(Optional) Configure the node server to use TLS

After you install the node servers, you can optionally configure the node server to use TLS. 

Note: We do not recommend using a self-signed certificate. 

Step 1: Configure a port with a TLS certificate

On the Microsoft Windows server where you installed the node:

  1. Import a TLS private key into the Windows personal certificate store. See your Microsoft documentation for details on importing a TLS private key.
  2. If your certificate doesn’t have a trusted certificate authority, put the certificate in the Trusted Root Certification Authorities store. See your Microsoft documentation for details on how to place the certificate into the store.
  3. To configure a port with the TLS certificate, in PowerShell, enter dir cert:\LocalMachine\My.
  4. From the list of certificates in the local machine’s personal store, copy the thumbprint of the certificate you want to use.
  5. In PowerShell, enter netsh http add sslcert ipport=0.0.0.0:<node-port-number> certhash=<certificate thumbprint> appid= '{f6a3d635-e0fc-4dee-bfb2-2910e05ed5d5}'.

Step 2: Configure the node server to use TLS

On the server where you installed the node:

  1. Double-click the Google Workspace Migrate management app.
  2. Right-click the app and select Stop Google Workspace Migrate service.
  3. Right-click the app and select Edit host settings.
  4. If required, in the Port field, enter the port number.
  5. Leave the Platform address field blank.
  6. Check the Enable SSL box.
  7. Click Save and closeand thenOK.
  8. If you changed the port number, update the firewall rule for the platform:
    1. Open Windows Firewall with Advanced Security.
    2. On the left, click Inbound Rules.
    3. Double-click the AB Node Platform rule.
    4. On the Protocols and Ports tab, update the local port to your modified port number.
    5. Click Applyand thenOK.
    6. Close Windows Firewall with Advanced Security.
  9. Right-click the Google Workspace Migrate management app and select Start Google Workspace Migrate service.

Next step

Sign in and set up the platform 


Google, Google Workspace, and related marks and logos are trademarks of Google LLC. All other company and product names are trademarks of the companies with which they are associated.