AWS dcv documentation change

Service: dcv · 2025-11-22 · Documentation low

File: dcv/latest/sm-admin/configure-dcv-server.md

Summary

Added macOS-specific configuration instructions for Amazon DCV server security parameters (ca-file and auth-token-verifier)

Security assessment

The change adds documentation about configuring certificate authority files and authentication token verification, which are security-related features. However, there is no evidence this addresses a specific vulnerability or security incident.

Diff

diff --git a/dcv/latest/sm-admin/configure-dcv-server.md b/dcv/latest/sm-admin/configure-dcv-server.md
index 15b9952d8..a4349ee21 100644
--- a//dcv/latest/sm-admin/configure-dcv-server.md
+++ b//dcv/latest/sm-admin/configure-dcv-server.md
@@ -63,0 +64,27 @@ If the parameter does not exist, create a new string parameter and name it `auth
+
+
+
+
+macOS Amazon DCV server
+    
+
+###### To add the local service user for macOS Amazon DCV servers
+
+  1. Open `/etc/dcv/dcv.conf` using your preferred text editor.
+
+  2. Add the `ca-file` and `auth-token-verifier` parameters to the `[security]` section.
+
+     * For `ca-file`, specify the path to the broker's self-signed CA that you copied to the host in the previous step.
+
+     * For `auth-token-verifier`, specify the URL for the token verifier on the broker in the following format: `https://`broker_ip_or_dns`:`port`/agent/validate-authentication-token`. Specify the port used for broker-agent communication, which is 8445 by default. If you are running the broker on an Amazon EC2 instance, you must use the private DNS or private IP address.
+
+For example
+        
+                [security]
+        ca-file="/usr/local/etc/dcv-session-manager-agent/broker_cert.pem"
+        auth-token-verifier="https://my-sm-broker.com:8445/agent/validate-authentication-token"
+        							
+
+  3. Save and close the file.
+
+  4. Stop and restart the Amazon DCV server. For more information, see [Stopping the Amazon DCV Server](https://docs.aws.amazon.com/dcv/latest/adminguide/manage-stop.html) and [ Starting the Amazon DCV Server](https://docs.aws.amazon.com/dcv/latest/adminguide/manage-start.html) in the _Amazon DCV Administrator Guide_.