Thinstuff TSX Gateway Manual
Contents
1. 475 RAF allows you to specify the network resources computers that users can connect to through TS Gateway Policy name Policy Name Description IM Enable this policy OK Cancel 2 Tab User Groupe required To specify a user group to which you want this RAP to apply please click on Add Group a Resource Policy Ez General User Groups Computer Group Allowed Ports Specify the user groups whose members can connect to remote computers on the network through TSX Gateway User Groups Select Group Select this object type Group From this location HVWIN7UX64 Enter the object name to select examples Ba Advanced Cancel 2006 2013Thinstuff s r o http www thinstuff com k Object Types Locations Cancel Page 43 von 52 1 Thinstuff TSX Gateway 1 0 1 User Manual g Thinstuff 3 Tab Computer Groupe optional Specify the client computer IP address es range to which this RAP should apply Click Add Address and enter IP Address and Network of your terminal server Example Network 32 specifies one specific host a Resource Policy Fr ES General User Groups Computer Group Allowed Ports Client computer Ip 4ddress Network optional Add Address Remove IP Address hletwork IF Address Network Cancel Cance2. 5 7 1 File 1 Connect to La Connect to TSX Gateway Connect with T58 Gateway Host Port localhost 9090 Username Password Administrator TTT ae logon information Cancel To open 7SX Gateway Manager login with a local Windows Administrator account 2 Disconnect Log off from TSX Gateway Manager 3 Create self signed certificate All information you will find in chapter 5 2 1 Create a self signed certificate 2006 2013Thinstuff s r o http www thinstuff com Page 48 von 52 1 Thinstuff TSX Gateway 1 0 1 User Manual g Thinstuff 4 5 7 2 Import certificate All information you will find in chapter 5 2 2 Upload Certificate PEM or PFX Download certificate All information you will find in chapter 5 3 1 Start Server Part of TSX Gateway service incoming connections will be accepted according configured policies CAPs and RAPs Stop Server Part of TSX Gateway service all connections will be terminated Start accepting new connection Accept new incoming connection must be started if Stop accepting new connection was selected before Stop accepting new connection Refused only all new incoming connection existing connections will not be terminated unlike Stop Server Server Settings License for TSX Gateway basically accepts a unlimited number of connection You may limit the maximum number of concurrent connection in the Server Settings
3. B Thinstuff Thinstuff TSX Gateway User Manual Version 1 0 1 www thinstuff com 1 Thinstuff TSX Gateway 1 0 1 User Manual g Thinstuff Table of contents 1 IntroQUEUIORN en EEE 4 1 1 General description NENNEN 4 2 REGUIFCIICHNS un EENE 5 DZ SO een 5 2 1 1 Supported Operating systemS uszs2s22u0nnnnnnnnnnnnonn nn nnn nn nn nn nnnnn nun 5 2 e TEE 5 3 Software installation and maintenance zuuuuuunnunnunnunnunnunnunnannunn 6 CNR e Un e TE 6 BZ Wee cesar citetacasiaeanaroiie a ee 10 ESS DU on la sie O BEE 10 A LICENS O a ee ee 12 GEBE EE 12 21 2 Tal TT Le ee 12 4 3 Is COISU le assc5sccessxpsacosat een ee 12 ALICE EE 14 45 PACU VON E 15 e ON ICING EE 15 Adee ONNE AUYA O EE 15 Fs Fe OME AVA BEEN 19 4 6 Licensing on virtual machnes uk 23 4 6 1 Change of the Primary Network Interface 23 47 ReactiVvatO VE 25 ATI usrursinispn a 26 5 1 Technical EXN Neasa neh 26 5 1 1 How To Do Checklist uk 27 5 2 Certificates Server Side een 27 5 2 1 Create a self signed Certificate ccsccsesecsecseseeencereuroneceentsueseceeneans 28 5 2 2 Upload Certificate PEM or DES 29 5 2 3 Create certificate in Microsoft Certification Autor 30 5 3 Certificates Client Side ccccccssssstsecsrsecerseceuseeeuseeuseeeessueesareeseeaears 30 5 3 1 Download Client Certificate AANEREN NNN 30 5 3 2 Install Downloaded Client Certificate ak 32 5 3 3 Configure remote session with TSX Gateway Setting cc
4. Company name Mr zb Title Max First name Mustermann Lastname Germany zl Country Telephone number Address data optional Add address data now All fields with are mandatory gt Sign Up 5 Now you have successfully created your Thinstuff Account and within a short time you will receive an email with your password 6 Now you can sign in your Thinstuff Account with your user name and password 2006 2013Thinstuff s r o http www thinstuff com Page 13 von 52 1 Thinstuff TSX Gateway 1 0 1 User Manual g Thinstuff 4 4 Licenses If you purchase as end customer directly in our web shop the license will be created and ready for activation as soon as payment succeeded As payment method we accept credit card Visa MasterCard PayPal or bank transfer for bank account detail please contact sales thinstuff com 2006 2013Thinstuff s r o http www thinstuff com Page 14 von 52 1 Thinstuff TSX Gateway 1 0 1 User Manual g Thinstuff 4 5 Activation 4 5 1 General The license for TSX Gateway is available for free in each purchased valid license of XP VS Server Professional or you purchase the license for TSX Gateway directly in our webshop 4 5 2 Online Activation 1 Start activation fig 1 Open the TSX Gateway License Manager on the your server machine and switch to tab License Activation and then click Start internet activation button bottom right E
5. Issued Licenses 6678447 BXKZMROKWSN2A2G96 2013 03 07 16 35 47 ed e Download License connections for ee gt Activate fig 2 Please select your text file which you have created previously based on the activation information Activate License To activate the license please either upload the hardware key file or copy and paste the hardware key contents of the system where you have installed our produ Activate from file _Browse_ lt fig 3 Now click on Activate license Activate License To activate the license please either upload the hardware key file or copy and paste the hardware key contents of the system where you have installed our produ Activate from file c folderthwkey pt Browse_ Activate from text gt _Activate License lt 5 Download activated license fig 1 Click now on the newly activated license below the item License file to download an re import license already activated The following license has successfully been activated To use it you have to re download and then re import it Product TSX Gateway 5 connections for 1 server Owner mona thinstuff com Issued 2013 03 07 16 35 47 656144 Activated yes Valid yes License file to download and re import e License 66784 license 66784 lic 2006 2013Thinstuff s r o http www thinstuff com Page 20 von 52 aly Thinstuff TSX Gateway 1 0 1 User Manual g Thinstuff fig 2 In the followi
6. MAC address for every new Guest OS In all of this cases the TSX Gateway license becomes invalid invalid hardware key To avoid this please make sure that the MAC address of the primary Windows network interface does not change on virtual machines In_case B you can fix your problem by recreating the initial order of the Windows network interfaces In case C can be avoided by assigning a static MAC address If you use a visualization platform e g VMWare HyperV Xen etc please assign a static MAC Address to your Virtual Guest Computers before you install TSX RemoteApp server 4 6 1 Change of the Primary Network Interface Please follow the steps below to change your network adapter 1 Go to Start and open Control Panel 2 Open in the preference window Network and Internet and click to Network and Sharing Center a u a 1 ID a gt Control Panel gt fo e Adjust your computer s settings OO e Kr Control Panel Network and Internet gt v 5 Search Control Pane A Control Panel Hom SH e ee WA Network and Sharing Center gt Review your computer s status AA y t k stati nd tasks Connect t network SJE ERES System and Security View network status and tasks Connect to a network View network computers and devices e Network and Internet Add a wireless device to the network CS ei View network status and task Hardware and Sound lt z Choose omegrou and sharin wd HomeGroup
7. Per default TSX Gateway will be installed in C Program Files Thinstuff TSX Gateway If you want to change install location select Browse A TSX Gateway 1 0 84 Setup ee ly Choose Install Location P S Thinstuff Choose the folder in which to install TSX Gateway 1 0 84 Setup will install TSX Gateway 1 0 84 in the following folder To install in a different folder dick Browse and select another folder Click Next to continue Destination Folder C Program Files THINSTUFF TSX Sateway Space required 20 0MB Space available 2 966 click Next 2006 2013Thinstuff s r o http www thinstuff com Page 7 von 52 aly Thinstuff TSX Gateway 1 0 1 User Manual g Thinstuff 5 TSX Gateway x x xx server certificate Enter now the Hostname The CN Certificate Name must match the DNS name that the client uses to connect to the TSX Gateway Server You have to use internal hostname NetBIOS only for testing purposes d TSX Gateway 1 0 84 Setup ale TSX Gateway 1 0 84 server certificate f Thinstuff Specify certificate hostname Please enter the hostname which is used for creation of the selfsigned TSX Gateway server certificate TSX Gateway Name This is the hostname which the rdp dient uses to connect to the TSX Gateway server Please use the INTERNAL hostname Netbios or FQDN ONLY for testing purposes For production usage you should use the EXTERNAL hostname Full Qualified Domain Name which
8. Programs Choose homegroup and sharing options Hardware and Sound User Accounts and Family s arat SE Safety gt Internet Options Add a device ZC Change your homepage Manage browser add ons Appearance and Bebe ebe a DEER elete browsing history and cookies I gt Uninstall a program Clock Language and Region Ease of Access 2006 2013Thinstuff s r o http www thinstuff com Page 23 von 52 1 Thinstuff TSX Gateway 1 0 1 User Manual g Thinstuff 3 There you will find Change Adapter Settings next to the point that you open el ee SS Se e Network and Internet Network and Sharing Center KA Search Control Pane Ra g t a Control Panel Home e e e e S gt View your basic network information and set up connections e See full map HVWIN 7PROX86SPO thinstuff com Internet Thi r View your active networks Connec t or disconnec t Be thinstuff com Access type Internet Work network Connections Local Area Connection Change your networking settings We Set up a new connection or network lt access point 4 By default the menu bar is hidden but it can be shown by Organize gt Layout Menu bar Cut Copy Paste Ne Wino Redo Select all Preview pane Fil p Folder and search options Delete Rename Remove properties Properties Close 5 Now please open the Advanced Settings click to Advanced gt Advanced Settings Help Operator Assisted Di
9. Server Settings Max concurrent Connections 30 Current Certificate Information Hostname Hu IN Let Version 2 Serial Number 0 Issuer iC 47 5T Lower Austria L Moeding O Thinstuff 5 r 0 CWN HY Ww IN FUSE femaildddress selfsigned laocalhost com Algorithm used shal WithRs4eEnecryption Activation date 20130522 12 47 27 Expire date 2023 HE Le H BSH Fa Ba 2 And here you see the information regarding used certificate Messaging 2006 2013Thinstuff s r o http www thinstuff com Page 49 von 52 aly Thinstuff TSX Gateway 1 0 1 User Manual g Thinstuff Here you may configure gt Enable system messaging message will pop up in configured time period You may also configure Start Time End Time for this message gt Enable logon message such as legal notice etc gt Only allow connections from Remote Desktop clients that support Remote Desktop messaging LA Messaging Settings 4 Enable system messaging Create a message to display to users who are logged on to a remote computer such as a system maintenance notification Welcome bo Thinstuff Network Start Time 11 06 2013 e 16 19 4 Preview End Time 11 06 2013 17 19 Enable logon message Select a message such a legal notice to display to users each time they log on to a remote computer Browse Preview F Only allow connections from Remote Desktop clients that support Remote Desktop messaging 5 7 3 Help A
10. Service Pack 3 e Windows Vista e Windows 7 Starter Home Basic Home Premium Professional Service Pack 1 Windows 8 Standard Professional Enterprise Windows Server 2003 also SBS Windows Server 2008 Windows Server 2008 R2 also SBS Windows Server 2012 2 2 Client The client computer has to run Remote Desktop Protocol RDP 6 0 or better We also offer our free own RDP client TSX Connection which is part of the TSX RemoteApp installation package You can use it independently from TS RemoteApp and it offers additional functions compared to Microsoft s RDP Client Further information you will find in our FAQ Site TSX Connection http www thinstuff com products xpvs server http www thinstuff com fag index php solution_id 1088 2006 2013Thinstuff s r o http www thinstuff com Page 5 von 52 1 Thinstuff TSX Gateway 1 0 1 User Manual g Thinstuff 3 Software installation and maintenance 3 1 Installing 1 Download the TSX Gateway installer from here http www thinstuff com releases ThinstuffTsxGateway latest exe and run the installation 2 Welcome Dialogue Select Next 4 TSX Gateway 1 0 84 Setup Fer x Welcome to the TSX Gateway 1 0 64 Setup Wizard This wizard will guide you through the installation of TSX Gateway 1 0 54 It is recommended that you dose all other applications before starting Setup This will make it possible to update relevant system files without having to re
11. User Manual g Thinstuff 5 5 Monitoring This section describes how to observe all active connections by using the live monitoring of TSX Gateway 5 5 1 Show Monitoring To open TSX Gateway Manager login with a local Windows Administrator account and switch to the tab Monitoring You can now observe the following connection details ID User Name Client IP Address Connected On Duration Idle Time BEN Tah Caley gt Le ee File Server Help TSX Gateway Management Console Server Overview CAPs RAFs Monitoring Tss Gateway Connections Target Computer Connection Target Computer 192 165 50 135 Target Port 3309 Sent to server 35 KE Sent to client 569 KB 5 5 2 Disconnect a Session User To disconnect a session please do the following Right click highlighted session and choose from context menu 2006 2013Thinstuff s r o http www thinstuff com Page 46 von 52 aly Thinstuff TSX Gateway 1 0 1 User Manual g Thinstuff Ei TSX Gateway ola File Serwer Help TSX Gateway Management Console a Server Overview Cars Raps Monitoring Tss Gateway Connections HVWINTUAG dermal 192 165 50 111 Di LL Jun 18 08 21 disconnect this session disconnect this user 1 Select the session user which you want do disconnect 2 After that right click this session and choose disconnect this session respectively disconnect this user 5 6 Serve
12. 5 E Thinstuff TSX Gateway Licensing m File View Options Help in TSX Gateway License Manager T5 Gateway Licenses License Activation Licenses requiring re jactivation ID Type State Activation Expiration Grace Expiration Allowed Connections Filename Activation information hardwareKeyVersion 3 hardwarekey 0 65327299 hardwarekey 1 617499620 hardwarekey 2 0 hardwarekey 3 4021692990 v Start internet activation Copy hardware key to clipboard 0 licensed connections No error 2 Log into your Thinstuff account Further information concerning registration you will find in chapter 4 3 Registration fig 1 Your web browser will be opened and you have to login with your user name and your password https www thinstuff com licensing 2006 2013Thinstuff s r o http www thinstuff com Page 15 von 52 d Thinstuff TSX Gateway 1 0 1 User Manual g Thinstuff Login or create an account A Thinstuff license management account is necessary for getting evaluation licenses for Thinstuff prodcuts and for managing bought licenses Are you already registered in the license management Existing User I already have a Thinstuff license management account office company com E Mail Address DT Password I forgot my password please send me a new one 3a If you have bought a license directly in our web shop fig 1 You have to select activate next to your license Af
13. Resource Authorization Policies RAPs RAPs allow you to specify the internal network resources computers that remote users can connect through TXS Gateway Server Example You might specify that external employees members of group External may only connect to terminal server 1 while internal employees group Internal might access terminal server 2 Open the TSX Manager Console and login with a local Windows Administrator Account Switch to tab RAPS D TSX Gateway ee File Server Help TSX Gateway Management Console en e ee es Enabled Per default one policy is already preconfigured to allow all users to access the all internal network all ports allowed 5 4 2 1 Create a RAP In tab RAPs you will find bottom right possibility to Create New Policy fai TSX Gateway kabai File Server Help TSX Gateway Management Console Status enabled Description Allow all Users Allowed Resources Allowed Port any 2006 2013Thinstuff s r o http www thinstuff com Page 42 von 52 Thinstuff TSX Gateway 1 0 1 User Manual Resource Policy is divided into 4 sections General User Groups Computer Groups Allowed Ports 1 Tab General f 8 Thinstuff Specify a policy name and a description of your new policy You can also enable disable the policy ja Resource Policy ee General User Groups Computer Group Allowed Ports
14. to tab CAPs D TSX Gateway Src File Server Help TSX Gateway Management Console Server Overview CAPs RAFs Monitoring Order Palicy Applied in Order List User Groups Client Computer Groups Status L Allaw Users BUILTIM Users BUILTIN Administrators Mot applicable Ho computer specified Enabled Per default one policy is already preconfigured to allow all users to access the internal network 5 4 1 1 Create a CAP In tab CAPs you will find bottom right possibility to Create New Policy 2006 2013Thinstuff s r o http www thinstuff com Page 38 von 52 Thinstuff TSX Gateway 1 0 1 User Manual f 8 Thinstuff Server Overview RAPS Monitoring Order Applied in Orde User Groups nt Computer Gro Status L Allow Users BUILTIN Users Not applicable Enabled Please select a cap to see details r Create New Policy Connection Authorization Policies are divided into 3 sections e General e Requirements Device redirection Ech Connection Policy Ama General Requirements Device Redirection SSS 1 Tab Generar Specify the name of the new policy in our example Home Office Users You can also enable disable the policy Za Connection Policy 2 ee General Requirements Device Redirection 4 Terminal Services connection authorization policy TS CAP allows you to specify the users who c
15. SX Gateway license is only available for free with Professional XP VS Terminal Server license with your invoice you will get license code for XPVS Server and for TSX Gateway But of course you can purchase the software at any time directly in our webshop There are principally 2 different types of TSX Gateway licenses a Demo licenses which are only valid for 14 days after installation b Full licenses TSX Gateway licenses except demo licenses are one off payment and will never expire By activating a TSX Gateway license is bounded to the hardware of the machine and tied to a Thinstuff Account You can only activate those licenses which are available in your Thinstuff Account If you have to switch the license to a different hardware you have to send an email to support thinstuff com with license ID and reason and we will release the license for reactivation for free 4 2 Trial period In the first 14 days after installation TSX Gateway can be used freely for non commercial purpose test When trial period has expired the demo license is loosing its validity That means as soon as 14 days trial period has expired it is not longer possible to open a remote connection to your Host Computer using the Gateway service To continue the usage of TSX Gateway you need to import a valid purchased TSX Gateway license or install XP VS Server Professional 4 3 Registration As registered user you have several p
16. Single session hosts wy Thinstuff Private Network 2013 Thinstuff s r o Network resources can be any RDP enabled hosts such as Multi session hosts e Thinstuff XP VS Server e Microsoft Remote Desktop Session Host RDSH Terminal Server Single Session Hosts e Thinstuff Remote Desktop Virtualization Host RDVH e Thinstuff Remote Desktop Host RDH e Microsoft Remote Desktop Virtualization Host RDVH TSX Gateway is not only a proxy but has to be seen as Terminal Service VPN e Secure Connection RDP over HTTPS Proxy using SSL TLS encryption and standard HTTPs port 443 e User Authentication TSX Gateway allows to set up different rules for authorized remote users to connect remotely e Access to authorized network resources Only specified users can use TSX Gateway to access the specified resources in the network 2006 2013Thinstuff s r o http www thinstuff com Page 4 von 52 aly Thinstuff TSX Gateway 1 0 1 User Manual g Thinstuff TSX Gateway combined with RDP file signing and server authentication secures internet access from mobile workers 2 Requirements TSX Gateway is only available with XP VS Server Professional Further information regarding our terminal server software XP VS Terminal Server you will find on our website 2 1 Server 2 1 1 Supported operating systems TSX Gateway supports all x86 32 Bit and x64 64 Bit versions of the following server side operating systems e Windows XP
17. Thinstuff s r o http www thinstuff com Page 9 von 52 aly Thinstuff TSX Gateway 1 0 1 User Manual g Thinstuff 3 2 Update You can update TSX Gateway any time TSX Gateway The latest software is always available on our KE 3 TSX Gateway is a highly secure RDP VPN website Remote Desktop Protocol RDP over HTTP u Press green Download button other eech on d the internet and remote desktop hosts in your local network Free fully featured 14 day version DOWNLOAD Learn more BUY NOW from webshop Or you can download the latest version here http www thinstuff com releases ThinstufflsxGateway exe To update the software you only need to run the installation and restart the computer During this process the old version will be un installed automatically Your settings and licenses will be kept during that procedure 3 3 Un Installing If you want to uninstall TSX Gateway do the following 1 Click on the Start Button open the Control Panel and click Programs i Total Commander Ga Mozilla Firefox Administrator OS E v Control Panel X Search Cd Panel EE Control Panel i Getting Started gt P Ver Adjust tere setti ust your computer s settings i u ee y p g View by Category Pictures BE Calculator System and Security A User Accounts and Family Safety Music e Review your computer s status SN Add or remove user accounts e gt i
18. aling Remote Access Preferences Bridge Connections Advanced Settings 6 To change the priority of a network adapter please select the favoured adapter from and move with the arrow key on the right Subsequent click OK 2006 2013Thinstuff s r o http www thinstuff com Page 24 von 52 aly Thinstuff TSX Gateway 1 0 1 User Manual g Thinstuff SE ii ana Settings ae Sg Adapters and Bindings Provider Order Adapters and Bindings Provider Order Connections are listed in the order in which they are accessed by Connections are listed in the order in which they are accessed by network services network services Connections Connections Local Area Connection 2 HEJ Remote Access connections Bindings for Local Area Connection 2 t wi Je File and Printer Sharing for Microsoft Networks wl A Intemet Protocol Version 4 TCP IPv4 VI A Intemet Protocol Version 4 TCP IPv4 wi A Intemet Protocol Version 6 TCP IPv6 3 wl A Intemet Protocol Version 6 TCP IP v6 o Client for Microsoft Networks vs Client for Microsoft Networks a Intemet Protocol Version 4 TCP IPv4 M Intemet Protocol Version 4 TCP IPv4 Wl A Intemet Protocol Version 6 TCP IPv6 wl A Intemet Protocol Version 6 TCP IPv6 4 7 Reactivation TSX Gateway license is bounded by activation to the hardware of the respective computer If the hardware has changed significantly on your system replacement of
19. an connect to this TSX Gateway server Policy type Connection authorization Policy name Home Office User Policy Order 2 UF atic this policy Cancel 2006 2013Thinstuff s r o http www thinstuff com Page 39 von 52 1 Thinstuff TSX Gateway 1 0 1 User Manual g Thinstuff 2 Tab Requirements e Authentication Method In the first part please enable Password for Windows Authentication Smart Card authentication is currently not Supported e User group membership required Add those users or user groups who are allowed to use internal resources To specify a user group which members can connect to the TSX Gateway please click on Add Group e Client computer IP addresses Specify the client s computer IP address range in order to allow restrict the access to TSX Gateway for specific IP address S Connection Policy 2 es General Requirements Device Redirection Specify the requirements that user must meet to connect to the TSX Gateway server Supported Windows authenticatin methodes 1 Password Smart Card If you select both methodes either can be used to connect User group membership required Client computer Ip Address Range optional u Remove Summery of TS Cap settings If the User is member of the following groups amp and the client computer IP address matches the following IP addresses ranges any Ok Cancel In fourth part you will find the su
20. anual g Thinstuff Certificate Store Certificate stores are system areas where certificates are kept Windows can automatically select a certificate store or you can specify a location for the certificate Automatically select the certificate store based on the type of certificate Place all certificates in the following store Certificate store Learn more about certificate stores Select Trusted Root Certification Authorities and confirm with Ok Trusted Publishers hone U l intructed Certificates m Completing the Certificate Import Wizard The certificate will be imported after you dick Finish You have specified the following settings Certificate Store Selected Automatically determined by t Content Certificate 2006 2013Thinstuff s r o http www thinstuff com Page 34 von 52 aly Thinstuff TSX Gateway 1 0 1 User Manual g Thinstuff 5 Confirm the upcoming security dialogue with Yes You are about to install a certificate from a certification authority CA claiming to represent HVWIN7UX64 Windows cannot validate that the certificate is actually from HVWIN7UX64 You should confirm its origin by contacting HVWIN7UX64 The following number will assist you in this process Thumbprint shal 44B4F3B2 A20DD658 20FFEA48 9A731E7D E3210C43 Warning If you install this root certificate Windows will automatically trust any ce
21. ate a new certificate the TSX Gateway has to shut down and start again Do you want to restart the TSX Gateway server in order to process 2006 2013Thinstuff s r o http www thinstuff com Page 28 von 52 1 Thinstuff TSX Gateway 1 0 1 User Manual g Thinstuff Click OK to confirm 4 A new self signed certificate is now installed It can be found in the installation path of the TSX Gateway Server D TsiTsGWAdmin A new self signed certificate is installed 5 2 2 Upload Certificate PEM or PFX 1 To open TSX Gateway Manager login with a local Windows Administrator account ba Connect to TSX Gateway Connect with TS Gateway Host Port localhost 9090 Username Password Administrator TTT We logon information 2 Click File in the menu bar and choose Import certificate in drop down menu list Za TSX Gateway File Server Help Connect to Disconnect Create selfsigned certificate Import certificate D Download certificate Stop Server Start accpeting new connections Stop accepting new connections Exit Ctrl X 3 To install upload a new certificate please click on Import certificate and approve the upcoming notification by clicking on OK S TsxTsGWAdmin mie To install a new certificate the TSX Gateway has to shut down and start again A Do you want to restart the TSX Gateway server in order to process Cancel 2006 2013Thinstuff s r o htt
22. boot your computer Click Next to continue u S Thinstuff Leet Now select Install to proceed d TSX Gateway 1 0 84 Setup b E el aly TSA Gateway 1 0 84 choose bootstrapper action a Thinstuff Choose bootstrapper action Choose the bootstrapper action Install installs components Uninstall removes components Install Uninstall ea LS Leg 2006 2013Thinstuff s r o http www thinstuff com Page 6 von 52 aly Thinstuff TSX Gateway 1 0 1 User Manual g Thinstuff 3 To proceed with installation you have to agree to the End user License Agreement and the press Next E TSX Gateway 1 0 84 Setup es al P l License Agreement NV Thinstuff ber review the license terms before installing TSX Gateway Press Page Down to see the rest of the agreement fhinstuff END USER LICENSE AGREEMENT Before using this Thinstuff PRODUCT carefully read the following terms and conditions Installation copying or use of the Thinstuff software by you indicates your acceptance of this agreement This is a legal and binding agreement between you and Thinstuff s r o you do not accept this agreement no license is granted to you for use of the software and you must limmediately return the unused software and all I LI If you accept the terms of the agreement dick I Agree to continue You must accept the agreement to install TSX Gateway 1 0 34 tee JC es _ 4 Choose Install Location
23. bout Thinstuff TSX Gateway S About Thinstuff TSX Gateway TSX Gateway version 1 0 83 0 Copyright 2013 Thinstuff s r 2006 2013Thinstuff s r o http www thinstuff com Page 50 von 52 aly Thinstuff TSX Gateway 1 0 1 User Manual g Thinstuff 6 Support 6 1 General Support Thinstuff Support is available to provide support and will answer your questions about our products sales our company and non technical questions All general inquiries should be addressed to sales thinstuff com 6 2 Technical Support For any technical questions about our products please contact our technical customer support Address your support request to support thinstuff com and please enter the following information e TSX Gateway or XP VS License ID e Thinstuff Customer ID or your email address e installed Thinstuff components 6 3 Online Resources FAQ Page On this page you will find answers to the most frequently asked questions http www thinstuff com fa Product Side http www thinstuff com products tsx gatewa Download Trial Version http www thinstuff com releases ThinstuffTsxGateway latest exe Changelog http www thinstuff com releases tsx gateway changelog txt 2006 2013Thinstuff s r o http www thinstuff com Page 51 von 52 1 Thinstuff TSX Gateway 1 0 1 User Manual g Thinstuff 2006 2013Thinstuff s r o http www thinstuff com Page 52 von 52
24. ces that are hosted behind the firewall Computers with RDP enabled 1 The user initiates the connection to the private network using an RDP file 2 An SSL tunnel is established between the client and the TSX Gateway server using an SSL certificate Before the connection is established the server must authenticate and authorize the user according to the Connection Authorization Policy CAPs configured in TSX Gateway 3 When authentication authorization has succeeded the client requests a connection to the terminal server internal resource 4 The server verifies the name of the terminal server against the name configured in the Resource Authorization Policies RAPs configured in TSX Gateway 5 If the name matches the TSX Gateway server authorizes the request and establishes the secure tunnel through TSX Gateway over HTTPs between the client and the terminal server 2006 2013Thinstuff s r o http www thinstuff com Page 26 von 52 Thinstuff TSX Gateway 1 0 1 User Manual f D Thinstuff From this point any packets the client sends will be forwarded from the TSX Gateway to the resource and vice versa now TSX Gateway is acting as proxy To establish the remote session the Windows Authentication is required enter credentials After successful authentication the encrypted RDP packets are sent from the client to the Gateway server over port 443 the server forwards these packages to terminal server using por
25. cscecseeeeees 36 2006 2013Thinstuff s r o http www thinstuff com Page 2 von 52 1 Thinstuff TSX Gateway 1 0 1 User Manual g Thinstuff 5 4 Authorization PONCIES u a a er 38 5 4 1 Connection Authorization Policies CAPS 2u220220202000n0 nn anno nn nn 22 38 5 4 1 1 Create TEE 38 5 4 2 Resource Authorization Policies RAPS u22u220220002002nonnnnn ann ann nn 42 5 4 2 1 Create a EEN 42 3 3 MORILORING D 46 S0 L SNOW len een G nee nen 46 5 5 2 Disconnect a Session USES ccececcevececeeseueveveeeeeeveveeseeeeevavaeeneneenas 46 5 6 Server OV Gh VOW ee 47 3 7 MENU os ee ne Tee Eee 48 Boks EE 48 BT EE 49 Dig sO g E gt ee ee 50 O SUPPONI EE 51 On General SUPPO nee nenne 51 6 2 TEChNleal SUDDOM EE 51 6 3 Online e lge EE 51 2006 2013Thinstuff s r o http www thinstuff com Page 3 von 52 1 Thinstuff TSX Gateway 1 0 1 User Manual g Thinstuff 1 Introduction 1 1 General description TSX Gateway is a highly secure RDP VPN solution which encapsulates the standard Remote Desktop Protocol RDP over HTTPs to establish a secure and encrypted connection between remote users in the internet and your local network resources on which your productive applications are running Using TSX Gateway you can connect to internal resources that are hosted behind the firewall GH Active Directory optional RDP Terminal Servers Multi session hosts ena 1 U Computers with RDP enabled
26. dware and Sound ow to install a program Programs e Default Programs d Change default settings for media or devices User Accounts and Family Safety Make a file type always open in a specific program Appearance and Personalization Set your default programs A Desktop Gadgets lock r Clock Language and Region sy Add gadgets to the desktop Get more gadgets online Ease of Access Uninstall a gadget Restore desktop gadgets installed with Windows 3 Select TSX Gateway right mouse click select Uninstall Uninstall or change a program To uninstall a program select it from the list and then click Uninstall Change or Repair Organize Uninstall Change Repair Bes 2 17 Name Publisher Microsoft Corporation stuff s r o Change Repair 4 To start the un installing process click Yes in the following dialogue box A Are you sure you want to uninstall Thinstuff TSA Gateway KKK Inthe future do not show me this dialog box 5 Software will be un installed corresponding to process bar Gateway 1 0 62 0 Please wait while Windows configures Thinstutt TSA Gateway XKX Un Installation completed no reboot required 2006 2013Thinstuff s r o http www thinstuff com Page 11 von 52 1 Thinstuff TSX Gateway 1 0 1 User Manual g Thinstuff 4 Licensing 4 1 General TSX Gateway is always licensed per server no matter if that server is a physical computer or a virtual machine T
27. e in order to create a self signed certificate 1 To open TSX Gateway Manager login with a local Windows Administrator account Ea Connect to TSX Gateway Connect with TN Gateway Host Port localhost 3090 Username Password Administrator TETTTTITITTITT heave logon information Connect Cancel You have the possibility to save the credentials not recommended 2 Click Pie in the menu bar and choose Create self signed certificate in drop down menu list a TSX Gateway File Server Help Connect to Disconnect Create selfsigned certificate Import certificate Download certificate Stop Server Start accpeting new connection Stop accepting new connections Exit Ctrl X 3 Enter now the Hostname The CN Certificate Name must match the DNS name that the client uses to connect to the TSX Gateway Server You have to use internal hostname NetBIOS only for testing purposes Bi Dialog ESCH Create a self signed certificiate Hostname This is the hostname which the rdp client uses to connect to the TSX Gateway server Please use the INTERNAL hostname Netbios or FQDN ONLY For testing purposes For production usage you should use the EXTERNAL hostname Full Qualified Domain Name which is known on the internet because usually the Tax Gateway server is installed behind a firewall inside your private network or DMZ For further information please consult the user manual To cre
28. ed Root Certificate Store You can obtain a certificate for the client computer by following steps below http www thinstuff com fag index php 2006 2013Thinstuff s r o http www thinstuff com Page 30 von 52 1 Thinstuff TSX Gateway 1 0 1 User Manual g Thinstuff 5 3 1 Download Client Certificate 1 To open 7SX Gateway Manager login with an Administrator account E Connect to TSX Gateway Connect with TN Gateway Host Port localhost 9090 Username Password Administrator PTTITTITTCiTi itt heave logon information Connect Cancel 2 Click File in the menu bar and choose Download certificate in drop down menu list a TSX Gateway File Server Help Connect ta Ctrl C Disconnect Create selfsigned certificate Import certificate Download certificate Start Server Stap Server Start accpeting new cannectians Stop accepting new connections Exit Ctrl X 3 Please select the path where TSX Gateway should save the client certificate The certificate will be saved in the crt format 4 Now import this certificate into your client s certificate store 5 3 2_Install Downloaded Client Certificate 2006 2013Thinstuff s r o http www thinstuff com Page 31 von 52 Thinstuff TSX Gateway 1 0 1 User Manual d S Thinstuff 5 3 2 Install Downloaded Client Certificate follow these steps To import a client certificate by using the Certificate Import Wizard please Certif
29. etermined by your system security policy f server authentication fails Connect from anywhere Gateway when am working remotely seine lt a Configure settings to connect through Remote Desktop 2006 2013Thinstuff s r o http www thinstuff com Page 36 von 52 1 Thinstuff TSX Gateway 1 0 1 User Manual g Thinstuff 4 Enter the server settings of your TSX Gateway Server and click on OK un RD Gateway Server Setting Remote Desktop at Connection Connection settings Automatically detect RD Gateway server settings a Use these RD Gateway server settings Server name NAME GATEWAY SERVER Logon method Allow me to select later Y Bypass RD Gateway server for local addresses Do not use an RD Gateway server Logon settings User name None specified You will be asked for credentials when you connect to this RD Gateway server E Use my RD Gateway credentials for the remote computer What is an RD Gateway server and how do know if need one Cancel Please note Enter now the Hostname of your server running 7SX Gateway The entered name must match the DNS name you have entered when creating the certificate server side You may use internal hostname NetBIOS but only for testing purposes Additional options Bypass TD Gateway server for local addresses can be checked if you force authentication only for external incoming connections No
30. eway 1 0 1 User Manual g Thinstuff 6 Thinstuff License Tool and Online Shop Logged in as mona thinstuff com Customer ID 17925 um 8 Thinstuff Overview Downloads Admin tools Reseller Control Center Edit account data Address book Logout Activation successful You have successfully activated licenses Please download and import them into License Administration Utility Activated licenses ore licenses gt Convert another shop coupon gt Return to the license overview nc Hardware key data sent by License Administration Utility hardwareKeyVersion 3 har 7299 5060763 4462164 Tool and Online Shop Thinstuff Li Copyright C 2006 2007 Thinstuff s r o www thinstuff com Terms amp Conditions IT Import the license 1858454 2642112 1895620 2485589 8793202 1481895620 fig 1 In the following dialogue please select Open with TSX Gateway License Manager and the license will be imported automatically Opening license 66784 glic You have chosen to open E license_66784 glic which is a Thinstuff TSX Gateway License File 6 7 KB from https www thinstuff com What should Firefox do with this file Thinstuff TSX Gateway License Manager def e Save File Do this automatically for files like this from now on Activation completed A Cancel fig 1 You will get the confirmation that your license is imported
31. icate 1 _ 1 Double click your client certificate and click on Install Certificate General Details Certification Path OP Certificate Information This CA Root certificate is not trusted To enable trust install this certificate in the Trusted Root Certification Authorities store Issued to NAME TSX Gateway Server Issued by NAME TSX Gateway Server Valid from 22 05 2013 to 20 05 2023 Install Certificate f Issue Learn more about certificates o 2 The Certificate Import Wizard will now open Please click on Next 2006 2013Thinstuff s r o http www thinstuff com Page 32 von 52 Thinstuff TSX Gateway 1 0 1 User Manual Certificate Import Wizard Welcome to the Certificate Import Wizard This wizard helps you copy certificates certificate trust lists and certificate revocation lists from your disk to a certificate store a confirmation of your identity and contains information used to protect data or to establish secure network certificates are kept To continue dick Next A certificate which is issued by a certification authority is connections A certificate store is the system area where j a Thinstuff 3 Select Place all certificates in the following store and click Browse 2006 2013Thinstuff s r o http www thinstuff com Page 33 von 52 aly Thinstuff TSX Gateway 1 0 1 User M
32. is file De this automatically for files like this from now on gt x 8 Activation completed f Thinstuff Cancel fig 1 As shown in the window the license appears now as valid in your TSX Gateway License Manager 2006 2013Thinstuff s r o http www thinstuff com Thinstuff TSX Gateway Licensing CEJ E TSX Gateway License Manager aw TSX Gateway Licenses License Activation ID Type State Activation Expiration Grace Expiration Allowed Connections Filename 66784 Full Valid Successful 5 C ProgramData Thinstuff TSX Gatewa A Thinstuff TSX Gateway Licensing i License license_66784 glic successfully imported qi Im p 5 licensed connections No error Page 22 von 52 1 Thinstuff TSX Gateway 1 0 1 User Manual g Thinstuff 4 6 Licensing on virtual machines On virtual machines the TSX Gateway license is always bound to the MAC address of the primary Windows network interface In following cases this can lead to problems with TSX Gateway licensing A If you on e g VMWARE try to move or copy a virtual machine and select create new identifier a new MAC address is created B Also changing the order of the network interfaces in Windows if e g another network interface is added e g a VPN connection Causes the MAC address of the primary Windows network interface to change C Some visualization solutions e g HyperV Xen etc will create a new
33. is known on the internet because usually the TSX Gateway server is installed behind a firewall inside your private network or DMZ For further information please consult the user manual Thinstuff erg mt eg Click Instalf to start the installation 6 TSX Gateway is installing corresponding to progress bar W TSX Gateway 1 0 84 Setup olal Installing ily lt Thinstuff Hesse wait while TSX Gateway 1 0 84is being installed Execute msiexec ji ThinstuffTsxGateway 1 0 84 EN x654 msi gb norestart INSTALLDIR Extract ThinstuffTsxGateway 1 0 84 EN x64 msi 100 Execute msiexec A ThinstuffTsxGateway 1 0 34 EN x54 msi gb norestart INS Thinstuff TSA Gateway 1 0 84 0 al Please wait while Windows configures Thinstuff TSX Gateway 1 0 64 0 Gathering required information 4 Thinstuff 5 7 0 lt Back Next gt Cancel 2006 2013Thinstuff s r o http www thinstuff com Page 8 von 52 d Thinstuff TSX Gateway 1 0 1 User Manual g Thinstuff 7 The installation is finished Now you have to reboot the computer to use TSX Gateway ba TSX Gateway 1 0 84 Setup FS Completing the ISX Gateway 1 0 54 Selup Wizard TSX Gateway 1 0 84 has been installed on your computer Click Finish to dose this wizard ke a e E Se nm lc Ei a e Now TSX Gateway is successfully installed reboot is not required 2006 2013
34. l 4 Tab Allowed Ports By default Terminal Services clients connect to network resources remotely through TCP port 3389 Specify whether to use TCP port 3389 or another port Zi Resource Policy General User Groups Computer Group Allowed Ports T pe EE de E ee DES By default Terminal Services clients connect to network resources remotely through TCP port 3389 Specify whether to use TCP pork 3389 or another port Ci Allow connections only throught TCP port 3389 Allow connections through these ports To specify more than one port type the number of each port separated by a d J t semicolon For example 3389 3399 Allow connections through any port Cancel 2006 2013Thinstuff s r o http www thinstuff com Page 44 von 52 aly Thinstuff TSX Gateway 1 0 1 User Manual g Thinstuff After you have specified the policy move back to tab General and click OK to enable the new policy If you want to delete or edit any of the existing policies not matter if CAP or RAP just do a right click and select delete or edit in context menu Name Allow Users suppar team User Groups Allowed Resources Port Status BUILTIN Users Access allowed ta all Ary Part Enabled BUILTIN Repeat i 152 Gi 135732 mm Sine eclit i delete 2006 2013Thinstuff s r o http www thinstuff com Page 45 von 52 1 Thinstuff TSX Gateway 1 0 1
35. lt Back up your computer Pei Set up parental controls for any user J Sticky Notes Computer i Find and fix problems 3 d Appearance and Personalization x Shipping Tool i Network and Internet Change the theme y View network status and tasks Change desktop background ke Choose homegroup and sharing options F pe Adjust screen resolution a f Paint Rey Devices and Printers Hardware and Sound Clock Language and Region 4 4 View devices and printers Change keyboards or other input da XPS Viewer Default Programs Add a device L methods Be Ease of Access Wigs Programs r d Windows Fax and Scan Help and Support r Let Windows suggest settings AU Uninstall a program me Optimize visual display A Remote Desktop Connection ur Thinstuff TSX USB Server N Administrator 2 All Programs Search programs and files 2 Shut down d 3 http www thinstuff com products tsx gateway 2006 2013Thinstuff s r o http www thinstuff com Page 10 von 52 aly Thinstuff TSX Gateway 1 0 1 User Manual g Thinstuff 2 Now click on Uninstall a program in the menu Programs and Features wi Programs Control Panel Programs v 23 Search Control Panel Control Panel Home Programs and Features k Ch Uninstall a program Turn Windows features on or off System and Security View installed updates Network and Internet Run programs made for previous versions of Windows How to install Har
36. mmary of configured Requirements 2006 2013Thinstuff s r o http www thinstuff com Page 40 von 52 1 Thinstuff TSX Gateway 1 0 1 User Manual g Thinstuff 3 Tab Device Redirection Enable or disable client device redirection for computers that connect to TSX Gateway You can choose between the following settings e Enable device redirection for all client devices e Disable device redirection for all client devices except for smart card e Disable device redirection for specific client device types select separately Drives Clipboard Printers Serial Ports and Supported Plug and Play devices amp Connection Policy me General Requirements Device Redirection Specify wether to enable or disable client device redirection for computers that connect to TSX Gateway TSX Gateway device redirection should only be used For trused remote clients running remote desktop Enable device redirection for all client devices Disable device redirection For all client devices except For smart card Disable device redirection for the Following client device types Drivers Clipboard Printers Serial ports Supported Plug and Play devices Cancel As soon as configuration for the policy is done move back to tab General and click on OK to enable the new policy 2006 2013Thinstuff s r o http www thinstuff com Page 41 von 52 1 Thinstuff TSX Gateway 1 0 1 User Manual g Thinstuff 5 4 2
37. motherboard any component or of the entire computer in the TSX Gateway License Manager on your machine will be displayed the error message Invalid hardware key Thinstuff TSX Gateway Licensing File View Options Help TSX Gateway License Manager TSX Gateway Licenses License Activation ID Type Skate wckivatior Expiration Grace Expiration alowed ne al S Full Invalid hardware key Successful For virtual machines this case occurs when the MAC address of the primary Windows network interfaces has changed In such a case please contact your trader or send us an email support thinstuff com IMPORTANT Please enter in the email with your customer number license number and the reason for the reactivation After approval of reactivation by Thinstuff your license can be reactivated see 4 5 Activation 2006 2013Thinstuff s r o http www thinstuff com Page 25 von 52 1 Thinstuff TSX Gateway 1 0 1 User Manual g Thinstuff 5 Usage 5 1 Technical Explanation TSX Gateway is not only a proxy but has to be seen as Terminal Server VPN Remote users are using the internet connection to establish an encrypted secure connection to the network Once established the users are able to perform a remote session to the terminal server using RDP through HTTPs encrypted version of HTTP uses port 443 based on a certificate Using TSX Gateway you can connect to internal resour
38. ng dialogue please select Save to save the license file Opening license 66784 glic You have chosen to open E license_66784 glic which is a Thinstuff TSX Gateway License File 6 7 KB from https www thinstuff com What should Firefox do with this file 0 Open with Thinstuff TSX Gateway License Manager def Do this automatically for files like this from now on o II Gei 6 Copy the license file license _XXXXX glic on that computer where you have installed TSX Gateway 7 Import the license fig 1 Open the TSX Gateway License Manager select in menu bar File and in drop down menu Import license from file File View View Options Help Import license from file Import license from file lt Install the product evaluatian license Exit fig 2 Now select your license file glic and click on Open E Select Thinstuff license file to import Gu lk gt Administrator Downloads rganize v New folder Date modified icense_66784 glic_ 07 03 2013 18 01 amp Local Disk C tu Network File name license 66784 glic Thinstuff License Files ai 2006 2013Thinstuff s r o http www thinstuff com Page 21 von 52 Thinstuff TSX Gateway 1 0 1 User Manual PE You have chosen to open M license_66784 glic which isa Thinstuff TSX Gateway License File 6 7 KB from https www thinstuff com What should Firefox do with th
39. ossibilities in your Thinstuff Account e to manage and activate licenses e to create once a 14 days trial license https www thinstuff com licensing 2006 2013Thinstuff s r o http www thinstuff com Page 12 von 52 d Thinstuff TSX Gateway 1 0 1 User Manual g Thinstuff To register please proceed with the following 1 en your web browser and enter the following address 3 Select whether you want to register as company or as private person As a precaution you may change this selection in the next step You will be redirected automatically to the next registration step Thinstuff License Tool and Online Shop Sign Up for a Thinstuff License Management Account Please complete this form to gain access to trial licenses downloads product information and many other resources An email with your password will be sent to your email address Start by selecting your account type Account type All fields with are mandatory Return to the login page 4 To create a valid Thinstuff Account please fill the mandatory fields marked with and confirm with Sign Up Sign Up for a Thinstuff License Management Account Please complete this form to gain access to trial licenses downloads product information and many other resources An email with your password will be sent to your email address Company sl ig Account type ofice company com gt Email address Company Ap
40. p www thinstuff com Page 29 von 52 aly Thinstuff TSX Gateway 1 0 1 User Manual g Thinstuff 4 Now select your existing certificate by navigating to the enclosing folder in which the certificate has been saved The certificate has to be in the Dem or pfx format 5 Upload your certificate by clicking on Open 6 If you use certificate in pfx format the pfx file password is required Upload PFA Certificate Enter password of the certificate in DES Format Certificate password 7 Approve the notification dialogue by clicking on OK The Certificate has now been uploaded and installed 5 2 3 Create certificate in Microsoft Certification Authority You will find in our FAQ a pdf file how to create a certificate install and import into TSX Gateway This procedure presupposes a technical know how and according environment Please understand that this information is not part of the TSX Gateway User Manual 5 3 Certificates Client Side This chapter describes how to install the certificate chapter 5 2 1 Create a self signed certificate or 5 2 3 Create certificate in Microsoft Certification Authority on the client computer This certificate has to be installed on the client computer because it contains the public key for encrypting decrypting To establish the SSL session with the server the client needs to validate the server s certificate Therefore the clients must have the CA certificate installed in its Trust
41. r Overview To open TSX Gateway Manager login with a local Windows Administrator account and switch to the tab Server Overview In this overview you will see 1 Connection Status 2 Configuration Status Gi TSx Gateway Sse File Server Help ae TSX Gateway Management Console T5 Gateway Server Status Connection Status Total Number of connections 1 30 Number of User connected to this server 1 Number of resources that users are connecte to 1 Configuration Status Connection authorization Policies 1 view connection auhtorization policies Resource authorization Policies 1 View resource auhtorization policies Connected 2006 2013Thinstuff s r o http www thinstuff com Page 47 von 52 1 Thinstuff TSX Gateway 1 0 1 User Manual g Thinstuff 1 Connection Status In this overview you will get following information Total Number of connections if you click button Monitor active connections you will switch to tab Monitoring Number of Users connected to this server Number of resources that users are connected to 2 Configuration Status Number of policies Connection authorization Policies if you click View connection authorization policies you will switch to tab CAPs Resource authorization Policies if you click View connection authorization policies you will switch to tab RAPS 5 7 Menu Bar
42. rtificate issued by this CA Installing a certificate with an unconfirmed thumbprint is a security risk If you click Yes you acknowledge this risk Do you want to install this certificate Ci The import was successful Now you can start your remote session see chapter 5 3 3 Configure remote session with TSX Gateway setting 2006 2013Thinstuff s r o http www thinstuff com Page 35 von 52 aly Thinstuff TSX Gateway 1 0 1 User Manual g Thinstuff 5 3 3 Configure remote session with TSX Gateway setting 1 Open your Remote Desktop Connection mstsc exe 2 Enter the name of the remote computer in tab General Remote Desktop Connection Display Local Resources Programs Experience Advance Logon settings Enter the name of the remote computer A Computer IP ADDRESS or DNS NAME Username USER NAME You will be asked for credentials when you connect Allow me to save credentials Connection settings Save the current connection settings to an RDP file or open a saved connection 3 Navigate to tab Advanced and click on Settings under the Connect from anywhere section A Remote Desktop Connection General Display Local Resources Programs Experience Advanced Server authentication Server authentication verifies that you are connecting to the intended remote computer The strength of the verification required to connect is d
43. successfully Thinstuff TSX Gateway Licensing License license_66 784 qlic successfully imparted 2006 2013Thinstuff s r o http www thinstuff com Page 17 von 52 Thinstuff TSX Gateway 1 0 1 User Manual 8 Thinstuff And now the license is shown up as Full Valid in TSX Gateway License Manager tab TSX Gateway Licenses E Thinstuff TSX Gateway Licensing File View Options Help es TS Gateway Licenses License Activation ID Type State Activation Expiration Grace Expiration Allowed Connections 166784 Full Valid Successful WA TSX Gateway License Manager 2 Filename 5 C ProgramData Thinstuff TSX Gatewal 5 licensed connections j No error 2006 2013Thinstuff s r o http www thinstuff com Page 18 von 52 1 Thinstuff TSX Gateway 1 0 1 User Manual g Thinstuff 4 5 3 Offline Activation You also have the possibility of an offline activation by copying the activation information from your computer without internet access to one with internet access 1 On your computer without internet access where you have installed TSX Gateway fig 1 Open the TSX Gateway License Manager and click on tab License Activation and bottom right Copy hardware Key to clipboard button E Thinstuff TSX Gateway Licensing File View Options Help WR TSX Gateway License Manager T5 Gateway Licenses License Activation Licenses requiring re jactivation ID Type Sta
44. t 3389 5 1 1 How To Do Checklist 5 2 Install TSX Gateway 3 Software installation and maintenance Use demo license or activate purchased license ID 4 5 Activation Open TSX Gateway Management Console login as Administrator oe YS Create Import Download certificate server side 5 2 Certificates Server Side Install certificate client side 5 3_Certificates Client Side Configure CAPs and RAPs 5 4 Authorization Policies Configure RDP File for remote connection A Certificates Server Side To establish a secure VPN connection between the TSX Gateway and the client private key and public key are required to encrypt the connection These keys are included in certificates You can obtain a certificate in several ways 5 2 1 Create self signed certificate Either when you install TSX Gateway or Create and download certificate in the TSX Gateway Management Console 5 2 2 Upload an existing certificate in the PEM format 5 2 3 Create Certificate in Microsoft Certification Authority PFX format Purchase certificate from one of the known certification authority CA Please note For testing and evaluation purposes we recommended that you use a Self signed certificate 2006 2013Thinstuff s r o http www thinstuff com Page 27 von 52 aly Thinstuff TSX Gateway 1 0 1 User Manual g Thinstuff 5 2 1 Create a self signed certificate This chapter describes how to use the TSX Gateway Management Consol
45. t recommended for testing Automatically detect RD Gateway server settings This option requires according environment not part of this manual Use my RD Gateway credentials for the remote computer Only enable this option if user logon credentials are the same to login to the Terminal Server 5 Now click on Connect to start the remote session 2006 2013Thinstuff s r o http www thinstuff com Page 37 von 52 1 Thinstuff TSX Gateway 1 0 1 User Manual g Thinstuff 5 4 Authorization Policies This chapter describes how TSX Gateway uses Authorization Policies to control remote user access and remote connections to internal network resources beyond the gateway CAPs and RAPs allow to granularly grant network access based on needing for the clients and at the same time securing the network TSX Gateway communicates with Active Directory it pulls its users or user groups from the central location Without this ability you have to set up local users or user groups to configure the Authorization Policies 5 4 1 Connection Authorization Policies CAPs CAPs allow the administrator to specify connection criteria that must been met to connect to the TSX Gateway server If the first criteria is not met TSX Gateway will evaluate the second policy etc until one TSX CAP fits If none of these settings is met the remote access is denied Open the 7SX Management Console and login with Administrator Account Switch
46. te Activation Expiration Grace Expiration Allowed Connections Filename Activation information hardwareKeyVersion 3 hardwarekey 0 65327299 hardwarekey 1 817499620 hardwarekey 2 0 hardwarekey 3 4021692990 v4 Start internet activation Copy hardware key to clipboard 5 licensed connections No error 2 Paste the text into a text editor e g Notepad save it locally e g xxx hwkey txt and copy this text file to your computer with internet access 3 On your computer with internet access fig 1 Log into your Thinstuff Account Further information concerning registration you will find in chapter 4 3 Registration Your web browser will be opened and you have to login with your user name and your password Login or create an account A Thinstuff license management account is necessary for getting evaluation licenses for Thinstuff prodcuts and for managing bought licenses Are you already registered in the license management Existing User I already have a Thinstuff license management account office company com E Mail Address DT Password I forgot my password please send me a new one 2006 2013Thinstuff s r o http www thinstuff com Page 19 von 52 aly Thinstuff TSX Gateway 1 0 1 User Manual g Thinstuff 4 If you have bought a license directly in our websho fig 1 Switch into your account to Overview and click on Activate next to your favoured license
47. ter that click on Activate download selected license Activate or Download existing licenses This list shows a list of licenses which can be activated Already checked licenses are those from the License Administration Utility where you launched this website License 66784 47BXKZMRQKWSN2A2G96 d ivate Activate Download selected licenses Now the hardware information of your server will be transferred encrypted to the web server which creates your license file Proceed here 4 Download activated license 3b Optional You want to buy now fig 1 bottom left you will find the second possibility to get a TSX Gateway license click the link Buy Thinstuff products OR Buy Thinstuff products And you will be redirected automatically to Thinstuff product page for TSX Gateway Here you can select your favourite license and proceed with payment As soon as payment succeeded the license will be available in your Thinstuff account ready for activation Chapter 4 5 2 Online Activation 4 Download activated license fig 1 As mentioned above 3a the hardware information is sent to the webserver and the license file will be created As soon as this process is done a link for downloading the license will is offered Click now on this link to download the newly activated license below the item Activated licenses 2006 2013Thinstuff s r o http www thinstuff com Page 16 von 52 aly Thinstuff TSX Gat
Download Pdf Manuals
Related Search