Virtual Network Computing (VNC) lets you directly view the real-time operating system (OS) interface of an ECS instance. You can use VNC to view the system interface during instance startup or while the instance is stopping. Because VNC connections are not restricted by security group settings or software running on the instance, you can use VNC to troubleshoot issues that prevent other connection methods from working.
Starting July 10, 2023, you no longer need to set a separate VNC password. You can securely access your ECS instance by using its logon username and instance logon password.
On July 10, 2023, Alibaba Cloud upgraded VNC security. It now automatically manages authentication and provides end-to-end encryption for VNC sessions.
Usage notes
-
Supported instance states: Running or Stopping.
-
Unsupported instance type: The ecs.ebmhfc7.48xlarge bare metal instance type.
Procedure
-
Go to the ECS console - Instances page. In the upper-left corner, select the region and resource group where your target instance is located.
-
Click the target instance ID to open the instance details page.
-
Connect to the instance by using VNC.
ImportantA VNC session automatically disconnects after 300 seconds of inactivity. If this happens, you must reconnect to the instance.
-
Click , and select VNC > Sign in now.


-
Log on to the operating system.
-
Linux instance
-
Enter a logon username, such as
rootorecs-user, and pressEnter. -
Enter the instance logon password and press
Enter.If you have not set a password or have forgotten it, on the instance details page, choose All Operations > Reset Instance Password.

-
-
Windows instance
-
In the upper-left corner of the page, click to unlock the system screen.

-
Select a user account, such as the default
Administratoraccount, enter the instance logon password, and press Enter.If you have not set a password or have forgotten it, on the instance details page, choose All Operations > Reset Instance Password.

-
-
-
FAQ
-
How do I paste commands?
-
In the instance, select the location where you want to paste the content.
-
In the upper-left corner, click Enter Copied Commands.
A maximum of 2,000 characters are supported. Non-standard keyboard characters, such as Chinese characters, are not supported.
-
In the Text dialog box, enter the content that you copied, and then click OK.
-
-
How do I send remote commands?
The Send Remote Commands feature simulates specific keyboard shortcuts. For example, you can unlock a Windows instance () or switch between virtual terminals on a Linux instance (CTRL+ALT+F1 to CTRL+ALT+F10).
-
Log on to the ECS instance by using VNC.
-
In the upper-left corner, click Send Remote Commands and select a command from the drop-down menu to simulate a keyboard shortcut.

-
-
Forgotten or unset instance passwords
If you forget your instance logon password or have not set one, go to the instance details page. In the All Operations menu, select and follow the on-screen instructions to reset the password.
-
Error: Operation not supported in current state
Instances in a TDX confidential computing environment do not support VNC connections.
-
Default logon usernames
-
For Linux system instances, the default username is
root. If you set the instance to use ecs-user during creation, the username is ecs-user. -
Windows instances: The default username is
Administrator.
-
-
Default logon password
None.
For security purposes, Alibaba Cloud does not assign a default or initial logon password to an ECS instance. If you did not set a logon password when you created the instance, set one before you can log on.
-
Authorization error for RAM users
Grant the RAM user the
ecs:DescribeInstancesandecs:DescribeInstanceVncUrlpermissions. The following is a sample policy:{ "Version": "1", "Statement": [ { "Effect": "Allow", "Action": [ "ecs:DescribeInstances", "ecs:DescribeInstanceVncUrl" ], "Resource": "*" } ] } -
An error is returned when you log in to an instance:
Login IncorrectorIncorrect password. Please try again.What can I do?Ensure you entered the correct logon password. If you have forgotten the logon password, go to the instance details page. In the All Operations menu, select , follow the instructions to reset it, and then try to connect again.
-
Black screen on Linux instances
A black screen appears when a Linux instance enters sleep mode. You can press any key on your keyboard to wake it up.
-
VNC connection in Simple Application Server
The VNC feature in Simple Application Server is called Rescue Logon.
Related documentation
-
You can call the DescribeInstanceVncUrl API operation to obtain the VNC logon URL for an ECS instance.
-
For troubleshooting VNC connection issues, see VNC connection issues.
