How to log on to an instance by using the Alibaba Cloud app-Elastic Compute Service(ECS)-阿里云帮助中心

This topic describes how to connect to an Elastic Compute Service (ECS) instance using Workbench in the Alibaba Cloud app on a mobile device.

Prerequisites

The Alibaba Cloud app is installed on your mobile device, and you are logged on to your Alibaba Cloud account in the app.
Complete the required authorization for Workbench: If you encounter permission issues, contact the Alibaba Cloud account or an administrator for authorization. For more information, see Service-linked Role for Workbench.
The ECS instance is in the Running state.
A logon password is set or a key pair is attached to the ECS instance. For more information, see Reset the logon password of an instance or Attach an SSH key pair.

The security group of the instance allows access from the IP addresses of the Workbench service. The security group rules vary based on the network type of the instance.

VPC instances

When you connect to an instance in a virtual private cloud (VPC), go to the Inbound tab on the Security Group Rules page and add a security group rule. The following table describes the required rule.

Authorization Policy	Priority	Protocol Type	Port Range	Authorization Object
Allow	1	Custom TCP	For a Linux instance, the default port is 22. Select SSH(22). For a Windows instance, the default port is 3389. Select RDP(3389). If you use a different port, enter the port number.	If you connect to an instance via its public IP address (including a static public IP address and an EIP), add 47.96.60.0/24 and 118.31.243.0/24. If you connect to the instance using its private IP address in the VPC, add 100.104.0.0/16. Warning Adding 0.0.0.0/0 to the inbound rules is a high security risk and is not recommended.

Background information

By default, a Workbench remote connection session lasts for 6 hours. If a session is inactive, it automatically disconnects and you must reconnect.

Workbench supports the following connection protocols:

Remote Desktop Protocol (RDP): Used to connect to Windows instances by default.

Important
When you use RDP to connect to an instance, make sure that the public bandwidth is at least 5 Mbit/s. Otherwise, stuttering may occur.
Secure Shell (SSH) Protocol: Used to connect to Linux instances by default.

Log on to an ECS instance

Open the Alibaba Cloud app and tap Console.
In the My Resources section, tap Instances.
In the upper-left corner of the ECS Instances page, select the region where the instance is located.
On the Instances tab, find the instance that you want to connect to, tap the icon on the right, and then tap Workbench Remote Connection.

On the Log on to Instance page, select a logon method to connect to the instance.

Logon Configuration

You can save logon configurations to securely log on to an instance without entering the username and password every time. A logon configuration stores information such as the username, password, and key of an instance.

In the Select Configuration section, tap the icon.
On the Logon Configuration page, tap Add.
On the Logon Configuration Details page, configure the logon information as prompted. The following table describes the parameters.

Configuration Item	Description
Configuration Name	Enter a name for the configuration.
Network Connection	Select a public IP address or a private IP address.
Connection Protocol	Select a connection protocol. For a Linux instance, the default protocol is Terminal Connection (SSH). For a Windows instance, the default protocol is Remote Desktop (RDP).
Port	If the connection protocol is Terminal Connection (SSH), the default port is 22. If the connection protocol is Remote Desktop (RDP), the default port is 3389.
Authentication Information	In the Authentication Information section, configure the authentication materials. Select an Authentication Method. Password, Key, and Credential are supported. Configure the following information as prompted: If you set Authentication Method to Password, enter the Username, Password, Password Remark (optional), and Password Fingerprint (auto-generated). If you set Authentication Method to Key, enter the Username, the Key content or file, Key Remark (optional), and Key Passphrase (leave empty if none). The Password Fingerprint is auto-generated. If you set Authentication Method to Credential, you can select a credential that is saved in the web-based Workbench. Note You can click Add to add more authentication materials. Each logon configuration must have at least one authentication material.

Tap Save.

Note

On the Logon Configuration page, you can:

Tap Add to configure multiple logon configurations for easy access.
Swipe left on a configuration to edit or delete it.

Log on with a username and password

This method lets you log on using a username and password.

Configuration Item	Description
Network Connection	Select a public IP address or a private IP address.
Connection Protocol	Select a connection protocol. For a Linux instance, the default protocol is Terminal Connection (SSH). For a Windows instance, the default protocol is Remote Desktop (RDP).
Port	If the connection protocol is Terminal Connection (SSH), the default port is 22. If the connection protocol is Remote Desktop (RDP), the default port is 3389.
Username	Enter the logon username. The default username for a Linux instance is root or ecs-user. The default username for a Windows instance is Administrator.
Password	Enter the logon password.

Tap Confirm Logon.

For example, on a Linux instance, the following output indicates that you have successfully logged on.