to connect with.

   Each account card shows the user name of the target account and the name of the vault entry. The list can contain:

   • accounts from the Password Vault that your roles assign to you for this server;
   • entries from your own Private Vault that are linked to this server, if your role allows Private Vault accounts on it;
   • Private Vault entries that other users shared with you and linked to this server.

3. If Keycyte PAM asks for more information, complete the prompt:

   • MFA Verification — see Completing the MFA Prompt.
   • Send Request — the server or account requires approval. See Requesting Access.
   • Session in use — someone is already using the account on this server. See Joining a Session That Is in Use.

The session starts in the tab. Graphical sessions (for example RDP and VNC) show the remote desktop; SSH, Telnet and Kubernetes sessions show a terminal.

If no account is assigned to you, the card shows No accounts available. Ask your administrator for access.

Automatic Sign-In

For some servers, your administrator can enable automatic sign-in. In this case the account selection is skipped and the session starts as soon as you open the tab, using your own Keycyte PAM credentials.

Completing the MFA Prompt

Your administrator can require an MFA code for each connection to a server or account, in addition to the MFA code at sign-in. In this case the MFA Verification dialog opens after you click the account.

To complete the MFA prompt:

1. Get the code. The dialog tells you where it comes from:
   • Enter the verification code from your authenticator app.
   • A verification code has been sent to your email.
   • A verification code has been sent to your phone.
2. In the Verification Code field, enter the 6-digit code.
3. Click Verify.

The session starts. If the code is wrong, the dialog shows Invalid verification code. Please try again.

Messages on the Account Selection Card

If the connection cannot start, the account selection card shows a message.

When a Session Ends

When a session is closed or fails, the tab returns to the account selection card and shows the reason above the accounts. Click an account to connect again.

Common reasons:

If the session has a time limit, a Session ends in banner with a countdown appears during the last minutes of the session.

For shared sessions and sessions with automatic sign-in, the tab shows the reason and a Reconnect button instead of the account selection card. See Reconnecting.

Closing a Session

To close a session, close its tab. See Tabs.

Requesting Access

Your administrator can configure a server, an account, or both, so that you need approval before you connect (just-in-time access). When you select such an account without a valid approval, the Send Request panel opens instead of the session.

An approval is valid for the time window that the approver confirms. You can connect without a new request while the approval is valid.

Sending an Access Request

To send an access request:

1. Open the server and click the account, as described in Opening a Browser Session.

   The Send Request panel opens.

2. Fill in the request:

   Field	Description
   Reason	Why you need access, for example a change or ticket number. The approver sees this text.
   Start Date	The date and time from which you need access.
   End Date	The date and time until which you need access.

3. Click Send Request.

The request is sent and the panel closes. To cancel without sending, click Cancel.

What Happens After You Send a Request

1. Keycyte PAM records the request and adds it to the approval queue of the administrators responsible for the server (for a server approval) or for the account (for an account approval). If both the server and the account require approval, a request is created for each of them.
2. The responsible administrators receive an Access Permission Request email, if an email address is known for them.
3. An administrator approves or rejects the request in the Admin Panel. The approver can adjust the time window.
4. When the request is approved, you receive an Access Permission Approved email, if an email address is known for your account.
5. Within the approved time window, open the server and click the account again. The session starts without the Send Request panel.

Outside the approved time window, or if the request was rejected, the Send Request panel opens again when you select the account.

Using Session Tools

While a session is connected, the session tools are available in the action bar on the right edge of the session tab. Some tools are available only for certain connection types or when your role allows them.

Opening the Action Bar

To open the action bar:

1. Click the small tab with the arrow (<) at the middle of the right edge of the session.

The action bar opens on the right. Hover over a button to see its name. To close the action bar, click anywhere outside it.

Using the Clipboard

Your administrator can allow or block copying from and pasting to a session.

Graphical Sessions

• Copy from the session: text that you copy in the remote session is placed on your computer’s clipboard automatically, if copying is allowed.
• Paste into the session: when you return to the browser tab, the text on your clipboard is sent to the remote session automatically. You can also send it manually with Paste Clipboard in the action bar. Then paste in the remote session as usual, for example with Ctrl+V.

If pasting is blocked by your administrator, Paste Clipboard is not shown.

Terminal Sessions (SSH, Telnet, Kubernetes)

Using Full Screen

To switch to full screen:

1. In the action bar, click Fullscreen.

To leave full screen, click Exit Fullscreen in the action bar or press Esc. In browsers that capture keyboard shortcuts in full screen (see the tip below), press and hold Esc.

Using the On-Screen Keyboard

Use the on-screen keyboard to send keys that your physical keyboard or browser cannot send, or to type with a different keyboard layout.

To use the on-screen keyboard:

1. In the action bar, click On-Screen Keyboard.
2. Optionally, select a layout at the top of the keyboard: English (US), Deutsch (DE), Français (FR), Español (ES), Italiano (IT), Nederlands (NL) or Русский (RU).
3. Click the keys.

To move the keyboard, drag it by its handle. To close it, click ✕.

Sending Ctrl+Alt+Del

To send Ctrl+Alt+Del to the remote system, click Ctrl+Alt+Del in the action bar. Pressing these keys on your own keyboard is handled by your local operating system.

Pausing a Terminal Session

You can pause your own SSH, Telnet or Kubernetes session, for example when users who watch a shared session must not see input while you step away.

To pause a session:

1. In the action bar, click Pause session.

A banner Session paused — keystrokes are being dropped appears. While the session is paused, your keystrokes are not sent to the remote system. Users who watch the session see Host has paused the session.

To resume, click the banner, or click Resume session in the action bar.

Searching in a Terminal

To search the output of an SSH, Telnet or Kubernetes session:

1. Click in the terminal and press Ctrl+F (Cmd+F on macOS).

   The search box opens at the top of the terminal.

2. Type the text to find. The number of matches is shown in the box.

3. Optionally, use the options next to the box:

   Option	Description
   Aa (Case sensitive)	Matches upper and lower case exactly.
   |w| (Whole word)	Matches whole words only.
   .* (Regular expression)	Treats the search text as a regular expression.

4. Press Enter for the next match and Shift+Enter for the previous match, or use the Next and Previous buttons.

To close the search box, press Esc or click Close.

You can change the number of lines that the terminal keeps for search and scrolling in Settings > Terminal Settings. See Settings.

Reconnecting

When a regular session ends, the tab returns to the account selection card, where you can click the account to connect again.

For a session that was shared with you, or a session that started with automatic sign-in, the tab shows the reason and a Reconnect button.

To reconnect:

1. Click Reconnect.

Transferring Files

You transfer files with the Files panel of a connected session. What the panel shows depends on the connection type:

Before You Begin

• The session must be connected.
• For RDP, your administrator must allow the virtual disk for the server, so that your file storage appears as a drive in the remote session. Otherwise you can still use the panel to manage the files in your storage.

Opening the Files Panel

To open the Files panel:

1. In the session, open the action bar. See Opening the Action Bar.
2. Click Files.

The Files panel opens on the right. In an SSH session, the panel connects to SFTP first and shows SFTP connection established when it is ready.

The panel contains, from top to bottom:

• the upload area Click or drag to upload files;
• the current path, as clickable path segments;
• the toolbar;
• the file list with the File Name, Size and (SSH only) Modified columns, and action buttons for each item.

Click a column header to sort the list. Click a folder name to open the folder.

Toolbar

Uploading Files

To upload files:

1. In the Files panel, go to the target folder.
2. Do one of the following:
   • Drag files or folders from your computer onto the upload area.
   • Click the upload area or Upload files, and select one or more files.
   • Click Upload folder, and select a folder.

A progress bar shows the file being uploaded. When several files are uploaded, a counter such as (3 / 12) shows the progress of the queue. The list is refreshed when the upload is complete.

Downloading a File

To download a file:

1. In the file list, click Download in the row of the file.

The file is saved by your browser. Folders cannot be downloaded; download the files in them one by one.

Creating a Folder

To create a folder:

1. Click New folder.
2. Enter the Folder name.
3. Click Save.

Renaming a File or Folder (SSH)

To rename a file or folder:

1. In the row of the item, click Rename.
2. Enter the New name.
3. Click Save.

Changing Permissions (SSH)

To change the permissions of a file or folder:

1. In the row of the item, click Change permissions.

   The dialog shows the item and its current permissions.

2. Enter the new mode as three or four octal digits, for example 0644 for a file or 0755 for a folder.

3. Click Save.

If the value is not valid, the panel shows Mode must be 3-4 octal digits.

Deleting Files and Folders

To delete a single item:

1. In the row of the item, click Delete.
2. In the confirmation dialog, click Yes, Delete.

In an SSH session, you can also select several items in the list, click Delete selected and confirm.

Closing the Files Panel

To close the panel, click × at the top of the panel, press Esc, or click outside the panel.

In an SSH session, or while an upload is in progress, the dialog Close file browser? asks you to confirm, because closing the panel ends the SFTP connection. Click Yes to close the panel, or Cancel to keep it open. Closing the Files panel does not end the session.

Sharing Sessions

You can let other Keycyte PAM users join one of your active sessions, either with full access or read-only. Session sharing must be allowed by your administrator.

There are two ways to start a shared session:

• Invitation — you share your session with selected users from the session.
• Join request — another user tries to connect with an account that you are already using, and asks to join your session.

Sharing Your Session

To share a session:

1. In the connected session, open the action bar. See Opening the Action Bar.

2. Click Share Session.

   The Share this session panel opens with the list of users.

3. Optionally, type in the Search field to filter the users.

4. Select the users that you want to invite.

5. For each user who may only watch, select the Readonly checkbox.

6. Click Share.

The selected users receive an invitation. A message confirms each invitation, or shows why it failed, for example User already has access to this session.

If the session has not connected yet, the message The session has not yet started. is shown.

Removing a User from Your Session

Users who are currently in the session are marked with a green dot in the Share this session panel.

To remove a user:

1. In the Share this session panel, click × in the row of the user.
2. In the Remove from Session dialog, click Yes, Remove.

The user is removed from the session.

Users Watching a Terminal Session

In an SSH, Telnet or Kubernetes session, a badge with an eye icon and a number shows how many users are watching. A notification appears when a user joins or leaves.

To stop sending input while others watch, you can pause the session. See Pausing a Terminal Session.

Accepting an Invitation

When someone shares a session with you, the Session Invitation dialog opens in your Client Panel.

To accept an invitation:

1. In the Session Invitation dialog, click Accept.

A tab named <host user> - Shared Session opens and connects to the session. If you were invited read-only, the tab name ends with (Read Only), and your keyboard and mouse input is not sent to the session.

To decline, click Reject.

Active sessions that are shared with you are also listed in the Shared Sessions folder of the server tree.

Joining a Session That Is in Use

For graphical connections (for example RDP) with session sharing enabled, if another user already has an active session with the account that you select, the Session in use dialog asks A session is in use. Would you like to send a request to join?

To request to join:

1. In the Session in use dialog, click Yes.

The request is sent to the user who owns the session. When the owner approves it, a message is shown and a tab named <host user> - Shared Session opens and connects to the session. If the owner approves read-only access, the tab name ends with (Read Only). If the owner rejects it, a message informs you.

Responding to a Join Request

When another user asks to join your session, the Session Join Request dialog shows <user> wants to join your session.

To respond to a join request, do one of the following:

• Click Full Access to let the user work in the session.
• Click Read Only to let the user watch the session.
• Close the dialog to reject the request.

A message confirms your decision.

When a Shared Session Ends

When the owner closes the session or removes you from it, a message is shown in your Client Panel and the session ends in your tab. The Shared Sessions folder in the server tree is updated.

Connecting with a Native Client

Instead of the browser terminal, you can connect to SSH servers with your own SSH client, for example OpenSSH, PuTTY or Windows Terminal. The connection runs through the Keycyte PAM SSH proxy, which signs you in to the target server with the selected account. You never see the password of the target account.

Before You Begin

• The server must be an SSH server in your server tree, and an account must be assigned to you for it.
• Your computer must be able to reach the Keycyte PAM server on TCP port 2222.
• You need your Keycyte PAM user name and password, and your MFA code if MFA is enabled for your account.

SSH Command Format

The command has the following format:

ssh <vaultId>@<serverId>@<pamUser>@<pamHost> -p 2222

For example:

ssh 1042@317@jdoe@pam.example.com -p 2222

You do not need to look up the IDs: the Client Panel builds the command for you.

Copying the SSH Command

To copy the SSH command:

1. In the server tree, click the SSH server.

   The account selection card opens.

2. Right-click the account that you want to use.

3. Click Copy SSH command.

The command is copied to your clipboard and the message SSH command copied to clipboard is shown. If your browser does not allow access to the clipboard, the command is shown in a dialog so that you can copy it manually.

Connecting with the SSH Command

To connect:

1. Open a terminal or your SSH client.
2. Paste the command and run it.
3. When prompted for a password, enter your Keycyte PAM password, not the password of the target account.
4. If MFA is enabled for your account, enter your MFA code when prompted.

The session to the target server opens in your SSH client.

Password Vault and Private Vault

The Client Panel has two vaults:

Both vaults are opened from the static entries at the end of the server tree.

Password Vault

The Password Vault lists the accounts you can use. You can copy the user name of an account and, if your role allows it, the password.

To open the Password Vault:

1. In the server tree, click Password Vault.

The list shows the following columns:

To find an account, type part of its name, user name or domain in the Search Accounts field. To reload the list, click Refresh.

If the list is empty, no account is assigned to you. Ask your administrator.

Copying a Password

To copy a password:

1. In the row of the account, click the copy button in the Password column.

The password is copied to your clipboard. After 20 seconds, Keycyte PAM clears the clipboard if it still contains the password, and shows a message.

If copying is not allowed for you, the message Not authorized to copy this password is shown. You can still use the account to connect to servers, if it is assigned to them. See Opening a Browser Session.

Private Vault

In the Private Vault you keep your own credentials and secrets, encrypted on the Keycyte PAM server. You can link account entries to servers, so that you can connect with them, and share entries with other users.

To open the Private Vault:

1. In the server tree, click Private Vault.

The list has the same columns as the Password Vault, plus a share indicator and the Action column with Edit, Share and Delete buttons.

Entry Types

Secret types are stored only; they cannot be linked to servers and have no password policy.

Adding an Entry

To add an entry:

1. Click Add.

   The Account panel opens.

2. In Type, select the entry type.

3. Fill in the fields for the type. See Entry Types.

   For certificate and PFX files, click the select button and choose the file (up to 8 MB). Keycyte PAM reads the file and fills in the details automatically when it can. For a PFX file, enter the Passphrase to fill in the details.

4. For account types, optionally:

   • In Policy, select a password policy.
   • In Server, select the servers that this account is for. Use Select All and Clear in the list to select or clear all servers that match your search.

5. Optionally, enter a Description.

6. Click Save.

The entry appears in the list.

If a required value is missing, a message such as Secret value is required or Private key is required is shown.

Connecting with a Private Vault Entry

When you link an account entry to a server, the entry appears on the account selection card of that server, if your role allows Private Vault accounts for the server. See Opening a Browser Session.

Editing an Entry

To edit an entry:

1. In the row of the entry, click Edit.

2. Change the fields.

   For certificate and PFX entries, the stored file is kept unless you upload a new one.

3. Click Save.

Copying a Value

To copy the user name or password of an entry, click the copy button in the Username or Password column. Copied passwords are cleared from the clipboard after 20 seconds, as in the Password Vault.

Sharing an Entry

You can share an entry with other Keycyte PAM users. Shared entries appear in their Password Vault and, if linked to a server, on the account selection card of that server.

To share an entry:

1. In the row of the entry, click Share.

   A panel with the list of users opens.

2. Select the users to share the entry with. To select all users, use the checkbox in the column header.

3. For each user who may copy the password, select Copy. Users without Copy can use the entry to connect but cannot copy its password.

4. Click Share.

Shared entries are marked with a share icon in your list. To stop sharing with a user, clear the user in the same panel and click Share again.

Deleting an Entry

To delete an entry:

1. In the row of the entry, click Delete.
2. In the confirmation dialog, click Yes, Delete.

Settings

Your personal settings are saved for your account and apply in every browser that you sign in from.

To open the settings:

1. In the server tree, click Settings.

The Settings tab has three pages: Language, Terminal Settings and Custom Menu.

Changing the Language

To change the language:

1. On the Language page, in the Language list, select English or Türkçe.

The Client Panel switches to the selected language immediately.

Customizing the Terminal

The terminal settings apply to SSH, Telnet and Kubernetes sessions in the browser. A live preview on the right shows the result as you change the settings.

To customize the terminal:

1. Open the Terminal Settings page.

2. Change the settings:

   Setting	Description	Default
   Theme	The color scheme: Default (dark), Dark, Black, Light, Dracula, Solarized Dark, Solarized Light, Monokai or Nord.	Default (dark)
   Font	The font: System mono (Menlo / Consolas), JetBrains Mono, Fira Code, Source Code Pro, Ubuntu Mono, Cascadia Code, Hack or Browser default monospace. A font is used only if it is installed on your computer.	System mono (Menlo / Consolas)
   Font Size	From 10 px to 24 px.	14 px
   Line height	The spacing between lines: 0.9, 1.0, 1.1, 1.2 or 1.4.	1.0
   Scrollback Size	The number of lines the terminal keeps for scrolling and searching: 1,000 to 50,000.	5,000
   Cursor style	Block, Underline or Bar.	Block
   Cursor blink	Makes the cursor blink.	On
   Bell	Silent, or Audible to play a sound when the remote system rings the terminal bell.	Silent

3. Click Save.

The settings apply to terminal sessions that you open after saving. To return to the default values, click Reset to defaults, and then click Save.

Organizing Servers in Custom Folders

On the Custom Menu page you create your own folders for the server tree, for example for the servers of one project. Custom folders appear at the top of the server tree, above the protocol folders. A server can be in a custom folder and in its protocol folder at the same time.

Creating a Folder

To create a folder:

1. On the Custom Menu page, click Add.
2. In Name, enter the folder name.
3. Optionally, in Icon, select an icon for the folder.
4. Click Save.

The folder appears in the list and in the server tree. If the name is reserved or already in use, a message shows the reason.

Adding Servers to a Folder

To add servers to a folder:

1. In the row of the folder, click Server.

   The Select Servers panel opens and lists all servers you can access. The servers already in the folder are selected.

2. Optionally, type in the Search field to filter by name, address or protocol.

3. Select the servers that the folder must contain, and clear the ones it must not contain.

4. Click Save.

The server tree is updated.

Renaming a Folder or Changing Its Icon

To edit a folder:

1. In the row of the folder, click Edit.
2. Change the Name or Icon.
3. Click Save.

Deleting a Folder

To delete a folder:

1. In the row of the folder, click Delete.
2. In the confirmation dialog, click Yes, Delete.

The folder is removed from the server tree. The servers themselves are not affected and remain in their protocol folders.