MobaXterm (Windows)
Connect from MobaXterm on Windows using HearthGate SSH settings and a local VNC endpoint.
Before you connect from Windows
This guide assumes HearthGate is already installed on the Mac, MobaXterm is installed on Windows, and you are ready to transfer a HearthGate connection bundle or private key to that Windows machine.
Common setup
Create a connection key
If you did not create a key during setup, open the Connection tab in HearthGate and generate a new one. Use an SSH key passphrase when possible, choose either a random passphrase or your own, and store it somewhere safe. Before generating the key, select the key scope that matches how this Windows machine will connect: Local network only is the safest option for same-network access, while Local + Internet or Internet only can be used when the connection must work from outside the LAN. If you already have a package, you can import it instead.
Save the Windows connection bundle
Choose the Windows command or script for the machine that will make the connection. You can copy the command, download the script, or save the private key separately. For the easiest Windows setup, use Save bundle so the private key, launcher, and supporting files are saved together.
Record the SSH passphrase and VNC password
If HearthGate generated a random SSH key passphrase, copy it now and keep it secure; HearthGate does not store it for later recovery. Then open Compatibility, make sure Legacy VNC mode is on, and copy or regenerate the VNC password. MobaXterm uses this VNC password after the SSH tunnel is already established.
Extract the bundle on Windows
Unzip the saved bundle anywhere convenient on the Windows machine. You can launch connect-windows.cmd directly, or open connect-windows.ps1 in PowerShell. Downloaded PowerShell scripts are often blocked by RemoteSigned policy and Mark-of-the-Web; if that happens, use the .cmd launcher or unblock the PowerShell script once from inside the extracted folder.
Unblock-File "connect-windows.ps1"Method 1: HearthGate Windows script
Start the SSH tunnel
Run the Windows launcher and enter the SSH key passphrase when prompted. This opens the SSH tunnel before MobaXterm connects to the VNC endpoint.
Use MobaXterm as the VNC viewer
Create a new MobaXterm VNC session. Set Remote hostname or IP address to localhost and Port to 5901, or use the local port shown by the HearthGate command if your package uses a different one. With VNC Lockdown enabled, keep the VNC side on localhost instead of entering the Mac host IP. Why VNC Lockdown?
localhost:5901Method 2: MobaXterm SSH gateway
Define the SSH gateway
In MobaXterm's SSH gateway configuration, enter the Mac's reachable host address, the Mac username, and the HearthGate SSH port. Enable Use SSH key and select the private key generated by HearthGate.
192.168.50.196:22023Connect the VNC session through the gateway
Create a MobaXterm VNC session with Remote hostname or IP address set to localhost and Port set to 5901. In Network settings, use the SSH gateway you defined in the previous step. When prompted, enter the VNC password from HearthGate Compatibility. Why VNC Lockdown?
localhost:5901