# Virtual desktops (VDI)

> Use one Ironchip Authenticator identity on several domain computers with a shared folder: command-line installation, enrollment and testing.

URL: https://docs.ironchip.com/en/identidad/integraciones/puestos/vdi/

In virtual desktop (VDI) environments, Ironchip Authenticator can store the identity in a shared folder so the same user can use it from different domain computers without enrolling again. This page explains how to prepare the folder, install the authenticator and test it.

## Requirements

- Computers joined to the domain.
- A shared folder reachable through a UNC path.
- The user must have read and write permissions on the shared folder.
- Connectivity to the server that hosts the share.

## Prepare the shared folder

1. Create the folder on the server that will be used as the share.
2. Share it with the users who will use the Ironchip identity and check that they have read and write permissions.

The path to the share has this format:

```text
\\<server>\<share>
```

[Image: Shared folder on the server with the UNC path]

## Install Ironchip Authenticator

Download `IronchipWindowsAuthenticator.msi` as explained in [Install the authenticator on Windows](https://docs.ironchip.com/en/identidad/usuarios/autenticador-windows/) and install it from a terminal with this command:

```powershell
msiexec.exe /i IronchipWindowsAuthenticator.msi IRONCHIP_HOST="https://<api-host>" ADDLOCAL="AuthenticatorFeature" IRONCHIP_REMOTE_PATH="\\<server>\<share>" /qb
```

| Parameter              | Description                                                         |
| ---------------------- | ------------------------------------------------------------------- |
| `IRONCHIP_HOST`        | Ironchip API URL (`https://api.ironchip.com` by default).           |
| `ADDLOCAL`             | Component to install (`AuthenticatorFeature`, without USB support). |
| `IRONCHIP_REMOTE_PATH` | UNC path of the shared folder.                                      |
| `/qb`                  | Runs the installation showing only the basic installer interface.   |

## Verify the setup

Use two computers to check that the identity can be used from different domain computers.

1. Install and configure Ironchip Authenticator on **Computer 1**.
2. Enroll the Authenticator with the corresponding user.
3. When enrollment finishes, the identity is created in the shared folder.
4. Configure **Computer 2** with the same configuration and keep it joined to the domain.
5. Sign in to Computer 2 with the same user you used for the first enrollment.
6. Open Ironchip Authenticator.

### Enroll the first computer

On Computer 1, enroll Ironchip Authenticator.

[Image: Ironchip Authenticator enrollment on Computer 1]

When it finishes, open the shared folder: it contains a new folder with the identity you just created.

[Image: Shared folder with the folder of the created identity]

### Access from a second computer

With the identity created, you can use it from Computer 2 without enrolling again. Computer 2 must:

- Be joined to the same domain.
- Have Ironchip Authenticator installed and configured.
- Use the same user as the first enrollment.
- Have access to the shared folder.

When you open Ironchip Authenticator on Computer 2, the application reads the identity stored on the share and shows the same identity that was enrolled on Computer 1.

[Image: Ironchip Authenticator on Computer 2 showing the enrolled identity]

This way, the identity is available to the same user on different domain computers, without enrolling again on each one.