Yes. Ops engineers have to install BHLoader, as it is used to invoke local applications, create connections through them, and access the target resources.
Yes. You need to install connection tools locally, as BHLoader is mainly used to invoke local applications, and connection tools such as SecureCRT and Xshell are required to complete the connection process and perform local operations on CVM.
The asset account must be an existing user of the target CVM instance (for example,
administrator), as BH itself does not create CVM users.
Yes. The admin can set the web idle timeout period.
Two-factor authentication must be enabled for SaaS BH for security reasons. Currently, you can use password + OTP or password + SMS.
This problem may be caused by multiple public IP addresses at your network egress. In particular, the IP address added after login to the Ops page is not the one used to connect to BH via a local tool. You can manually add your IP range to the allowlist.
Log in to the BH management page as an admin, click Create access permission or Edit on the Access permissions page, and select the target asset or asset group in step 3 to create or modify an access permission.