Optional setup steps for node servers

After you install the node servers, you can optionally set up the node server to use TLS or an HTTP proxy server. You can also change the temp file location.

Use TLS

Expand section | Collapse all & go to top

Step 1: Add the TLS certificate

Important: We do not recommend using a self-signed certificate.

On the Microsoft Windows server where you installed the node:

Import a TLS private key into the Windows personal certificate store. See your Microsoft documentation for details on importing a TLS private key.
If your certificate doesn’t have a trusted certificate authority, put the certificate in the Trusted Root Certification Authorities store. See your Microsoft documentation for details on how to place the certificate into the store.
To navigate to the certificate, in PowerShell, enter the following command:
dir cert:\LocalMachine\My
From the list of certificates in the local machine’s personal store, copy the thumbprint of the certificate you want to use.
To add a port with the TLS certificate, enter the following command:
netsh http add sslcert ipport=0.0.0.0:< node-port-number > certhash=<certificate thumbprint> appid= '{f6a3d635-e0fc-4dee-bfb2-2910e05ed5d5}'

Step 2: Turn on TLS

On the server where you installed the node:

Double-click the Google Workspace Migrate managementapp.
Right-click the app and select Stop Google Workspace Migrate service.
Right-click the app and select Edit host settings.
If required, in the Portfield, enter the port number.
Leave the Platform addressfield blank.
Check the Enable SSLbox.
Click Save and close OK.
If you changed the port number, update the firewall rule for the platform:
1. Open Windows Firewall with Advanced Security.
2. On the left, click Inbound Rules.
3. Double-click the AB Node Platformrule.
4. On the Protocols and Portstab, update the local port to your modified port number.
5. Click Apply OK.
6. Close Windows Firewall with Advanced Security.
Right-click the Google Workspace Migrate managementapp and select Start Google Workspace Migrate service.

Use an HTTP proxy server

If you're using a proxy server, on each of the servers where you installed a node:

Double-click the Google Workspace Migrateapp.
On the taskbar, right-click Google Workspace Migrateand select Edit proxy settings.
Check Use a proxy server.
For Address, enter the proxy's address using the following format: http:// proxy ip address : port .
Example: http://192.0.2.1:8888.
Click OK.
On the taskbar, right-click Google Workspace Migrateand select Stop Google Workspace Migrate service.
Right-click Google Workspace Migrateand select Start Google Workspace Migrate service.

If you change your network environment and remove the proxy server, repeat steps 1 and 2 above, uncheck Use a proxy server, and click OK.

Set the temp file location

By default, the temp file (TMP) path is C:\Users[ user name ]\AppData\Local\Temp. If you want to change the location for the temp files, on the Microsoft Windows server where you installed the node, change the TMPand TEMPenvironment variables. For details, consult your Microsoft documentation.

Next step

Set up the encryption key

Google, Google Workspace, and related marks and logos are trademarks of Google LLC. All other company and product names are trademarks of the companies with which they are associated.