# LAA remote access

Every Linaro Automation Appliance can be remotelly accessed from the fleet
management cloud service. This service is only accessible to Linaro engineers
to debug issues with an LAA.

:::{admonition} Owner permission
:class: warning
Permissions to use remote access should be granted by the owner prior to any
use.
:::

## Usage

In order to use the remote access feature, browse to the LAA page on LMS and
click on `Start` in the `Remote access` card.

![Remote access start](/_images/software/connectivity/remote-access-start.png){align=center}

After some seconds, three buttons will appear. Click on `Enter` to open another
browser tab with the remote access console.

![Remote access enter](/_images/software/connectivity/remote-access-enter.png){align=center}

:::{admonition} Read-only console
:class: tip
The second green button `Enter (RO)` is a link to the read-only remote console
access. This is the same console as the first button but in read-only mode.
:::

## Technology

In order to remotely access an LAA, an [sshx](https://sshx.io) tunnel is
created from the LAA to the server over https.

:::{admonition} Encryption
:class: tip
An sshx connection is End-to-End encrypted, which mean that only the user
knowing the exact URL can decrypt the content. The sshx server does not have
access to this URL and is unable to decrypt the content.
:::

:::{admonition} Keep the URL safe
:class: warning
Any user knowing the sshx URL is able to access the remote session. **Do not
share** this URL with untrusted users.
:::