# Instance configuration

{% hint style="warning" %}
Defguard Desktop Client is required if you want to use Multi-Factor Authentication, as any other WireGuard client doesn't support this functionality.
{% endhint %}

### Obtaining URL and Token

{% hint style="info" %}
If you are looking for how to generate tokens for your users as an Administrator, look here:

[remote-desktop-activation](https://docs.defguard.net/1.4/features/wireguard/remote-desktop-activation "mention")
{% endhint %}

1. Log in to your Defguard account.
2. Go to **My Profile** tab.
3. Click **Add new device** button inside **User Devices** list.

<figure><img src="https://content.gitbook.com/content/qA26Hk2bOkuJXJg4scJ4/blobs/4FObwQdwAtdP04TeqOzZ/defguard-myprofile-add-device.png" alt="" width="50%"><figcaption></figcaption></figure>

4. Select **Remote Device Activation** and click **Next**.

<figure><img src="https://content.gitbook.com/content/qA26Hk2bOkuJXJg4scJ4/blobs/ESlzEzRcZqn7YvfB8wXf/defguard-add-new-device.png" alt="" width="50%"><figcaption></figcaption></figure>

5. After that you will see URL, Token and QR Code. **Copy URL and Token.**

<figure><img src="https://content.gitbook.com/content/qA26Hk2bOkuJXJg4scJ4/blobs/ouTf9bfaRxHM7f0tT8Bf/defguard-add-instance-qr.png" alt="" width="50%"><figcaption></figcaption></figure>

### Adding Instance

1. Open Defguard client
2. Click **Add Instance**.

<figure><img src="https://content.gitbook.com/content/qA26Hk2bOkuJXJg4scJ4/blobs/XVJpl9zB1TwGqbrBTkhF/defguard-client-add-instance.png" alt=""><figcaption></figcaption></figure>

3. Enter URL and Token, then click **Add Instance**. (If you don't have it, check out [this section](#obtaining-url-and-token))

<figure><img src="https://content.gitbook.com/content/qA26Hk2bOkuJXJg4scJ4/blobs/VMoRjiwJ8SPBM0CnAZO7/defguard-client-url-token.png" alt=""><figcaption></figcaption></figure>

### Connecting to Instance

1. Select your Instance from menu

<figure><img src="https://content.gitbook.com/content/qA26Hk2bOkuJXJg4scJ4/blobs/pFR6mA1Iob2nA4T59U0L/defguard-my-instance.png" alt=""><figcaption></figcaption></figure>

2. Select your location, allowed traffic then click **Connect.**

{% hint style="info" %}

* **Predefined traffic** will only route traffic specified by your administrator.
* **All traffic** will route everything through VPN tunnel.
  {% endhint %}

<figure><img src="https://content.gitbook.com/content/qA26Hk2bOkuJXJg4scJ4/blobs/qrJVV86yU0qnpWfvqQlp/defguard-client-connect.png" alt=""><figcaption></figcaption></figure>

### Disconnecting from Instance

Click **Disconnect** next to the location you are currently connected to.

<figure><img src="https://content.gitbook.com/content/qA26Hk2bOkuJXJg4scJ4/blobs/nXvDRx3KFQCJVQ3IFWJD/defguard-client-disconnect.png" alt=""><figcaption></figcaption></figure>

### Updating Instance

If you want to update your instance manually:

1. Go to your Instance and click **Edit Instance**

<figure><img src="https://content.gitbook.com/content/qA26Hk2bOkuJXJg4scJ4/blobs/tD91Ohpq842XXiPMXfHg/defguard-client-edit-instance.png" alt=""><figcaption></figcaption></figure>

{% hint style="warning" %}
Only tokens issued from that specific instance will work in that modal.
{% endhint %}

2. Enter Token provided by your administrator, or generate it [on your own](#obtaining-url-and-token). Then click **Update Instance**

<figure><img src="https://content.gitbook.com/content/qA26Hk2bOkuJXJg4scJ4/blobs/EK5EjuNseWdrhl2MVmOi/defguard-client-update-instance.png" alt=""><figcaption></figcaption></figure>

Your Instance will update immediately.

### Why do instances need updates?

Defguard Desktop stores all information locally and doesn't communicate with Defguard outside the registration process. This means that information about instances are snapshots of the moment you registered them in the desktop client, and you might want to update that, for example when some new locations are added or removed.

{% hint style="success" %}
If you have an Enterprise License, all desktop clients and all instances are [synchronized automatically and in real-time.](https://docs.defguard.net/1.4/features/remote-user-enrollment/automatic-real-time-desktop-client-configuration)
{% endhint %}

### Removing Instance

1. Go to your Instance and click **Edit Instance**

<figure><img src="https://content.gitbook.com/content/qA26Hk2bOkuJXJg4scJ4/blobs/tD91Ohpq842XXiPMXfHg/defguard-client-edit-instance.png" alt=""><figcaption></figcaption></figure>

2. Click **Remove Instance**

<figure><img src="https://content.gitbook.com/content/qA26Hk2bOkuJXJg4scJ4/blobs/cAw8uqiTIwawqyCdH8F9/defguard-client-remove-instance.png" alt=""><figcaption></figcaption></figure>

Your Instance will be removed immediately.