Securely and automatically connecting virtual machines in a public cloud to corporate resource

A system comprising:

• a management server, which includes a cloud engine that sends a one-time password (OTP) and an identifier (ID) to a virtual machine (VM), the VM hosted by a cloud computing system coupled to the management server via a network, wherein the cloud engine starts an exchange with an authentication server that leads to a state in which both the cloud engine and the authentication server know the OTP and the ID;
• a virtual private network (VPN) server to receive credentials from the VM;
• and
• the authentication server coupled to the management server and the VPN server to establish a secure connection to the VM upon authenticating the credentials against the OTP and the ID.

A non-transitory computer readable storage medium including instructions that, when executed by a processing system, cause the processing system to perform a method comprising:

• starting, by a cloud engine of an enterprise computing system, an exchange with an authentication server that leads to a state in which both the cloud engine and the authentication server know a one-time password (OTP) and an identifier (ID) of a virtual machine (VM), the VM hosted by a cloud computing system coupled to the enterprise computing system via a network;
• sending, by the enterprise computing system, the OTP and the ID to the VM;
• and
• establishing, by the enterprise computing system, a secure connection to the VM upon authenticating credentials submitted by the VM against the OTP and the ID.