TSG certificate binding is broken even after assigning the certificate using the TS Gateway manager snap-in

Article translations Article translations
Close Close
Article ID: 959120 - View products that this article applies to.
Expand all | Collapse all
Source: Microsoft Support

RAPID PUBLISHING

RAPID PUBLISHING ARTICLES PROVIDE INFORMATION DIRECTLY FROM WITHIN THE MICROSOFT SUPPORT ORGANIZATION. THE INFORMATION CONTAINED HEREIN IS CREATED IN RESPONSE TO EMERGING OR UNIQUE TOPICS, OR IS INTENDED SUPPLEMENT OTHER KNOWLEDGE BASE INFORMATION.

Symptom



Consider the following scenario:

In TS Gateway manager, you attempt to assign a SSL certificate to a TS Gateway, it is initially accepted but when the console is refreshed a message is displayed saying:

"TSGateway is not fully configured as a TS gateway server. To access the settings required to complete TS Gateway configuration, click the link provided in each configuration task”.

The configuration status shows "A server certificate in not yet installed or selected".

Cause



This issue occurs  if the SSL certificate binding at HTTPS port 443 is set to a particular IP address. There is a TS Gateway Windows Server 2008 SP1 bug which searches for certificates mapped to “All unassigned” address.

Resolution



To work around this issue, change the SSL certificate binding at HTTPS port 443 to “All unassigned”.

To do this, follow these steps:

1.            On the Internet Information services (IIS) manager, click IIS server name.

2.            Click Sites, and then click “Default web site”.

3.            Right-click “Default web site” and then click “Edit Bindings”.

4.            Click “HTTPS bindings”, and then click “Edit”.

5.            Under IP address: click “All Unassigned”.

6.            Click OK.

7.            Open the TS Gateway manager, click the TSG server name.

8.           The Gateway manager snap-in will display a message that the gateway is not fully configured and a server certificate is not yet installed or selected

9.            Right-click and select “Properties

10.          Chose the “SSL certificate” tab

11.          Click “Browse certificate” and then chose the certificate you want to work, then click “Install”.

12.          Apply the changes and then click Refresh on the TS Gateway manager

13.          The certificate will be accepted.

DISCLAIMER

MICROSOFT AND/OR ITS SUPPLIERS MAKE NO REPRESENTATIONS OR WARRANTIES ABOUT THE SUITABILITY, RELIABILITY OR ACCURACY OF THE INFORMATION CONTAINED IN THE DOCUMENTS AND RELATED GRAPHICS PUBLISHED ON THIS WEBSITE (THE “MATERIALS”) FOR ANY PURPOSE. THE MATERIALS MAY INCLUDE TECHNICAL INACCURACIES OR TYPOGRAPHICAL ERRORS AND MAY BE REVISED AT ANY TIME WITHOUT NOTICE.

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, MICROSOFT AND/OR ITS SUPPLIERS DISCLAIM AND EXCLUDE ALL REPRESENTATIONS, WARRANTIES, AND CONDITIONS WHETHER EXPRESS, IMPLIED OR STATUTORY, INCLUDING BUT NOT LIMITED TO REPRESENTATIONS, WARRANTIES, OR CONDITIONS OF TITLE, NON INFRINGEMENT, SATISFACTORY CONDITION OR QUALITY, MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE, WITH RESPECT TO THE MATERIALS.

Properties

Article ID: 959120 - Last Review: October 21, 2008 - Revision: 1.0
APPLIES TO
  • Windows Server 2008 Standard
  • Windows Server 2008 Enterprise
  • Windows Server 2008 Datacenter
  • Windows Server 2008 for Itanium-Based Systems
Keywords: 
kbnomt kbrapidpub KB959120

Give Feedback

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com