Installation Guide

Server

Windows Server

Adding a Domain Name (FQDN)

12:03 PM

After installation, you can add access by domain name. First, create a DNS record pointing the domain name to the server IP address, then run the following command in PowerShell as an administrator.

# Replace remotto.example.com with your actual domain name.
& 'C:\Program Files\Remotto Server\remotto-server.exe' add-fqdn remotto.example.com

Automatic PostgreSQL Tuning

During installation, PostgreSQL is automatically tuned based on the server’s RAM. If you add or change the server’s RAM later, run the following command in PowerShell as an administrator:

& 'C:\Program Files\Remotto Server\remotto-server.exe' retune-db

Linux (Ubuntu / Rocky Linux)

# Ubuntu
sudo apt update
sudo apt install ./remotto-server.deb

# Rocky Linux
sudo dnf update
sudo dnf install ./remotto-server.rpm

# Check service status
sudo systemctl status remotto-server

# Ubuntu (ufw)
sudo ufw allow 443/tcp
sudo ufw allow 8443/tcp
sudo ufw allow 7881/tcp
sudo ufw allow 50000:52000/udp

# Rocky Linux (firewalld)
sudo firewall-cmd --permanent --add-port=443/tcp
sudo firewall-cmd --permanent --add-port=8443/tcp
sudo firewall-cmd --permanent --add-port=7881/tcp
sudo firewall-cmd --permanent --add-port=50000-52000/udp
sudo firewall-cmd --reload

Adding a Domain Name (FQDN)

After installation, you can add access by domain name. First, create a DNS record pointing the domain name to the server IP address, then run the following command.

# Replace remotto.example.com with your actual domain name.
sudo remotto-server add-fqdn remotto.example.com

Automatic PostgreSQL Tuning

During installation, PostgreSQL is automatically tuned based on the server’s RAM. If you add or change the server’s RAM later, run:

# Auto-tune PostgreSQL (optimizes based on server RAM)
sudo remotto-server retune-db

Client

Windows

Mass Deployment (Silent Installation)

The installer supports silent mode. Use the /VERYSILENT option to install without GUI, and /SERVER= to specify the server address.

# Silent install (with server address)
msiexec /i "RemottoClient.msi" /qn /norestart SERVER="192.168.1.100"

# Host name is also supported
msiexec /i "RemottoClient.msi" /qn /norestart SERVER="remotto.example.com"

Batch file example (deployment from shared folder):

@echo off
msiexec.exe /i "\\server\share\RemottoClient.msi" /qn /norestart SERVER="192.168.1.100"

Place the batch file in a shared folder and register it as a startup script through Active Directory Group Policy for automated deployment to domain-joined PCs.

When Using Thin Clients or Reboot-to-Restore Software

If the Windows environment is restored to its initial state whenever the device restarts, exclude Remotto’s device identification data from the restore process. Otherwise, this data will also be reset after every restart, which may cause the device to be registered as a different device in the admin console or cause multiple devices to be recognized as the same device.

Exclude the following registry keys and folders, including all subkeys, files, and subfolders, from the restore process.
If you selected a different installation location, specify the actual installation folder.

C:\ProgramData\Remotto\
C:\Program Files\Remotto\
HKEY_LOCAL_MACHINE\SOFTWARE\Remotto

# Run the following command in PowerShell as an administrator.
Stop-Service RemottoService -Force
Get-Process Remotto, remotto-service -ErrorAction SilentlyContinue |
    Stop-Process -Force

# Run the following commands in PowerShell as an administrator.

# Delete device identification data
Remove-ItemProperty `
    -Path 'HKLM:\SOFTWARE\Remotto' `
    -Name DeviceId, HardwareSerial `
    -ErrorAction SilentlyContinue

# Delete device authentication keys and enrollment data
Remove-Item `
    -Path 'HKLM:\SOFTWARE\Remotto\DeviceSecurity' `
    -Recurse -Force -ErrorAction SilentlyContinue

# Delete the CA certificate and private keys used for Web Filtering
certutil -delstore Root "Remotto Root CA"

Remove-Item `
    'C:\ProgramData\Remotto\ca.crt', `
    'C:\ProgramData\Remotto\ca.key', `
    'C:\ProgramData\Remotto\server.key' `
    -Force -ErrorAction SilentlyContinue

Mac

STEP

Download the Package

Double-click the downloaded Remotto-universal.pkg file to launch the standard macOS installer. Follow the on-screen instructions, click Continue → Install, and enter macOS administrator password for the Mac

Download (.pkg)

You must specify the server IP address or FQDN during installation.
Example: 192.168.1.100 ,remotto.example.com

STEP

Configure Permissions

After installation, open System Settings → Privacy & Security, then enable Remotto for the following two items.

Permission	Purpose	Settings Path
Screen Recording	Screen monitoring	Screen Recording & System Audio Recording
Accessibility	Remote control (keyboard and mouse)	Accessibility

If these permissions are not allowed, screen monitoring and remote control will not work.
If macOS asks you to quit the app, select Quit & Reopen.

STEP

Verify Connection

After installation, the client automatically connects to the server. If the client appears in the Device List in the Admin Console, the setup is successful.

Required Ports

Uninstall

Uninstall the Server

Windows

Uninstall “Remotto Server” from “Apps & Features”.

1. Open Windows Settings → Apps → Installed apps
2. Search for Remotto Server in the list
3. Click Uninstall

Linux

Remove using your package manager.

# Ubuntu
sudo apt remove remotto-server

# Rocky Linux
sudo dnf remove remotto-server

Client

Windows

Remove via Windows “Apps & Features”.

1. Open Windows Settings → “Apps” → “Installed apps”
2. Search for “Remotto Client” in the list
3. Click “Uninstall”

Silent Uninstall

# Run the uninstaller silently
"C:\Program Files\Remotto Client\unins000.exe" /VERYSILENT

The device remains in the Admin Console Device List as Offline. If it is no longer needed, delete the device from the Admin Console.

Mac

1. Open Finder, right-click the Remotto icon, and select Show Package Contents.
2. Open Contents → Resources, then click uninstall.command.
   A password prompt appears during uninstallation.
   Enter the password and follow the on-screen instructions to complete the uninstall process.

Uninstall from the Command Line

/Applications/Remotto.app/Contents/Resources/uninstall.command

The client remains in the Admin Console Device List as Offline. If it is no longer needed, delete the client from the Admin Console.