TSG certificate binding is broken even after assigning the certificate using the TS Gateway manager snap-in

Source: Microsoft Support

RAPID PUBLISHING ARTICLES PROVIDE INFORMATION DIRECTLY FROM WITHIN THE MICROSOFT SUPPORT ORGANIZATION. THE INFORMATION CONTAINED HEREIN IS CREATED IN RESPONSE TO EMERGING OR UNIQUE TOPICS, OR IS INTENDED SUPPLEMENT OTHER KNOWLEDGE BASE INFORMATION.

Consider the following scenario:

In TS Gateway manager, you attempt to assign a SSL certificate to a TS Gateway, it is initially accepted but when the console is refreshed a message is displayed saying:

"TSGateway is not fully configured as a TS gateway server. To access the settings required to complete TS Gateway configuration, click the link provided in each configuration task�.

The configuration status shows "A server certificate in not yet installed or selected".

This issue occurs �if the SSL certificate binding at HTTPS port 443 is set to a particular IP address. There is a TS Gateway Windows Server 2008 SP1 bug which searches for certificates mapped to �All unassigned� address.

To work around this issue, change the SSL certificate binding at HTTPS port 443 to �All unassigned�.

To do this, follow these steps:

1.����������� On the Internet Information services (IIS) manager, click IIS server name.

2.����������� Click Sites, and then click �Default web site�.

3.����������� Right-click �Default web site� and then click �Edit Bindings�.

4.����������� Click �HTTPS bindings�, and then click �Edit�.

5.����������� Under IP address: click �All Unassigned�.

6.����������� Click OK.

7.����������� Open the TS Gateway manager, click the TSG server name.

8.���������� The Gateway manager snap-in will display a message that the gateway is not fully configured and a server certificate is not yet installed or selected

9.����������� Right-click and select �Properties�

10.��������� Chose the �SSL certificate� tab

11.��������� Click �Browse certificate� and then chose the certificate you want to work, then click �Install�.

12.��������� Apply the changes and then click Refresh on the TS Gateway manager

13.��������� The certificate will be accepted.