20#ifndef CLIENT_COMMON_CMDLINE_H
21#define CLIENT_COMMON_CMDLINE_H
23#include <freerdp/config.h>
25#include <winpr/cmdline.h>
28 {
"a", COMMAND_LINE_VALUE_REQUIRED,
"<addin>[,<options>]",
nullptr,
nullptr, -1,
"addin",
30 {
"azure", COMMAND_LINE_VALUE_REQUIRED,
31 "[tenantid:<id>],[use-tenantid[:[on|off]],[ad:<url>]"
32 "[avd-access:<format string>],[avd-token:<format string>],[avd-scope:<format string>]",
33 nullptr,
nullptr, -1,
nullptr,
"AzureAD options" },
34 {
"action-script", COMMAND_LINE_VALUE_REQUIRED,
"<file-name>",
"~/.config/freerdp/action.sh",
35 nullptr, -1,
nullptr,
"Action script" },
36 {
"admin", COMMAND_LINE_VALUE_FLAG,
nullptr,
nullptr,
nullptr, -1,
"console",
37 "Admin (or console) session" },
38 {
"aero", COMMAND_LINE_VALUE_BOOL,
nullptr,
nullptr, BoolValueFalse, -1,
nullptr,
39 "desktop composition" },
40 {
"app", COMMAND_LINE_VALUE_REQUIRED,
41 "program:[<path>|<||alias>],cmd:<command>,file:<filename>,guid:<guid>,icon:<filename>,name:<"
42 "name>,workdir:<directory>,hidef:[on|off]",
43 nullptr,
nullptr, -1,
nullptr,
"Remote application program" },
44#if defined(WITH_FREERDP_DEPRECATED_COMMANDLINE)
45 {
"app-cmd", COMMAND_LINE_VALUE_REQUIRED,
"<parameters>",
nullptr,
nullptr, -1,
nullptr,
46 "[DEPRECATED, use /app:cmd:<command>] Remote application command-line parameters" },
47 {
"app-file", COMMAND_LINE_VALUE_REQUIRED,
"<file-name>",
nullptr,
nullptr, -1,
nullptr,
48 "[DEPRECATED, use /app:file:<filename>] File to open with remote application" },
49 {
"app-guid", COMMAND_LINE_VALUE_REQUIRED,
"<app-guid>",
nullptr,
nullptr, -1,
nullptr,
50 "[DEPRECATED, use /app:guid:<guid>] Remote application GUID" },
51 {
"app-icon", COMMAND_LINE_VALUE_REQUIRED,
"<icon-path>",
nullptr,
nullptr, -1,
nullptr,
52 "[DEPRECATED, use /app:icon:<filename>] Remote application icon for user interface" },
53 {
"app-name", COMMAND_LINE_VALUE_REQUIRED,
"<app-name>",
nullptr,
nullptr, -1,
nullptr,
54 "[DEPRECATED, use /app:name:<name>] Remote application name for user interface" },
55 {
"app-workdir", COMMAND_LINE_VALUE_REQUIRED,
"<workspace path>",
nullptr,
nullptr, -1,
nullptr,
56 "[DEPRECATED, use /app:workdir:<directory>] Remote application workspace path" },
58 {
"assistance", COMMAND_LINE_VALUE_REQUIRED,
"<password>",
nullptr,
nullptr, -1,
nullptr,
59 "Remote assistance password" },
60 {
"auto-request-control", COMMAND_LINE_VALUE_FLAG,
"",
nullptr,
nullptr, -1,
nullptr,
61 "Automatically request remote assistance input control" },
62 {
"async-channels", COMMAND_LINE_VALUE_BOOL,
nullptr, BoolValueFalse,
nullptr, -1,
nullptr,
63 "Asynchronous channels (experimental)" },
64 {
"async-update", COMMAND_LINE_VALUE_BOOL,
nullptr, BoolValueFalse,
nullptr, -1,
nullptr,
65 "Asynchronous update" },
66 {
"audio-mode", COMMAND_LINE_VALUE_REQUIRED,
"<mode>",
nullptr,
nullptr, -1,
nullptr,
67 "Audio output mode" },
68 {
"auth-only", COMMAND_LINE_VALUE_BOOL,
nullptr, BoolValueFalse,
nullptr, -1,
nullptr,
69 "Authenticate only" },
70 {
"auth-pkg-list", COMMAND_LINE_VALUE_REQUIRED,
"[[none],]<!ntlm,kerberos,!u2u>",
nullptr,
72 "Authentication package filter (comma-separated list, use '!' to disable). By default "
73 "all methods are enabled. Use explicit 'none' as first argument to disable all methods, "
74 "selectively enabling only the ones following." },
75 {
"authentication", COMMAND_LINE_VALUE_BOOL,
nullptr, BoolValueTrue,
nullptr, -1,
nullptr,
76 "Authentication (experimental)" },
77 {
"auto-reconnect", COMMAND_LINE_VALUE_BOOL,
nullptr, BoolValueFalse,
nullptr, -1,
nullptr,
78 "Automatic reconnection" },
79 {
"auto-reconnect-max-retries", COMMAND_LINE_VALUE_REQUIRED,
"<retries>",
nullptr,
nullptr, -1,
80 nullptr,
"Automatic reconnection maximum retries, 0 for unlimited [0,1000]" },
81#if defined(WITH_FREERDP_DEPRECATED_COMMANDLINE)
82 {
"bitmap-cache", COMMAND_LINE_VALUE_BOOL,
nullptr, BoolValueFalse,
nullptr, -1,
nullptr,
83 "[DEPRECATED, use /cache:bitmap[:on|off]] bitmap cache" },
84 {
"persist-cache", COMMAND_LINE_VALUE_BOOL,
nullptr, BoolValueFalse,
nullptr, -1,
nullptr,
85 "[DEPRECATED, use /cache:persist[:on|off]] persistent bitmap cache" },
86 {
"persist-cache-file", COMMAND_LINE_VALUE_REQUIRED,
"<filename>",
nullptr,
nullptr, -1,
87 nullptr,
"[DEPRECATED, use /cache:persist-file:<filename>] persistent bitmap cache file" },
89 {
"bpp", COMMAND_LINE_VALUE_REQUIRED,
"<depth>",
"16",
nullptr, -1,
nullptr,
90 "Session bpp (color depth)" },
91 {
"buildconfig", COMMAND_LINE_VALUE_FLAG | COMMAND_LINE_PRINT_BUILDCONFIG,
nullptr,
nullptr,
92 nullptr, -1,
nullptr,
"Print the build configuration" },
93 {
"cache", COMMAND_LINE_VALUE_REQUIRED,
94 "[bitmap[:on|off],codec[:rfx|nsc],glyph[:on|off],offscreen[:on|off],persist,persist-file:<"
96 nullptr,
nullptr, -1,
nullptr,
"" },
97 {
"cert", COMMAND_LINE_VALUE_REQUIRED,
98 "[deny,ignore,name:<name>,tofu,fingerprint:<hash>:<hash as hex>[,fingerprint:<hash>:<another "
100 nullptr,
nullptr, -1,
nullptr,
101 "Certificate accept options. Use with care!\n"
102 " * deny ... Automatically abort connection if the certificate does not match, no "
103 "user interaction.\n"
104 " * ignore ... Ignore the certificate checks altogether (overrules all other options)\n"
105 " * name ... Use the alternate <name> instead of the certificate subject to match "
106 "locally stored certificates\n"
107 " * tofu ... Accept certificate unconditionally on first connect and deny on "
108 "subsequent connections if the certificate does not match\n"
109 " * fingerprints ... A list of certificate hashes that are accepted unconditionally for a "
111#if defined(WITH_FREERDP_DEPRECATED_COMMANDLINE)
112 {
"cert-deny", COMMAND_LINE_VALUE_FLAG,
nullptr,
nullptr,
nullptr, -1,
nullptr,
113 "[DEPRECATED, use /cert:deny] Automatically abort connection for any certificate that can "
114 "not be validated." },
115 {
"cert-ignore", COMMAND_LINE_VALUE_FLAG,
nullptr,
nullptr,
nullptr, -1,
nullptr,
116 "[DEPRECATED, use /cert:ignore] Ignore certificate" },
117 {
"cert-name", COMMAND_LINE_VALUE_REQUIRED,
"<name>",
nullptr,
nullptr, -1,
nullptr,
118 "[DEPRECATED, use /cert:name:<name>] Certificate name" },
119 {
"cert-tofu", COMMAND_LINE_VALUE_FLAG,
nullptr,
nullptr,
nullptr, -1,
nullptr,
120 "[DEPRECATED, use /cert:tofu] Automatically accept certificate on first connect" },
123 {
"connect-child-session", COMMAND_LINE_VALUE_BOOL,
nullptr, BoolValueFalse,
nullptr, -1,
"",
124 "connect to child session (win32)" },
126 {
"client-build-number", COMMAND_LINE_VALUE_REQUIRED,
"<number>",
nullptr,
nullptr, -1,
nullptr,
127 "Client Build Number sent to server (influences smartcard behaviour, see [MS-RDPESC])" },
128 {
"client-hostname", COMMAND_LINE_VALUE_REQUIRED,
"<name>",
nullptr,
nullptr, -1,
nullptr,
129 "Client Hostname to send to server" },
130 {
"clipboard", COMMAND_LINE_VALUE_BOOL | COMMAND_LINE_VALUE_OPTIONAL,
131 "[[use-selection:<atom>],[direction-to:[all|local|remote|off]],[files-to[:all|local|remote|"
133 BoolValueTrue,
nullptr, -1,
nullptr,
134 "Redirect clipboard:\n"
135 " * use-selection:<atom> ... (X11) Specify which X selection to access. Default is "
136 "CLIPBOARD. PRIMARY is the X-style middle-click selection.\n"
137 " * direction-to:[all|local|remote|off] control enabled clipboard direction\n"
138 " * files-to:[all|local|remote|off] control enabled file clipboard direction" },
139#if defined(WITH_FREERDP_DEPRECATED_COMMANDLINE)
140 {
"codec-cache", COMMAND_LINE_VALUE_REQUIRED,
"[rfx|nsc|jpeg]",
nullptr,
nullptr, -1,
nullptr,
141 "[DEPRECATED, use /cache:codec:[rfx|nsc|jpeg]] Bitmap codec cache" },
143 {
"compression", COMMAND_LINE_VALUE_BOOL,
nullptr, BoolValueTrue,
nullptr, -1,
"z",
145 {
"compression-level", COMMAND_LINE_VALUE_REQUIRED,
"<level>",
nullptr,
nullptr, -1,
nullptr,
146 "Compression level (0,1,2)" },
147 {
"credentials-delegation", COMMAND_LINE_VALUE_BOOL,
nullptr, BoolValueFalse,
nullptr, -1,
148 nullptr,
"credentials delegation" },
149 {
"d", COMMAND_LINE_VALUE_REQUIRED,
"<domain>",
nullptr,
nullptr, -1,
nullptr,
"Domain" },
150 {
"decorations", COMMAND_LINE_VALUE_BOOL,
nullptr, BoolValueTrue,
nullptr, -1,
nullptr,
151 "Window decorations" },
152 {
"disp", COMMAND_LINE_VALUE_FLAG,
nullptr,
nullptr,
nullptr, -1,
nullptr,
"Display control" },
153 {
"drive", COMMAND_LINE_VALUE_REQUIRED,
"<name>,<path>",
nullptr,
nullptr, -1,
nullptr,
154 "Redirect directory <path> as named share <name>. Hotplug support is enabled with "
155 "/drive:hotplug,*. This argument provides the same function as \"Drives that I plug in "
156 "later\" option in MSTSC." },
157 {
"drives", COMMAND_LINE_VALUE_BOOL,
nullptr, BoolValueFalse,
nullptr, -1,
nullptr,
158 "Redirect all mount points as shares" },
159 {
"dump", COMMAND_LINE_VALUE_REQUIRED,
"<record|replay>,file:<file>[,nodelay]",
nullptr,
160 nullptr, -1,
nullptr,
"record or replay dump" },
161 {
"dvc", COMMAND_LINE_VALUE_REQUIRED,
"<channel>[,<options>]",
nullptr,
nullptr, -1,
nullptr,
162 "Dynamic virtual channel" },
163 {
"dynamic-resolution", COMMAND_LINE_VALUE_BOOL,
nullptr, BoolValueFalse,
nullptr, -1,
nullptr,
164 "Send resolution updates when the window is resized" },
165 {
"echo", COMMAND_LINE_VALUE_FLAG,
nullptr,
nullptr,
nullptr, -1,
"echo",
"Echo channel" },
166 {
"encryption", COMMAND_LINE_VALUE_BOOL,
nullptr, BoolValueTrue,
nullptr, -1,
nullptr,
167 "Encryption (experimental)" },
168 {
"encryption-methods", COMMAND_LINE_VALUE_REQUIRED,
"[40,][56,][128,][FIPS]",
nullptr,
nullptr,
169 -1,
nullptr,
"RDP standard security encryption methods" },
170 {
"f", COMMAND_LINE_VALUE_FLAG,
nullptr,
nullptr,
nullptr, -1,
nullptr,
171 "Fullscreen mode (<Ctrl>+<Alt>+<Enter> toggles fullscreen)" },
172 {
"fipsmode", COMMAND_LINE_VALUE_BOOL,
nullptr,
nullptr,
nullptr, -1,
nullptr,
"FIPS mode" },
173 {
"floatbar", COMMAND_LINE_VALUE_OPTIONAL,
174 "sticky:[on|off],default:[visible|hidden],show:[always|fullscreen|window]",
nullptr,
nullptr,
176 "floatbar is disabled by default (when enabled defaults to sticky in fullscreen mode)" },
177 {
"fonts", COMMAND_LINE_VALUE_BOOL,
nullptr, BoolValueTrue,
nullptr, -1,
nullptr,
178 "smooth fonts (ClearType)" },
179 {
"force-console-callbacks", COMMAND_LINE_VALUE_BOOL,
nullptr, BoolValueFalse,
nullptr, -1,
180 nullptr,
"Use default callbacks (console) for certificate/credential/..." },
181 {
"frame-ack", COMMAND_LINE_VALUE_REQUIRED,
"<number>",
nullptr,
nullptr, -1,
nullptr,
182 "Number of frame acknowledgement" },
183 {
"args-from", COMMAND_LINE_VALUE_REQUIRED,
"<file>|stdin|fd:<number>|env:<name>",
nullptr,
184 nullptr, -1,
nullptr,
185 "Read command line from a file, stdin or file descriptor. This argument can not be combined "
187 "Provide one argument per line." },
188 {
"from-stdin", COMMAND_LINE_VALUE_OPTIONAL,
"force",
nullptr,
nullptr, -1,
nullptr,
189 "Read credentials from stdin. With <force> the prompt is done before connection, otherwise "
190 "on server request." },
191 {
"gateway", COMMAND_LINE_VALUE_REQUIRED,
192 "g:<gateway>[:<port>],u:<user>,d:<domain>,p:<password>,usage-method:["
193 "direct|detect],access-token:<"
194 "token>,type:[rpc|http[,no-websockets][,extauth-sspi-ntlm]|auto[,no-websockets][,extauth-"
195 "sspi-ntlm]]|arm,url:<wss://url>,bearer:<oauth2-bearer-token>",
196 nullptr,
nullptr, -1,
"gw",
"Gateway Hostname" },
197#if defined(WITH_FREERDP_DEPRECATED_COMMANDLINE)
198 {
"g", COMMAND_LINE_VALUE_REQUIRED,
"<gateway>[:<port>]",
nullptr,
nullptr, -1,
nullptr,
199 "[DEPRECATED, use /gateway:g:<url>] Gateway Hostname" },
200 {
"gateway-usage-method", COMMAND_LINE_VALUE_REQUIRED,
"[direct|detect]",
nullptr,
nullptr, -1,
201 "gum",
"[DEPRECATED, use /gateway:usage-method:<method>] Gateway usage method" },
202 {
"gd", COMMAND_LINE_VALUE_REQUIRED,
"<domain>",
nullptr,
nullptr, -1,
nullptr,
203 "[DEPRECATED, use /gateway:d:<domain>] Gateway domain" },
205 {
"gdi", COMMAND_LINE_VALUE_REQUIRED,
"sw|hw",
nullptr,
nullptr, -1,
nullptr,
"GDI rendering" },
206 {
"geometry", COMMAND_LINE_VALUE_FLAG,
nullptr,
nullptr,
nullptr, -1,
nullptr,
207 "Geometry tracking channel" },
208 {
"gestures", COMMAND_LINE_VALUE_BOOL,
nullptr, BoolValueFalse,
nullptr, -1,
nullptr,
209 "Consume multitouch input locally" },
211 {
"gfx", COMMAND_LINE_VALUE_OPTIONAL,
212 "[[progressive[:on|off]|RFX[:on|off]|AVC420[:on|off]AVC444[:on|off]],mask:<value>,small-"
213 "cache[:on|off],thin-client[:on|off],progressive[:on|"
214 "off],frame-ack[:on|off]]",
215 nullptr,
nullptr, -1,
nullptr,
"RDP8 graphics pipeline" },
216#if defined(WITH_FREERDP_DEPRECATED_COMMANDLINE)
217 {
"gfx-h264", COMMAND_LINE_VALUE_OPTIONAL,
"[[AVC420|AVC444],mask:<value>]",
nullptr,
nullptr,
218 -1,
nullptr,
"[DEPRECATED, use /gfx:avc420] RDP8.1 graphics pipeline using H264 codec" },
221 {
"gfx", COMMAND_LINE_VALUE_OPTIONAL,
222 "[progressive[:on|off]|RFX[:on|off]|AVC420[:on|off]AVC444[:on|off]],mask:<value>,small-cache["
223 ":on|off],thin-client[:on|off],progressive[:on|off]]",
224 nullptr,
nullptr, -1,
nullptr,
"RDP8 graphics pipeline" },
226#if defined(WITH_FREERDP_DEPRECATED_COMMANDLINE)
227 {
"gfx-progressive", COMMAND_LINE_VALUE_BOOL,
nullptr, BoolValueFalse,
nullptr, -1,
nullptr,
228 "[DEPRECATED, use /gfx:progressive] RDP8 graphics pipeline using progressive codec" },
229 {
"gfx-small-cache", COMMAND_LINE_VALUE_BOOL,
nullptr, BoolValueTrue,
nullptr, -1,
nullptr,
230 "[DEPRECATED, use /gfx:small-cache] RDP8 graphics pipeline using small cache mode" },
231 {
"gfx-thin-client", COMMAND_LINE_VALUE_BOOL,
nullptr, BoolValueFalse,
nullptr, -1,
nullptr,
232 "[DEPRECATED, use /gfx:thin-client] RDP8 graphics pipeline using thin client mode" },
233 {
"glyph-cache", COMMAND_LINE_VALUE_BOOL,
nullptr, BoolValueFalse,
nullptr, -1,
nullptr,
234 "[DEPRECATED, use /cache:glyph[:on|off]] Glyph cache (experimental)" },
236#if defined(WITH_FREERDP_DEPRECATED_COMMANDLINE)
237 {
"gp", COMMAND_LINE_VALUE_REQUIRED,
"<password>",
nullptr,
nullptr, -1,
nullptr,
238 "[DEPRECATED, use /gateway:p:<password>] Gateway password" },
240 {
"grab-keyboard", COMMAND_LINE_VALUE_BOOL,
nullptr, BoolValueTrue,
nullptr, -1,
nullptr,
241 "Grab keyboard focus, forward all keys to remote" },
242 {
"grab-mouse", COMMAND_LINE_VALUE_BOOL,
nullptr, BoolValueTrue,
nullptr, -1,
nullptr,
243 "Grab mouse focus, forward all events to remote" },
244#if defined(WITH_FREERDP_DEPRECATED_COMMANDLINE)
245 {
"gt", COMMAND_LINE_VALUE_REQUIRED,
246 "[rpc|http[,no-websockets][,extauth-sspi-ntlm]|auto[,no-websockets][,extauth-sspi-ntlm]]",
247 nullptr,
nullptr, -1,
nullptr,
248 "[DEPRECATED, use /gateway:type:<type>] Gateway transport type" },
249 {
"gu", COMMAND_LINE_VALUE_REQUIRED,
"[[<domain>\\]<user>|<user>[@<domain>]]",
nullptr,
nullptr,
250 -1,
nullptr,
"[DEPRECATED, use /gateway:u:<user>] Gateway username" },
251 {
"gat", COMMAND_LINE_VALUE_REQUIRED,
"<access token>",
nullptr,
nullptr, -1,
nullptr,
252 "[DEPRECATED, use /gateway:access-token:<token>] Gateway Access Token" },
254 {
"h", COMMAND_LINE_VALUE_REQUIRED,
"<height>",
"768",
nullptr, -1,
nullptr,
"Height" },
255 {
"heartbeat", COMMAND_LINE_VALUE_BOOL,
nullptr, BoolValueTrue,
nullptr, -1,
nullptr,
256 "Support heartbeat PDUs" },
257 {
"help", COMMAND_LINE_VALUE_FLAG | COMMAND_LINE_PRINT_HELP,
nullptr,
nullptr,
nullptr, -1,
"?",
259 {
"home-drive", COMMAND_LINE_VALUE_BOOL,
nullptr, BoolValueFalse,
nullptr, -1,
nullptr,
260 "Redirect user home as share" },
261 {
"ipv4", COMMAND_LINE_VALUE_OPTIONAL,
"[:force]",
nullptr,
nullptr, -1,
"4",
262 "Prefer IPv4 A record over IPv6 AAAA record" },
263 {
"ipv6", COMMAND_LINE_VALUE_OPTIONAL,
"[:force]",
nullptr,
nullptr, -1,
"6",
264 "Prefer IPv6 AAAA record over IPv4 A record" },
265#if defined(WITH_JPEG)
266 {
"jpeg", COMMAND_LINE_VALUE_FLAG,
nullptr,
nullptr,
nullptr, -1,
nullptr,
267 "JPEG codec support" },
268 {
"jpeg-quality", COMMAND_LINE_VALUE_REQUIRED,
"<percentage>",
nullptr,
nullptr, -1,
nullptr,
271 {
"kbd", COMMAND_LINE_VALUE_REQUIRED,
272 "[layout:[0x<id>|<name>],lang:<0x<id>>,fn-key:<value>,type:<value>,subtype:<value>,unicode[:"
273 "on|off],remap:<key1>=<value1>,remap:<key2>=<value2>,pipe:<filename>]",
274 nullptr,
nullptr, -1,
nullptr,
275 "Keyboard related options:\n"
276 " * layout: set the keybouard layout announced to the server\n"
277 " * lang: set the keyboard language identifier sent to the server\n"
278 " * fn-key: Function key value\n"
279 " * remap: RDP scancode to another one. Use /list:kbd-scancode to get the mapping. Example: "
281 "'a' and 's' on a US keyboard: /kbd:remap:0x1e=0x1f,remap:0x1f=0x1e\n"
282 " * pipe: Name of a named pipe that can be used to type text into the RDP session\n" },
283#if defined(WITH_FREERDP_DEPRECATED_COMMANDLINE)
284 {
"kbd-lang", COMMAND_LINE_VALUE_REQUIRED,
"0x<id>",
nullptr,
nullptr, -1,
nullptr,
285 "[DEPRECATED, use / kbd:lang:<value>] Keyboard active language identifier" },
286 {
"kbd-fn-key", COMMAND_LINE_VALUE_REQUIRED,
"<value>",
nullptr,
nullptr, -1,
nullptr,
287 "[DEPRECATED, use /kbd:fn-key:<value>] Function key value" },
288 {
"kbd-list", COMMAND_LINE_VALUE_FLAG | COMMAND_LINE_PRINT,
nullptr,
nullptr,
nullptr, -1,
289 nullptr,
"[DEPRECATED, use /list:kbd] List keyboard layouts" },
290 {
"kbd-scancode-list", COMMAND_LINE_VALUE_FLAG | COMMAND_LINE_PRINT,
nullptr,
nullptr,
nullptr,
291 -1,
nullptr,
"[DEPRECATED, use list:kbd-scancode] List keyboard RDP scancodes" },
292 {
"kbd-lang-list", COMMAND_LINE_VALUE_OPTIONAL | COMMAND_LINE_PRINT,
nullptr,
nullptr,
nullptr,
293 -1,
nullptr,
"[DEPRECATED, use /list:kbd-lang] List keyboard languages" },
294 {
"kbd-remap", COMMAND_LINE_VALUE_REQUIRED,
295 "[DEPRECATED, use /kbd:remap] List of <key>=<value>,... pairs to remap scancodes",
nullptr,
296 nullptr, -1,
nullptr,
"Keyboard scancode remapping" },
297 {
"kbd-subtype", COMMAND_LINE_VALUE_REQUIRED,
"<id>",
nullptr,
nullptr, -1,
nullptr,
298 "[DEPRECATED, use /kbd:subtype]Keyboard subtype" },
299 {
"kbd-type", COMMAND_LINE_VALUE_REQUIRED,
"<id>",
nullptr,
nullptr, -1,
nullptr,
300 "[DEPRECATED, use /kbd:type] Keyboard type" },
301 {
"kbd-unicode", COMMAND_LINE_VALUE_FLAG,
"",
nullptr,
nullptr, -1,
nullptr,
302 "[DEPRECATED, use /kbd:unicode[:on|off]] Send unicode symbols, e.g. use the local "
303 "keyboard map. ATTENTION: Does not work with every "
306 {
"kerberos", COMMAND_LINE_VALUE_REQUIRED,
307 "[kdc-url:<url>,lifetime:<time>,start-time:<time>,renewable-lifetime:<time>,cache:<path>,"
308 "armor:<path>,pkinit-anchors:<path>,pkcs11-module:<name>]",
309 nullptr,
nullptr, -1,
nullptr,
"Kerberos options" },
310 {
"load-balance-info", COMMAND_LINE_VALUE_REQUIRED,
"<info-string>",
nullptr,
nullptr, -1,
311 nullptr,
"Load balance info" },
312 {
"list", COMMAND_LINE_VALUE_REQUIRED | COMMAND_LINE_PRINT,
313 "[kbd|kbd-scancode|kbd-lang[:<value>]|smartcard[:[pkinit-anchors:<path>][,pkcs11-module:<"
315 "monitor|tune|timezones]",
316 "List available options for subcommand",
nullptr, -1,
nullptr,
317 "List available options for subcommand" },
318 {
"log-filters", COMMAND_LINE_VALUE_REQUIRED,
"<tag>:<level>[,<tag>:<level>[,...]]",
nullptr,
319 nullptr, -1,
nullptr,
"Set logger filters, see wLog(7) for details" },
320 {
"log-level", COMMAND_LINE_VALUE_REQUIRED,
"[OFF|FATAL|ERROR|WARN|INFO|DEBUG|TRACE]",
nullptr,
321 nullptr, -1,
nullptr,
"Set the default log level, see wLog(7) for details" },
322 {
"max-fast-path-size", COMMAND_LINE_VALUE_REQUIRED,
"<size>",
nullptr,
nullptr, -1,
nullptr,
323 "Specify maximum fast-path update size" },
324 {
"max-loop-time", COMMAND_LINE_VALUE_REQUIRED,
"<time>",
nullptr,
nullptr, -1,
nullptr,
325 "Specify maximum time in milliseconds spend treating packets" },
326 {
"menu-anims", COMMAND_LINE_VALUE_BOOL,
nullptr, BoolValueFalse,
nullptr, -1,
nullptr,
328 {
"microphone", COMMAND_LINE_VALUE_OPTIONAL,
329 "[sys:<sys>,][dev:<dev>,][format:<format>,][rate:<rate>,][channel:<channel>]",
nullptr,
330 nullptr, -1,
"mic",
"Audio input (microphone)" },
331#if defined(WITH_FREERDP_DEPRECATED_COMMANDLINE)
332 {
"smartcard-list", COMMAND_LINE_VALUE_FLAG | COMMAND_LINE_PRINT,
nullptr,
nullptr,
nullptr, -1,
333 nullptr,
"[DEPRECATED, use /list:smartcard] List smartcard information" },
334 {
"monitor-list", COMMAND_LINE_VALUE_FLAG | COMMAND_LINE_PRINT,
nullptr,
nullptr,
nullptr, -1,
335 nullptr,
"[DEPRECATED, use /list:monitor] List detected monitors" },
337 {
"monitors", COMMAND_LINE_VALUE_REQUIRED,
"<id>[,<id>[,...]]",
nullptr,
nullptr, -1,
nullptr,
338 "Select monitors to use (only effective in fullscreen or multimonitor mode)" },
339 {
"mouse-motion", COMMAND_LINE_VALUE_BOOL,
nullptr, BoolValueTrue,
nullptr, -1,
nullptr,
340 "Send mouse motion events" },
341 {
"mouse-relative", COMMAND_LINE_VALUE_BOOL,
nullptr, BoolValueFalse,
nullptr, -1,
nullptr,
342 "Send mouse motion with relative addressing" },
343 {
"mouse", COMMAND_LINE_VALUE_REQUIRED,
"[relative:[on|off],grab:[on|off]]",
nullptr,
nullptr,
345 "Mouse related options:\n"
346 " * relative: send relative mouse movements if supported by server\n"
347 " * grab: grab the mouse if within the window" },
348#if defined(CHANNEL_TSMF_CLIENT)
349 {
"multimedia", COMMAND_LINE_VALUE_OPTIONAL,
"[sys:<sys>,][dev:<dev>,][decoder:<decoder>]",
350 nullptr,
nullptr, -1,
"mmr",
"[DEPRECATED], use /video] Redirect multimedia (video)" },
352 {
"multimon", COMMAND_LINE_VALUE_OPTIONAL,
"force",
nullptr,
nullptr, -1,
nullptr,
353 "Use multiple monitors" },
354 {
"multitouch", COMMAND_LINE_VALUE_BOOL,
nullptr, BoolValueFalse,
nullptr, -1,
nullptr,
355 "Redirect multitouch input" },
356 {
"multitransport", COMMAND_LINE_VALUE_BOOL,
nullptr, BoolValueTrue,
nullptr, -1,
nullptr,
357 "Support multitransport protocol" },
358 {
"nego", COMMAND_LINE_VALUE_BOOL,
nullptr, BoolValueTrue,
nullptr, -1,
nullptr,
359 "protocol security negotiation" },
360 {
"network", COMMAND_LINE_VALUE_REQUIRED,
361 "[invalid|modem|broadband|broadband-low|broadband-high|wan|lan|auto]",
nullptr,
nullptr, -1,
362 nullptr,
"Network connection type" },
363 {
"nsc", COMMAND_LINE_VALUE_FLAG,
nullptr,
nullptr,
nullptr, -1,
"nscodec",
"NSCodec support" },
364#if defined(WITH_FREERDP_DEPRECATED_COMMANDLINE)
365 {
"offscreen-cache", COMMAND_LINE_VALUE_BOOL,
nullptr, BoolValueFalse,
nullptr, -1,
nullptr,
366 "[DEPRECATED, use /cache:offscreen[:on|off]] offscreen bitmap cache" },
368 {
"orientation", COMMAND_LINE_VALUE_REQUIRED,
"[0|90|180|270]",
nullptr,
nullptr, -1,
nullptr,
369 "Orientation of display in degrees" },
370 {
"old-license", COMMAND_LINE_VALUE_BOOL,
nullptr, BoolValueFalse,
nullptr, -1,
nullptr,
371 "Use the old license workflow (no CAL and hwId set to 0)" },
372 {
"p", COMMAND_LINE_VALUE_REQUIRED,
"<password>",
nullptr,
nullptr, -1,
nullptr,
"Password" },
373#if defined(CHANNEL_PARALLEL_CLIENT)
374 {
"parallel", COMMAND_LINE_VALUE_OPTIONAL,
"<name>[,<path>]",
nullptr,
nullptr, -1,
nullptr,
375 "Redirect parallel device" },
377 {
"parent-window", COMMAND_LINE_VALUE_REQUIRED,
"<window-id>",
nullptr,
nullptr, -1,
nullptr,
378 "Parent window id" },
379 {
"pcb", COMMAND_LINE_VALUE_REQUIRED,
"<blob>",
nullptr,
nullptr, -1,
nullptr,
380 "Preconnection Blob" },
381 {
"pcid", COMMAND_LINE_VALUE_REQUIRED,
"<id>",
nullptr,
nullptr, -1,
nullptr,
382 "Preconnection Id" },
383 {
"pheight", COMMAND_LINE_VALUE_REQUIRED,
"<height>",
nullptr,
nullptr, -1,
nullptr,
384 "Physical height of display (in millimeters)" },
385 {
"play-rfx", COMMAND_LINE_VALUE_REQUIRED,
"<pcap-file>",
nullptr,
nullptr, -1,
nullptr,
386 "Replay rfx pcap file" },
387 {
"port", COMMAND_LINE_VALUE_REQUIRED,
"<number>",
nullptr,
nullptr, -1,
nullptr,
389 {
"suppress-output", COMMAND_LINE_VALUE_BOOL,
nullptr, BoolValueTrue,
nullptr, -1,
nullptr,
390 "suppress output when minimized" },
391 {
"print-reconnect-cookie", COMMAND_LINE_VALUE_BOOL,
nullptr, BoolValueFalse,
nullptr, -1,
392 nullptr,
"Print base64 reconnect cookie after connecting" },
393 {
"printer", COMMAND_LINE_VALUE_OPTIONAL,
"<name>[,<driver>[,default]]",
nullptr,
nullptr, -1,
394 nullptr,
"Redirect printer device" },
395 {
"proxy", COMMAND_LINE_VALUE_REQUIRED,
"[<proto>://][<user>:<password>@]<host>[:<port>]",
396 nullptr,
nullptr, -1,
nullptr,
397 "Proxy settings: override env. var (see also environment variable below). Protocol "
398 "\"socks5\" should be given explicitly where \"http\" is default." },
399 {
"pth", COMMAND_LINE_VALUE_REQUIRED,
"<password-hash>",
nullptr,
nullptr, -1,
"pass-the-hash",
400 "Pass the hash (restricted admin mode)" },
401 {
"pwidth", COMMAND_LINE_VALUE_REQUIRED,
"<width>",
nullptr,
nullptr, -1,
nullptr,
402 "Physical width of display (in millimeters)" },
403 {
"rdp2tcp", COMMAND_LINE_VALUE_REQUIRED,
"<executable path[:arg...]>",
nullptr,
nullptr, -1,
404 nullptr,
"TCP redirection" },
405 {
"reconnect-cookie", COMMAND_LINE_VALUE_REQUIRED,
"<base64-cookie>",
nullptr,
nullptr, -1,
406 nullptr,
"Pass base64 reconnect cookie to the connection" },
407 {
"redirect-prefer", COMMAND_LINE_VALUE_REQUIRED,
"<FQDN|IP|NETBIOS>,[...]",
nullptr,
nullptr,
408 -1,
nullptr,
"Override the preferred redirection order" },
409 {
"relax-order-checks", COMMAND_LINE_VALUE_FLAG,
nullptr,
nullptr,
nullptr, -1,
410 "relax-order-checks",
411 "Do not check if a RDP order was announced during capability exchange, only use when "
412 "connecting to a buggy server" },
413 {
"restricted-admin", COMMAND_LINE_VALUE_FLAG,
nullptr,
nullptr,
nullptr, -1,
"restrictedAdmin",
414 "Restricted admin mode" },
415#ifdef CHANNEL_RDPEAR_CLIENT
416 {
"remoteGuard", COMMAND_LINE_VALUE_FLAG,
nullptr,
nullptr,
nullptr, -1,
"remoteGuard",
417 "Remote guard credentials" },
419 {
"rfx", COMMAND_LINE_VALUE_FLAG,
nullptr,
nullptr,
nullptr, -1,
nullptr,
"RemoteFX" },
420 {
"rfx-mode", COMMAND_LINE_VALUE_REQUIRED,
"[image|video]",
nullptr,
nullptr, -1,
nullptr,
422 {
"scale", COMMAND_LINE_VALUE_REQUIRED,
"[100|140|180]",
"100",
nullptr, -1,
nullptr,
423 "Scaling factor of the display" },
424 {
"scale-desktop", COMMAND_LINE_VALUE_REQUIRED,
"<percentage>",
"100",
nullptr, -1,
nullptr,
425 "Scaling factor for desktop applications (value between 100 and 500)" },
426 {
"scale-device", COMMAND_LINE_VALUE_REQUIRED,
"100|140|180",
"100",
nullptr, -1,
nullptr,
427 "Scaling factor for app store applications" },
428 {
"sec", COMMAND_LINE_VALUE_REQUIRED,
429 "rdp[:[on|off]]|tls[:[on|off]]|nla[:[on|off]]|ext[:[on|off]]|aad[:[on|off]]",
nullptr,
430 nullptr, -1,
nullptr,
431 "Force specific protocol security. e.g. /sec:nla enables NLA and disables all others, while "
432 "/sec:nla:[on|off] just toggles NLA" },
433#if defined(WITH_FREERDP_DEPRECATED_COMMANDLINE)
434 {
"sec-ext", COMMAND_LINE_VALUE_BOOL,
nullptr, BoolValueFalse,
nullptr, -1,
nullptr,
435 "[DEPRECATED, use /sec:ext] NLA extended protocol security" },
436 {
"sec-nla", COMMAND_LINE_VALUE_BOOL,
nullptr, BoolValueTrue,
nullptr, -1,
nullptr,
437 "[DEPRECATED, use /sec:nla] NLA protocol security" },
438 {
"sec-rdp", COMMAND_LINE_VALUE_BOOL,
nullptr, BoolValueTrue,
nullptr, -1,
nullptr,
439 "[DEPRECATED, use /sec:rdp] RDP protocol security" },
440 {
"sec-tls", COMMAND_LINE_VALUE_BOOL,
nullptr, BoolValueTrue,
nullptr, -1,
nullptr,
441 "[DEPRECATED, use /sec:tls] TLS protocol security" },
443#if defined(CHANNEL_SERIAL_CLIENT)
444 {
"serial", COMMAND_LINE_VALUE_OPTIONAL,
"<name>[,<path>[,<driver>[,permissive]]]",
nullptr,
445 nullptr, -1,
"tty",
"Redirect serial device" },
447 {
"server-name", COMMAND_LINE_VALUE_REQUIRED,
"<name>",
nullptr,
nullptr, -1,
nullptr,
448 "User-specified server name to use for validation (TLS, Kerberos)" },
449 {
"shell", COMMAND_LINE_VALUE_REQUIRED,
"<shell>",
nullptr,
nullptr, -1,
nullptr,
451 {
"shell-dir", COMMAND_LINE_VALUE_REQUIRED,
"<dir>",
nullptr,
nullptr, -1,
nullptr,
452 "Shell working directory" },
453 {
"size", COMMAND_LINE_VALUE_REQUIRED,
"<width>x<height> or <percent>%[wh]",
"1024x768",
454 nullptr, -1,
nullptr,
"Screen size" },
455 {
"smart-sizing", COMMAND_LINE_VALUE_OPTIONAL,
"<width>x<height>",
nullptr,
nullptr, -1,
456 nullptr,
"Scale remote desktop to window size" },
457 {
"smartcard", COMMAND_LINE_VALUE_OPTIONAL,
"<str>[,<str>...]",
nullptr,
nullptr, -1,
nullptr,
458 "Redirect the smartcard devices containing any of the <str> in their names." },
459 {
"smartcard-logon", COMMAND_LINE_VALUE_OPTIONAL,
460 "[cert:<path>,key:<key>,pin:<pin>,csp:<csp name>,reader:<reader>,card:<card>]",
nullptr,
461 nullptr, -1,
nullptr,
"Activates Smartcard (optional certificate) Logon authentication." },
462 {
"sound", COMMAND_LINE_VALUE_OPTIONAL,
463 "[sys:<sys>,][dev:<dev>,][format:<format>,][rate:<rate>,][channel:<channel>,][latency:<"
464 "latency>,][quality:<quality>]",
465 nullptr,
nullptr, -1,
"audio",
"Audio output (sound)" },
466 {
"span", COMMAND_LINE_VALUE_FLAG,
nullptr,
nullptr,
nullptr, -1,
nullptr,
467 "Span screen over multiple monitors" },
468 {
"spn-class", COMMAND_LINE_VALUE_REQUIRED,
"<service-class>",
nullptr,
nullptr, -1,
nullptr,
469 "SPN authentication service class" },
470 {
"ssh-agent", COMMAND_LINE_VALUE_FLAG,
nullptr,
nullptr,
nullptr, -1,
"ssh-agent",
471 "SSH Agent forwarding channel" },
472 {
"sspi-module", COMMAND_LINE_VALUE_REQUIRED,
"<SSPI module path>",
nullptr,
nullptr, -1,
473 nullptr,
"SSPI shared library module file path" },
474 {
"winscard-module", COMMAND_LINE_VALUE_REQUIRED,
"<WinSCard module path>",
nullptr,
nullptr,
475 -1,
nullptr,
"WinSCard shared library module file path" },
476 {
"disable-output", COMMAND_LINE_VALUE_FLAG,
nullptr,
nullptr,
nullptr, -1,
nullptr,
477 "Deactivate all graphics decoding in the client session. Useful for load tests with many "
478 "simultaneous connections" },
479 {
"t", COMMAND_LINE_VALUE_REQUIRED,
"<title>",
nullptr,
nullptr, -1,
"title",
"Window title" },
480 {
"themes", COMMAND_LINE_VALUE_BOOL,
nullptr, BoolValueTrue,
nullptr, -1,
nullptr,
"themes" },
481 {
"timeout", COMMAND_LINE_VALUE_REQUIRED,
"<time in ms>",
"9000",
nullptr, -1,
"timeout",
482 "Advanced setting for high latency links: Adjust connection timeout, use if you encounter "
483 "timeout failures with your connection" },
484 {
"timezone", COMMAND_LINE_VALUE_REQUIRED,
"<windows timezone>",
nullptr,
nullptr, -1,
nullptr,
485 "Use supplied windows timezone for connection (requires server support), see /list:timezones "
486 "for allowed values" },
487 {
"tls", COMMAND_LINE_VALUE_REQUIRED,
"[ciphers|seclevel|secrets-file|enforce]",
nullptr,
488 nullptr, -1,
nullptr,
489 "TLS configuration options:"
490 " * ciphers:[netmon|ma|<cipher names>]\n"
491 " * seclevel:<level>, default: 1, range: [0-5] Override the default TLS security level, "
492 "might be required for older target servers\n"
493 " * secrets-file:<filename>\n"
494 " * enforce[:[ssl3|1.0|1.1|1.2|1.3]] Force use of SSL/TLS version for a connection. Some "
495 "servers have a buggy TLS "
496 "version negotiation and might fail without this. Defaults to TLS 1.2 if no argument is "
497 "supplied. Use 1.0 for windows 7" },
498#if defined(WITH_FREERDP_DEPRECATED_COMMANDLINE)
499 {
"tls-ciphers", COMMAND_LINE_VALUE_REQUIRED,
"[netmon|ma|ciphers]",
nullptr,
nullptr, -1,
500 nullptr,
"[DEPRECATED, use /tls:ciphers] Allowed TLS ciphers" },
501 {
"tls-seclevel", COMMAND_LINE_VALUE_REQUIRED,
"<level>",
"1",
nullptr, -1,
nullptr,
502 "[DEPRECATED, use /tls:seclevel] TLS security level - defaults to 1" },
503 {
"tls-secrets-file", COMMAND_LINE_VALUE_REQUIRED,
"<filename>",
nullptr,
nullptr, -1,
nullptr,
504 "[DEPRECATED, use /tls:secrets:file] File were TLS secrets will be stored in the "
505 "SSLKEYLOGFILE format" },
506 {
"enforce-tlsv1_2", COMMAND_LINE_VALUE_BOOL,
nullptr, BoolValueFalse,
nullptr, -1,
nullptr,
507 "[DEPRECATED, use /tls:enforce:1.2] Force use of TLS1.2 for connection. Some "
508 "servers have a buggy TLS version negotiation and "
509 "might fail without this" },
511 {
"toggle-fullscreen", COMMAND_LINE_VALUE_BOOL,
nullptr, BoolValueTrue,
nullptr, -1,
nullptr,
512 "Alt+Ctrl+Enter to toggle fullscreen" },
513 {
"tune", COMMAND_LINE_VALUE_REQUIRED,
"<setting:value>,<setting:value>",
"",
nullptr, -1,
514 nullptr,
"[experimental] directly manipulate freerdp settings, use with extreme caution!" },
515#if defined(WITH_FREERDP_DEPRECATED_COMMANDLINE)
516 {
"tune-list", COMMAND_LINE_VALUE_FLAG | COMMAND_LINE_PRINT,
nullptr,
nullptr,
nullptr, -1,
517 nullptr,
"[DEPRECATED, use /list:tune] Print options allowed for /tune" },
519 {
"u", COMMAND_LINE_VALUE_REQUIRED,
"[[<domain>\\]<user>|<user>[@<domain>]]",
nullptr,
nullptr,
520 -1,
nullptr,
"Username" },
521 {
"unmap-buttons", COMMAND_LINE_VALUE_BOOL,
nullptr, BoolValueFalse,
nullptr, -1,
nullptr,
522 "Let server see real physical pointer button" },
523#ifdef CHANNEL_URBDRC_CLIENT
524 {
"usb", COMMAND_LINE_VALUE_REQUIRED,
525 "[dbg,][id:<vid>:<pid>#...,][addr:<bus>:<addr>#...,][auto]",
nullptr,
nullptr, -1,
nullptr,
526 "Redirect USB device" },
528 {
"v", COMMAND_LINE_VALUE_REQUIRED,
"<server>[:port]",
nullptr,
nullptr, -1,
nullptr,
529 "Server hostname|URL|IPv4|IPv6 or vsock://<number> or /some/path/to/pipe or |:1234 to pass a "
530 "TCP socket to use" },
531 {
"vc", COMMAND_LINE_VALUE_REQUIRED,
"<channel>[,<options>]",
nullptr,
nullptr, -1,
nullptr,
532 "Static virtual channel" },
533 {
"version", COMMAND_LINE_VALUE_FLAG | COMMAND_LINE_PRINT_VERSION,
nullptr,
nullptr,
nullptr,
534 -1,
nullptr,
"Print version" },
535 {
"video", COMMAND_LINE_VALUE_FLAG,
nullptr,
nullptr,
nullptr, -1,
nullptr,
536 "Video optimized remoting channel" },
537 {
"prevent-session-lock", COMMAND_LINE_VALUE_OPTIONAL,
"<time in sec>",
nullptr,
nullptr, -1,
539 "Prevent session locking by injecting fake mouse motion events to the server "
540 "when the connection is idle (default interval: 180 seconds)" },
541 {
"vmconnect", COMMAND_LINE_VALUE_OPTIONAL,
"<vmid>",
nullptr,
nullptr, -1,
nullptr,
542 "Hyper-V console (use port 2179, disable negotiation)" },
543 {
"w", COMMAND_LINE_VALUE_REQUIRED,
"<width>",
"1024",
nullptr, -1,
nullptr,
"Width" },
544 {
"wallpaper", COMMAND_LINE_VALUE_BOOL,
nullptr, BoolValueTrue,
nullptr, -1,
nullptr,
546 {
"window-drag", COMMAND_LINE_VALUE_BOOL,
nullptr, BoolValueFalse,
nullptr, -1,
nullptr,
547 "full window drag" },
548 {
"window-position", COMMAND_LINE_VALUE_REQUIRED,
"<xpos>x<ypos>",
nullptr,
nullptr, -1,
549 nullptr,
"window position" },
550 {
"wm-class", COMMAND_LINE_VALUE_REQUIRED,
"<class-name>",
nullptr,
nullptr, -1,
nullptr,
551 "Set the WM_CLASS hint for the window instance" },
552 {
"workarea", COMMAND_LINE_VALUE_FLAG,
nullptr,
nullptr,
nullptr, -1,
nullptr,
553 "Use available work area" },
554 {
nullptr, 0,
nullptr,
nullptr,
nullptr, -1,
nullptr,
nullptr }