Optional setup steps for node servers

After you install the node servers, you can optionally set up the node server to use TLS or an HTTP proxy server. You can also change the temp file location.

Use TLS

Expand section  |  Collapse all & go to top

Step 1: Add the TLS certificate

Important: We do not recommend using a self-signed certificate. 

On the Microsoft Windows server where you installed the node:

1. Import a TLS private key into the Windows personal certificate store. See your Microsoft documentation for details on importing a TLS private key.
2. If your certificate doesn’t have a trusted certificate authority, put the certificate in the Trusted Root Certification Authorities store. See your Microsoft documentation for details on how to place the certificate into the store.
3. To navigate to the certificate, in PowerShell, enter the following command:

   dir cert:\LocalMachine\My

4. From the list of certificates in the local machine’s personal store, copy the thumbprint of the certificate you want to use.
5. To add a port with the TLS certificate, enter the following command:

   netsh http add sslcert ipport=0.0.0.0:<node-port-number> certhash=<certificate thumbprint> appid= '{f6a3d635-e0fc-4dee-bfb2-2910e05ed5d5}'

Step 2: Turn on TLS

On the server where you installed the node:

1. Double-click the Google Workspace Migrate management app.
2. Right-click the app and select Stop Google Workspace Migrate service.
3. Right-click the app and select Edit host settings.
4. If required, in the Port field, enter the port number.
5. Leave the Platform address field blank.
6. Check the Enable SSL box.
7. Click Save and closeOK.
8. If you changed the port number, update the firewall rule for the platform:
   1. Open Windows Firewall with Advanced Security.
   2. On the left, click Inbound Rules.
   3. Double-click the AB Node Platform rule.
   4. On the Protocols and Ports tab, update the local port to your modified port number.
   5. Click ApplyOK.
   6. Close Windows Firewall with Advanced Security.
9. Right-click the Google Workspace Migrate management app and select Start Google Workspace Migrate service.

Use an HTTP proxy server

If you're using a proxy server, on each of the servers where you installed a node:

1. Double-click the Google Workspace Migrate app.
2. On the taskbar, right-click Google Workspace Migrate and select Edit proxy settings.
3. Check Use a proxy server.
4. For Address, enter the proxy's address using the following format: http://proxy ip address:port.

   Example: http://192.0.2.1:8888.

5. Click OK.
6. On the taskbar, right-click Google Workspace Migrate and select Stop Google Workspace Migrate service.
7. Right-click Google Workspace Migrate and select Start Google Workspace Migrate service.

If you change your network environment and remove the proxy server, repeat steps 1 and 2 above, uncheck Use a proxy server, and click OK.

Set the temp file location

By default, the temp file (TMP) path is C:\Users[user name]\AppData\Local\Temp. If you want to change the location for the temp files, on the Microsoft Windows server where you installed the node, change the TMP and TEMP environment variables. For details, consult your Microsoft documentation.

Next step

Set up the encryption key

_{Google, Google Workspace, and related marks and logos are trademarks of Google LLC. All other company and product names are trademarks of the companies with which they are associated.}