---
type: entity
title: Telearbeitsplatzsystem (TAP)
tags: [virtual-desktop, remote-access, windows]
related: [universitatsrechenzentrum-urz, zentraler-nutzeraccount, totp]
sources: ["output/rz_uni_greifswald_de_dienste_technische_infrastruktur_telearbeitsplatz.md"]
created: 2026-06-30
updated: 2026-06-30
---

# Telearbeitsplatzsystem (TAP)

The **Telearbeitsplatzsystem (TAP)** is a virtual desktop infrastructure provided by the [[universitatsrechenzentrum-urz]] that allows authorized users to access a virtual Windows environment through a standard web browser.

## Purpose and Scope
It serves as a restricted alternative to VPN access. Due to Windows operating system licensing constraints, the service is not available to all university members but is limited to specific sectors, such as:
- University Administration (Verwaltung)
- University Library ([[universitatsbibliothek-ub]])

## Access and Security
Access to the TAP requires a [[zentraler-nutzeraccount]] and mandatory **Two-Factor Authentication (2FA)** based on [[totp]].

### Onboarding Workflow
1. **Initial Login**: Users log in to the system using their central URZ credentials.
2. **Key Provisioning**: The system displays a TOTP secret key (available as a QR code or a text string).
3. **Configuration**: The user adds this key to a compatible TOTP application (recommended: [[keepassxc]] or [[freeotp]]).
4. **Verification**: The setup is finalized by entering a generated token from the app into the TAP login screen.

### Subsequent Logins
For all future sessions, users must provide:
1. Account name and password.
2. A current TOTP token.

## Recovery and Support
If the 2FA key is lost (e.g., due to a defective smartphone or corrupted database file), users must contact the URZ via the [[groupware]] ticket system to have their TOTP key reset.

For administrative units, the [[e-verwaltung]] provides additional support for the initial 2FA setup.
