Optional setup steps for node servers

After you install the node servers, you can optionally configure the node server to use TLS or an HTTP proxy server. 

Configure nodes to use TLS

Step 1: Configure a port with a TLS certificate

Note: We do not recommend using a self-signed certificate. 

On the Microsoft Windows server where you installed the node:

  1. Import a TLS private key into the Windows personal certificate store. See your Microsoft documentation for details on importing a TLS private key.
  2. If your certificate doesn’t have a trusted certificate authority, put the certificate in the Trusted Root Certification Authorities store. See your Microsoft documentation for details on how to place the certificate into the store.
  3. To configure a port with the TLS certificate, in PowerShell, enter dir cert:\LocalMachine\My.
  4. From the list of certificates in the local machine’s personal store, copy the thumbprint of the certificate you want to use.
  5. In PowerShell, enter netsh http add sslcert ipport=0.0.0.0:<node-port-number> certhash=<certificate thumbprint> appid= '{f6a3d635-e0fc-4dee-bfb2-2910e05ed5d5}'.
Step 2: Enable TLS

On the server where you installed the node:

  1. Double-click the Google Workspace Migrate management app.
  2. Right-click the app and select Stop Google Workspace Migrate service.
  3. Right-click the app and select Edit host settings.
  4. If required, in the Port field, enter the port number.
  5. Leave the Platform address field blank.
  6. Check the Enable SSL box.
  7. Click Save and closeand thenOK.
  8. If you changed the port number, update the firewall rule for the platform:
    1. Open Windows Firewall with Advanced Security.
    2. On the left, click Inbound Rules.
    3. Double-click the AB Node Platform rule.
    4. On the Protocols and Ports tab, update the local port to your modified port number.
    5. Click Applyand thenOK.
    6. Close Windows Firewall with Advanced Security.
  9. Right-click the Google Workspace Migrate management app and select Start Google Workspace Migrate service.

Configure nodes to use an HTTP proxy server

If you’re using a proxy server, on each of the servers where you installed a node:

  1. Double-click the Google Workspace Migrate app.
  2. On the taskbar, right-click Google Workspace Migrate "" and select Edit proxy settings.
  3. Check the Use a proxy server box.
  4. For Address, enter the proxy's address using the following format: http://proxy ip address:port.

    Example: http://192.0.2.1:8888.

  5. Click OK.
  6. On the taskbar, right-click Google Workspace Migrate "" and select Stop Google Workspace Migrate service.
  7. Right-click Google Workspace Migrate "" and select Start Google Workspace Migrate service.

Note: If you change your network environment and remove the proxy server, repeat steps 1 and 2 above, uncheck the Use a proxy server box, and click OK.

Next step

Set up the encryption key


Google, Google Workspace, and related marks and logos are trademarks of Google LLC. All other company and product names are trademarks of the companies with which they are associated.

Search
Clear search
Close search
Google apps
Main menu
Search Help Center
false
false