# Instance configuration

{% hint style="warning" %}
Defguard Desktop Client is required if you want to use Multi-Factor Authentication, as any other WireGuard client doesn't support this functionality.
{% endhint %}

### Obtaining URL and Token

{% hint style="info" %}
If you are looking for how to generate tokens for your users as an Administrator, look here:

[Adding client device](/features/wireguard/remote-desktop-activation.md)
{% endhint %}

1. Log in to your Defguard account.
2. In account profile, open **Devices** tab.
3. Click **Add new device.**<br>

   <figure><img src="/files/7cBUazE1a7bI0T5lO0mw" alt="" width="563"><figcaption></figcaption></figure>
4. Select **Client Activation** and click **Next**.<br>

   <figure><img src="/files/eVSRo1PEv5t8ds4qND52" alt="" width="375"><figcaption></figcaption></figure>
5. Afterwards, use **One-Click Configuration** or click **Show advanced configuration** and copy **URL** and **Token** manually.&#x20;

<figure><img src="/files/iQXgNMvHXLP2U6vZb0Wh" alt="" width="375"><figcaption></figcaption></figure>

### Manually Adding Instance

1. Open Defguard client
2. Click **Add Instance**.

<figure><img src="/files/GkRooEyd5lJNS53N3EWn" alt=""><figcaption></figcaption></figure>

3. Enter URL and Token, then click **Add Instance**. (If you don't have it, check out [this section](#obtaining-url-and-token))

<figure><img src="/files/J6zguuNJ3H8MWdaaa9tD" alt=""><figcaption></figcaption></figure>

### One-click Desktop Configuration

You can skip the whole process of entering token/url by clicking "One-click Desktop Configuration". Here is a video describing whole process:

{% embed url="<https://www.youtube.com/embed/q5-AXOPLgHc>" %}

### Connecting to Instance

1. Select your Instance from menu

<figure><img src="/files/AUd3Z2T73yTu1eoeMunP" alt=""><figcaption></figcaption></figure>

2. Select your location, allowed traffic then click **Connect.**

{% hint style="info" %}

* **Predefined traffic** will only route traffic specified by your administrator.
* **All traffic** will route everything through VPN tunnel.
  {% endhint %}

<figure><img src="/files/XR8YulEpl9xpOWblDxlD" alt=""><figcaption></figcaption></figure>

### Disconnecting from Instance

Click **Disconnect** next to the location you are currently connected to.

<figure><img src="/files/Savgj1i1W9WXCmKDdLpW" alt=""><figcaption></figcaption></figure>

### Updating Instance

If you want to update your instance manually:

1. Go to your Instance and click **Edit Instance**

<figure><img src="/files/ylYM4UuTAyNmfIIX7ADY" alt=""><figcaption></figcaption></figure>

{% hint style="warning" %}
Only tokens issued from that specific instance will work in that modal.
{% endhint %}

2. Enter Token provided by your administrator, or generate it [on your own](#obtaining-url-and-token). Then click **Update Instance**

<figure><img src="/files/9nMHEKK2LwV1kPhDWSNW" alt=""><figcaption></figcaption></figure>

Your Instance will update immediately.

### Why do instances need updates?

Defguard Desktop stores all information locally and doesn't communicate with Defguard outside the registration process. This means that information about instances are snapshots of the moment you registered them in the desktop client, and you might want to update that, for example when some new locations are added or removed.

{% hint style="success" %}
If you have an Enterprise License, all desktop clients and all instances are [synchronized automatically and in real-time.](/features/remote-user-enrollment/automatic-real-time-desktop-client-configuration.md)
{% endhint %}

### Removing Instance

1. Go to your Instance and click **Edit Instance**

<figure><img src="/files/ylYM4UuTAyNmfIIX7ADY" alt=""><figcaption></figcaption></figure>

2. Click **Remove Instance**

<figure><img src="/files/DCKPOpItvzcWJ3LMsdRL" alt=""><figcaption></figcaption></figure>

Your Instance will be removed immediately.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.defguard.net/using-defguard-for-end-users/desktop-client/instance-configuration.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.