TSG certificate binding is broken even after assigning the certificate using the TS Gateway manager snap-in

Source: Microsoft Support

RAPID PUBLISHING ARTICLES PROVIDE INFORMATION DIRECTLY FROM WITHIN THE MICROSOFT SUPPORT ORGANIZATION. THE INFORMATION CONTAINED HEREIN IS CREATED IN RESPONSE TO EMERGING OR UNIQUE TOPICS, OR IS INTENDED SUPPLEMENT OTHER KNOWLEDGE BASE INFORMATION.

Consider the following scenario:

In TS Gateway manager, you attempt to assign a SSL certificate to a TS Gateway, it is initially accepted but when the console is refreshed a message is displayed saying:

"TSGateway is not fully configured as a TS gateway server. To access the settings required to complete TS Gateway configuration, click the link provided in each configuration task”.

The configuration status shows "A server certificate in not yet installed or selected".

This issue occurs  if the SSL certificate binding at HTTPS port 443 is set to a particular IP address. There is a TS Gateway Windows Server 2008 SP1 bug which searches for certificates mapped to “All unassigned” address.

To work around this issue, change the SSL certificate binding at HTTPS port 443 to “All unassigned”.

To do this, follow these steps:

1.            On the Internet Information services (IIS) manager, click IIS server name.

2.            Click Sites, and then click “Default web site”.

3.            Right-click “Default web site” and then click “Edit Bindings”.

4.            Click “HTTPS bindings”, and then click “Edit”.

5.            Under IP address: click “All Unassigned”.

6.            Click OK.

7.            Open the TS Gateway manager, click the TSG server name.

8.           The Gateway manager snap-in will display a message that the gateway is not fully configured and a server certificate is not yet installed or selected

9.            Right-click and select “Properties”

10.          Chose the “SSL certificate” tab

11.          Click “Browse certificate” and then chose the certificate you want to work, then click “Install”.

12.          Apply the changes and then click Refresh on the TS Gateway manager

13.          The certificate will be accepted.

MICROSOFT AND/OR ITS SUPPLIERS MAKE NO REPRESENTATIONS OR WARRANTIES ABOUT THE SUITABILITY, RELIABILITY OR ACCURACY OF THE INFORMATION CONTAINED IN THE DOCUMENTS AND RELATED GRAPHICS PUBLISHED ON THIS WEBSITE (THE “MATERIALS”) FOR ANY PURPOSE. THE MATERIALS MAY INCLUDE TECHNICAL INACCURACIES OR TYPOGRAPHICAL ERRORS AND MAY BE REVISED AT ANY TIME WITHOUT NOTICE.

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, MICROSOFT AND/OR ITS SUPPLIERS DISCLAIM AND EXCLUDE ALL REPRESENTATIONS, WARRANTIES, AND CONDITIONS WHETHER EXPRESS, IMPLIED OR STATUTORY, INCLUDING BUT NOT LIMITED TO REPRESENTATIONS, WARRANTIES, OR CONDITIONS OF TITLE, NON INFRINGEMENT, SATISFACTORY CONDITION OR QUALITY, MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE, WITH RESPECT TO THE MATERIALS.