Parallels RAS 20 Administrator's Guide
ProductsSupportPartnersDocumentation
English
English
  • Parallels RAS 20 Administrator’s Guide
    • Introduction
      • Parallels RAS release history
      • About Parallels RAS
      • About this guide
      • What's new
      • Terms and abbreviations used in this guide
    • Installing Parallels RAS
      • System requirements
        • Hardware requirements
        • Software requirements
        • Microsoft license requirements
      • Install Parallels RAS
      • Log in and activate Parallels RAS
    • Getting Started with Parallels RAS
      • The Parallels RAS Console
      • Set up a basic Parallels RAS Farm
        • Add an RD Session Host
        • Publish applications
        • Invite users
        • Azure Virtual Desktop
        • Conclusion
    • Farm and Sites
      • Connecting to a Parallels RAS Farm
      • About Sites
      • Sites in the RAS Console
      • Adding a Site to the Farm
      • Replicating Site settings
      • Managing Licensing Site
      • Managing administrator accounts
        • Adding an administrator account
        • Administrator account permissions
        • Managing administrator accounts
        • Configure RAS Console idle sessions
        • Using instant messaging
        • Joining Customer Experience Program
    • RAS Connection Broker
      • Configuring RAS Connection Brokers
      • Secondary Connection Brokers
      • Managing Secondary Connection Brokers
      • Using computer management tools
    • RAS Secure Gateway
      • Overview
      • Adding a RAS Secure Gateway
      • Manually adding a RAS Secure Gateway
      • Checking the RAS Secure Gateway status
      • Configuring a RAS Secure Gateway
        • Enable or disable a Secure Gateway
        • Set public address
        • Set IP addresses for client connections
        • Site defaults (Secure Gateways)
        • Gateway mode and forwarding settings
        • Gateway network options
        • SSL/TLS encryption
          • SSL server configuration
        • Configure User Portal
          • Using Site defaults
          • Enable or disable User Portal
          • Client settings
          • Network load balancers access
        • Wyse ThinOS support
        • Secure Gateway security
        • Web request load balancing
      • Secure Gateway tunneling policies
      • Configure logging
      • Viewing Secure Gateway summary and metrics
      • Using computer management tools
    • RD Session Hosts
      • RD Session Host types
      • Add an RD Session Host
        • Installing the agent manually
      • Add a template-based RD Session Host
      • Manage RD Session Hosts
        • Manage host pools (RD Session Hosts)
          • Add host pools (RD Session Hosts)
          • Upgrading Agents (RD Session Hosts)
        • Manage templates (RD Session Hosts)
          • Creating an RD Session Host template
          • Assigning a template to a host pool (RD Session Host)
          • Managing RD Session Hosts based on a template
        • Manage hosts (RD Session Hosts)
          • Viewing RD Session Hosts
          • Check an RD Session Host Agent status
          • Change RD Session Host Site assignment
          • View and modify RD Session Host properties
            • Using default settings
            • General
            • Agent settings
            • User profile
            • Application Packages
            • Optimization
            • Desktop access
            • RDP printer
          • User profile
            • User Profile Disks
            • FSLogix
              • Configure managing existing profiles by Parallels RAS
              • FSLogix antivirus exclusions
          • Optimization
          • Drive redirection cache
          • Configure logging
        • Manage sessions (RD Session Host)
        • Using scheduler (RD Session Hosts)
      • Planning for high availability
      • Managing logons
      • Using computer management tools
      • Publishing from an RD Session Host
      • Viewing published resources
    • Virtual Desktop Infrastructure (VDI)
      • Supported providers
      • Add a provider
        • RAS Provider Agent information
          • RAS Provider Agent installation options
        • Add a hypervisor provider
        • Add a cloud Provider
          • Microsoft Azure
            • Introduction and prerequisites
            • Create Microsoft Entra ID application
            • Add Microsoft Azure as a Provider
            • Microsoft Azure and templates
          • Amazon Web Services
            • Introduction and prerequisites
            • Design considerations
            • Step 1. Creating an IAM user for programmatic access
            • Step 2. Adding AWS as a Provider
      • Manage VDI
        • Manage providers (VDI)
          • Installing RAS Provider Agent using the installer
          • Checking the RAS Provider Agent status
          • Using a Provider in multiple farms
        • Manage host pools (VDI)
          • Add host pools (VDI)
          • Delete host pools (VDI)
          • Add and delete host pool members
          • Using a wildcard to filter VMs
          • Managing hosts in pools
          • Upgrading Agents (VDI)
        • Manage templates (VDI)
          • Virtual desktop templates
          • Multi-provider template distribution
          • Creating a VM template
            • Step 1: Check and install the Agent
            • Step 2: Configure the template
              • Properties
              • Distribution
              • Advanced
              • Preparation
              • Optimization
              • License keys
              • Summary
              • Host naming
            • Parallels Test Template Wizard
            • Modifying template properties
          • How hosts are created from a template
          • Manually adding a host
          • Assigning a template to a host pool (VDI)
          • Template maintenance
          • Template status
          • Managing multi-provider template distribution
          • Managing template-based hosts
        • Manage hosts (VDI)
          • Persistent hosts
          • Configuring hosts to interact with RAS Provider Agent in a different subnet
        • Manage sessions (VDI)
        • Using scheduler (VDI)
      • Configure logging
      • Enabling high availability for VDI
      • Site defaults (VDI)
      • Using computer management tools
      • Viewing Provider summary
      • Remote PC pools in VDI
        • Adding a Provider
        • Adding Remote PCs to a Provider
        • Adding Remote PCs to a pool
        • Managing Remote PCs in a pool
        • Persistent Remote PCs
        • RAS Guest Agent installation options
    • Azure Virtual Desktop
      • Introduction
      • Prerequisites
      • Deploy Azure Virtual Desktop
        • Enable Azure Virtual Desktop and add a provider
        • Add workspaces
        • Add host pools (Azure Virtual Desktop)
      • Manage Azure Virtual Desktop
        • Manage providers (Azure Virtual Desktop)
        • Manage workspaces (Azure Virtual Desktop)
        • Manage host pools (Azure Virtual Desktop)
          • Upgrading Agents (Azure Virtual Desktop)
        • Manage templates (Azure Virtual Desktop)
          • Create a template
          • Manage existing templates
          • Assigning a template to a host pool (Azure Virtual Desktop)
        • Manage hosts (Azure Virtual Desktop)
        • Manage sessions (Azure Virtual Desktop)
        • Using scheduler (Azure Virtual Desktop)
      • Site defaults (Azure Virtual Desktop)
        • Site defaults for single-session hosts
        • Site defaults for multi-session hosts
      • Using Parallels Client with Azure Virtual Desktop
      • Verify the deployment
    • Remote PCs
      • Overview
      • Manage host pools (Remote PC)
      • Manage hosts (Remote PC)
        • Adding a Remote PC to a Farm
          • Admin-initiated Remote PC enrollment
          • Self-service Remote PC enrollment
        • Configuring a Remote PC
      • Viewing Remote PC summary
      • Using computer management tools
    • Publishing
      • Overview
      • Publishing a desktop
      • Publishing an application
      • Publishing local applications
      • Publishing an application with MSIX app attach
      • Publishing a web application
      • Publishing a network folder
      • Publishing a document
      • General management tasks
      • Manage published applications
      • Manage published desktops
      • Manage published documents
      • Manage folders
      • Site defaults (Publishing)
      • Using filtering rules
      • Configuring preferred routing
      • Understanding session prelaunch
      • Checking effective access
      • Specifying client settings
      • Quick keypad
    • Session Management
      • Overview
      • Session information
      • Monitoring settings
      • Managing sessions
      • The Resources tab
    • SSL Certificate Management
      • Generating a self-signed certificate
      • Generating a certificate signing request (CSR)
      • Let's Encrypt certificates
        • Requesting a Let's Encrypt Certificate
        • How Parallels RAS requests certificates from Let's Encrypt
      • Importing a certificate
      • Exporting a certificate
      • Assigning a certificate to Secure Gateways and HALBs
      • Auditing certificates
      • Permissions to manage certificates
      • Upgrading from an older RAS version
    • Connection and Authentication Settings
      • RAS Connection Broker connection settings
      • Remote session settings
      • Logon hours settings
      • Restricting access by Parallels Client type and build number
      • Multi-factor authentication
        • Adding an MFA provider
        • Using RADIUS
          • Connection
          • Attributes
          • Automation
          • Advanced
          • Configuring Azure MFA
          • Configuring Duo
        • Using TOTP
          • Configuring TOTP
          • Configuring Google Authenticator
          • Configuring Microsoft Authenticator
        • Configuring email OTP
        • Using Deepnet DualShield
          • Supported tokens
          • Configuring DualShield 5.6+ Authentication Platform
          • Configuring Parallels RAS to use the DualShield Authentication Platform
          • Connect to a RAS Farm
        • Using SafeNet
          • Configuring SafeNet
        • Configuring MFA rules
      • Allowing users to change domain password
      • Allowing users to discover RAS connections via email address
    • Load Balancing and HALB
      • Resource based & round robin load balancing
        • Configure CPU optimization
      • High availability load balancing (HALB)
        • Prerequisites
        • Deploying a Parallels HALB appliance
        • Adding a HALB virtual server
        • HALB Device status and version number
        • HALB maintenance
        • HALB connection and session information
        • Changing the HALB appliance password
    • RAS Multi-Tenant Architecture
      • Overview
      • Architecture description
        • Implementation overview
        • User connection flow
      • Deploying Tenant Broker and Tenants
        • Deploying Tenant Broker
        • Deploying a Tenant
          • Join a Tenant to Tenant Broker
          • Joining with a secret key
          • Verify join status
          • Configure network
          • Assign a public domain address
          • Configure an SSL certificate
          • Set up routing for incoming traffic
        • User authentication
        • Unjoining from Tenant Broker
      • Managing Tenants
        • Tenant configuration
        • Deleting a Tenant object
        • Opening a Tenant console
      • Shared Gateways
      • Third-party network load balancers
      • Web Client and Themes
      • Monitoring Tenants
      • Tenant Broker compatibility and updates
      • Upgrading from an older RAS version
      • Configuring notifications
      • Communication ports
    • SAML SSO Authentication
      • Introduction
      • System requirements
      • SAML basics
      • SAML configuration
        • Prerequisites
        • IdP side configuration
        • SP side configuration (RAS side)
        • Active Directory user account configuration
        • Configure certificate authority templates
          • Create an Enrollment Agent template
          • Create a smartcard logon certificate template
        • RAS Enrollment Server configuration
        • RAS Enrollment Server high availability
        • SAML integration examples and tips
          • User account attributes
          • Security tip
      • Parallels Client configuration
      • Parallels client policy configuration
      • Test the SAML SSO deployment
      • Error messages
    • Parallels Web Client and User Portal
      • Configure Web Client
      • Configure Themes
        • General settings
        • Access settings
        • Message settings
        • Web Client settings
          • URLs
          • Branding
          • Colors
          • Language bar
          • Messages
          • Input prompt
          • Gateway
          • Legal policies
        • Parallels Client for Windows settings
        • General Theme tasks
        • Delegating session management permissions
      • Open Parallels Web Client
      • Main menu options
      • Running remote applications and desktops
        • Using drag and drop functionality
        • Native clipboard experience
        • Other useful features
      • Auto login
      • Direct App access
      • Using the toolbar
        • Using the toolbar on desktop computers
        • Using the Toolbar on Mobile Devices
        • Using the remote clipboard
        • Hiding toolbar items
    • Universal Printing
      • Managing Universal Printing Settings
      • Universal Printing drivers
      • Font management
    • Universal Scanning
      • Managing Universal Scanning
      • Adding scanning applications
    • User Device Management and Client Policies
      • Inviting users to connect to Parallels RAS
      • Mass configuring user devices
      • Enabling Help Desk support for users
      • Enabling Help Desk support for custom administrators
      • Monitoring devices
        • Getting additional device information
      • Windows device groups
      • Managing Widows devices
        • Windows desktop replacement
      • Scheduling Windows devices & groups power cycles
      • Client policies
        • Add a new client policy
        • Configure session settings
          • Appearance
          • Connection
          • Display
          • Printing
          • Scanning
          • Audio
          • Keyboard
          • Local devices and resources
          • Experience
          • Network
          • Server authentication
          • Advanced settings
        • Configure client policy options
        • Configure control settings
        • Configure Gateway redirection
        • Client policy backward compatibility
        • Policy information in Parallels Client
      • Configuring remote file transfer
        • Configure file transfer to a server
        • Configure file transfer in User Portal
        • Configure file transfer for a client policy
    • Reporting
      • System requirements
      • Install Microsoft SQL Server
        • Install Microsoft SQL Server 2016 or earlier
        • Install Microsoft SQL Server 2017 or 2019
        • Install Microsoft SQL Server 2022
      • Install Parallels RAS Reporting
      • Running Parallels RAS Reports
      • GDPR compliance
    • Performance monitor
      • Overview
      • Install RAS Performance Monitor
      • Using Parallels RAS Performance Monitor
      • Configure RAS Performance Monitor security
      • Updating RAS Performance Monitor
    • Common Management Tasks
      • Recovery – add a root administrator
      • Host name resolution
      • Computer management tools
      • Site information
      • Site settings
      • Using MSIX application packages
      • Using template versions
      • Settings audit
      • Upgrading RAS agents
      • Licensing
      • Configure HTTP proxy settings
      • System event notifications
        • Configuring notification handlers
        • Configuring notification scripts
        • Configuring SMTP server connection for event notifications
      • RAS session variables
      • Resolving z-order issues
      • Maintenance and backup
        • Importing and exporting Farm settings from the command line
      • Problem reporting and troubleshooting
      • Logging
      • Suggest a feature
    • Parallels RAS Management Portal
      • Overview
      • Prerequisites
      • Installation
      • Log in to RAS Management Portal
      • Configure RAS Web Administration Service
      • RAS Management Portal user interface
    • Parallels RAS APIs
      • RAS PowerShell API
      • RAS REST API
        • Installation
        • Permissions
        • Getting started
        • Logging in and sending requests
        • More information
      • RAS Web Client API and Parallels Client URL scheme
    • Appendix
      • Microsoft license requirements in Parallels RAS
      • Port reference
        • Parallels Client
        • Web browsers
        • HALB
        • RAS Secure Gateway
        • RAS Connection Broker
        • RAS Console
        • SSRS
        • RAS Reporting
        • RAS Web Administration Service (REST/Management Portal)
        • RAS PowerShell
        • RAS Provider Agent
        • RAS Enrollment Server
        • RAS RD Session Host Agent
        • RAS Guest Agent
        • RAS Remote PC Agent
        • Tenant Broker
        • Active Directory and Domain Services ports
        • Azure Virtual Desktop
      • RAS performance counters
Powered by GitBook

© 2025 Parallels International GmbH. All rights reserved.

On this page
  • Prerequisites
  • Enabling the Application Packages feature
  • Creating an MSIX image
  • Adding an MSIX application package to Parallels RAS
  • Adding a package to a host
  • Adding a package to VDI pool
  • Adding a package to an AVD pool
  • Adding a package to Group Defaults
  • Adding a package to Site Defaults
  • Working with version tags
  • Working with certificates
  • Managing MSIX application packages
  • Package properties
  • Package statuses

Was this helpful?

Export as PDF
  1. Parallels RAS 20 Administrator’s Guide
  2. Common Management Tasks

Using MSIX application packages

PreviousSite settingsNextUsing template versions

Was this helpful?

Parallels RAS 19 provides a new and modern application delivery method - Application Packages, which is based on MSIX app attach technology. MSIX app attach is a Microsoft’s application layering solution that allows you to dynamically attach applications (containerized MSIX packages) to a user session. Separating the application from the operating system makes it easier to get more control by providing the right application for the right user. Additional third party solutions such as appCURE may be used for application moderation with Parallels RAS.

Prerequisites

  • , , or .

  • MSIX app attach requires hosts running Windows Server 2022, Windows 11, Windows 10 version 2004 or later.

  • A network share where the MSIX images will be stored. Storage requirements and recommendations are highlighted here: .

  • All hosts (computer accounts) must have read permissions on the network share where the MSIX images are stored.

Note: In Parallels RAS 19, MSIX app attach applications can be deployed and managed directly from the Parallels RAS console only when using Windows Server 2022.

Enabling the Application Packages feature

To start working with MSIX application packages, you need to enable the Application Packages feature.

To enable the Application Packages feature:

  1. Navigate to Farm > Site > Settings and select the Application packages tab.

  2. Select the Enable Application Packages feature option.

Next, you need to add the package to Parallels RAS.

Creating an MSIX image

To create an MSIX package from any desktop installer such as MSI, EXE, ClickOnce, or App-V you can use the MSIX Packaging tool .

Adding an MSIX application package to Parallels RAS

To add an MSIX application package to Parallels RAS:

  1. Navigate to Farm > Site > Application Packages.

  2. Click Tasks > Add (or click the [+] icon). The Add from MSIX Image wizard opens.

  3. In the MSIX Image path field, specify the path to your image or click the Browse button to select it in File Explorer. The file must be located on a network share. You can add packages from VHD, VHDX, and CIM images. All hosts (computer accounts) must have read permissions on the network share where the MSIX images are stored.

  4. In the Package drop-down list select the package that you want to add.

  5. In the Display Name field specify the name that will be used for this package in Parallels RAS. After that, the rest of the fields will be populated automatically.

  6. Click Finish.

Next, you need to add the package to a host. After being added, a packaged application behaves the same way as a regular application as if it was installed on a host.

Adding a package to a host

To add a package to a host:

  1. Make sure that the package is added to Parallels RAS as described above.

  2. Go to Farm > Site > RD Session Hosts > RD Session Hosts.

  3. Double-click the host that you want to install the package to.

  4. In the properties dialog, on the Application Packages tab, click Tasks > Add (or click the [+] icon).

  5. In the first column to the left, select the packages that you want to install on the host.

  6. Click OK.

The selected packages will be added to the host.

Adding a package to VDI pool

To add a package to a VDI pool:

  1. Make sure that the package is added to Parallels RAS as described above.

  2. Go to Farm > Site > VDI > Pools.

  3. Double-click the pool that you want to install the package to.

  4. In the properties, on the Application Packages tab, clear option Inherit default settings.

  5. Continue from Step 4 as described in the subsection "Adding a package to a host" above.

The selected packages will be added to all VMs in the pool.

Adding a package to an AVD pool

To add a package to an AVD pool:

  1. Make sure that the package is added to Parallels RAS as described above.

  2. Go to Farm > Site > Azure Virtual Desktop > Host pools.

  3. Double-click the pool that you want to install the package to.

  4. In the properties, on the Application Packages tab, clear option Inherit default settings.

  5. In the properties, continue from Step 4 as described in the subsection "Adding a package to a host" above.

The selected packages will be added to all hosts in the pool.

Adding a package to Group Defaults

To add a package to Group Defaults:

  1. Make sure that the package is added to Parallels RAS as described above.

  2. Go to Farm > Site > RD Session Hosts > Groups.

  3. Double-click the group or pool that you want to install the package to.

  4. In the properties, continue from Step 4 as described in the subsection "Adding a package to a host" above.

Adding a package to Site Defaults

To add a package to Site Defaults:

  1. Make sure that the package is added to Parallels RAS as described above.

  2. Open group or pool properties as described above.

  3. On the Application Packages tab, click Site Defaults.

  4. In the dialog that opens, continue from Step 4 as described in the subsection "Adding a package to a host" above.

Working with version tags

You can use version tags to simplify package management. For example, you can assign different tags to packages that are ready for publishing and these that are still in the testing stage. By default, Parallels RAS uses three tags: Production, Pre-production, and Custom. You can rename tags, but you cannot add or delete them.

To rename a tag:

  1. Navigate to Farm > Site > Settings and select Application packages tab.

  2. Select the tag that you want to rename.

  3. Click Tasks > Edit.

  4. Change the name of the tag and press Enter.

To use tags, you need to assign them.

To assign tags to a package:

  1. Navigate to Farm > Site > Application Packages.

  2. Double-click the package.

  3. In the Version tag section, select the tags that you need. You can assign several tags to one package.

To remove all tags assigned to a package:

  1. Navigate to Farm > Site > Settings and select the Application packages tab.

  2. Select the package.

  3. Click Tasks > Remove all tags.

Working with certificates

Parallels RAS uses code signing certificates to ensure authenticity and content integrity of MSIX application packages.

The following code signing certificates can be used:

  • Self-signed certificates

  • CA certificates

  • Internal CA certificates

You can provision code signing certificates via GPO or let Parallels RAS install them to hosts automatically. The code signing certificate of a package must be trusted by all hosts that use that package.

Parallels RAS allows you to add certificates to hosts automatically. This option is recommended for self-signed certificates.

To enable automatic certificate provisioning:

  1. Navigate to Farm > Site > Settings and select the Application packages tab.

  2. Select option Provision package certificates automatically.

Certificate expiration dates are shown in Farm > Site > Application packages.

Managing MSIX application packages

You can manage the added packages on the Farm > Site > Application Packages tab.

The following actions are available in the Task drop-down list:

  • Add: Adds a new package.

  • Change version tag: Assigns tags to a package.

  • Remove all tags: Removes all tags from the package.

  • Show published resources: Opens the list of all published applications from the package and the hosts they were published from.

  • Show assigned session hosts: Opens the list of hosts the selected package is assigned to.

  • Search: Allows you to search for a package in the list by applying a filter.

  • Delete: Deletes the package from Parallels RAS.

  • Settings audit: Opens the Settings Audit dialog where you can view the changes that were done to the packages.

  • Refresh: Refreshes the package list.

  • Properties: Shows the properties of the package (see below).

Package properties

The following settings are available in the Application package properties window:

The General tab:

  • Enable application package in site: Select this option to enable the package.

  • Package: Name of the package.

  • Display Name: Name used for the package inside Parallels RAS.

  • Version: Version of the package.

  • Publisher: Common name of the publisher.

  • MSIX image path: Path to the MSIX image.

  • Version tag: Tags assigned to the package. You can change the assigned tags to the package from here.

  • Applications: List of applications added from the package.

  • Dependencies: All dependencies of the package.

  • The Certificate tab:

    • Key size: Size of the certificate.

    • Expiration date: Certificate expiration date.

    • Common name: Common Name specified in the certificate.

    • View certificate info: Shows information about the certificate.

Package statuses

Green

Ready

Package is enabled and ready for registration.

Green

In use

Package is being used in a session.

Orange

Disabling

Waiting for deregistration in sessions.

Red

Staging failed

Red

Not found

The image file or network location unavailable. The admin can retry staging.

Red

Certificate missing

Package certificate is missing on the host.

Red

No version found

There is no application package marked with the tag selected in the host configuration.

Not applied

Not applied

Settings were changed but not applied

To expand MSIX-packaged applications into MSIX images you can use the MSIXMGR tool .

In the Version column, select the version of the package. It is recommended to make use of , which can facilitate application version updates. If the selected packages have dependencies, you will see a warning that lists all of them.

A problem with registration has occurred. You can retry registration as described in .

RD Sessions Hosts
VMs
AVD hosts
https://docs.microsoft.com/en-us/azure/virtual-desktop/app-attach-file-share
https://docs.microsoft.com/en-us/windows/msix/packaging-tool/tool-overview
https://docs.microsoft.com/en-us/azure/virtual-desktop/app-attach-msixmgr
version tags
Application Packages