Microsoft KB Archive/930870

Knowledge Base

How to enable secure connections in Microsoft SoftGrid

Article ID: 930870

Article Last Modified on 7/9/2007

---

APPLIES TO

• Microsoft SoftGrid for Terminal Services
• Microsoft SoftGrid for Windows Desktops

---

SUMMARY

This article describes how to enable secure connections in Microsoft SoftGrid.

MORE INFORMATION

Use the following procedures to enable and to manage Transport Layer Security (TLS) for SoftGrid environments.

Configuring the SoftGrid Virtual Application Server

1. Obtain a Security Certificate (Cert.pem) and Security Key (Key.pem) from a certification authority (CA).
2. Copy the Cert.pem file and the Key.pem file to the following folder:

   %ProgramFiles%\Softricity\SoftGrid Server\conf\

3. Click Start, point to All Programs, point to Administrative Tools, and then click SoftGrid Management Console.
4. Expand SoftGrid Systems, expand <server_name>, expand Server Groups, and then click Default Server Group.
5. Right-click the SoftGrid Virtual Application Server. Then click Properties.
6. Click the Ports tab.
7. Click Add.
8. Specify the following settings:
   • Protocol: RTSPS
   • Security Certificate: cert.pem
   • Security Key: key.pem
   • Certificate Password and Re-enter Password: the password that authorizes access to the certificate and key files
   • You must restart the SoftGrid Virtual Application Server service before it will reflect the changes made: OK
9. Click OK
10. Repeat steps 5 through 9 for each SoftGrid Virtual Application Server.
11. Stop the start the SoftGrid Virtual Application Server service on each SoftGrid Virtual Application Server to which the changes in the previous steps were applied.
12. Edit each .osd file by using a text editor.

13. Replace rtsp with rtsps. Then replace 554 with 332.
    
    Note Refer to the following example text to make these changes.

    Example:
    
    HREF="rtsp://%SFT_SOFTGRIDSERVER%:554/DefaultApp.sft"
    
    HREF="rtsps://%SFT_SOFTGRIDSERVER%:332/DefaultApp.sft"

14. Save the .osd file. Then exit the text editor.

The next time that the SoftGrid Client performs an update against the Desktop Configuration Server, the updated .osd files will be delivered to the client.

Configuring the SoftGrid Client

The Desktop Configuration Server properties for the SoftGrid Client must be modified or created to enable secure updates.

Modifying an existing Desktop Configuration Server

1. Click Start, point to All Programs, point to Administrative Tools, and then click SoftGrid Management Console.
2. Click Desktop Configuration Servers.
3. Right-click Desktop Configuration Server. Then click Properties.
4. In the Type list, click Secure SoftGrid Virtual Application Server, and then click OK.

Creating a Desktop Configuration Server

1. Click Start, point to All Programs, point to Administrative Tools, and then click SoftGrid Client Management.
2. Right-click Desktop Configuration Servers. Then click New Server.
3. In the Display Name box, type a name that describes the SoftGrid environment.
4. In the Type list, click Secure SoftGrid Virtual Application Server, and then click Next.
5. In the Host Name box, type the host name, type the DNS name or the IP address of the SoftGrid Virtual Application Server, and then click Finish.

Miscellaneous information

These procedures assume the following default values:

• The Security Certificate that is obtained from the certification authority (CA): cert.pem
• The Security Key that is obtained from the CA: key.pem
• RTSPS port: 332

Note The Security Certificate that is obtained from the CA must be named cert.pem. Also, the Security Key that is obtained from the certification authority must be named key.pem. You cannot use a Security Certificate or a Security Key that is named something other than what is documented here.

Keywords: kbexpertiseinter kbhowto KB930870

---

Send feedback to Microsoft

© Microsoft Corporation. All rights reserved.