Parallels® RAS Management Portal is a modern web-based configuration and administration console designed for Parallels RAS administrators using a desktop/laptop computer or a mobile device to carry out configurations and day-to-day activities.

Parallels RAS Management Portal provides administrators with ability to:

• Centrally deploy, manage, and configure essential Parallels RAS components such as RD Session Hosts, Connection Brokers and Secure Gateways.

• Publish various resources from RD Session Hosts.

• Configure FSLogix Profile Container settings.

• Configure printing and scanning settings.

• Manage SSL certificates.

• Configure connection settings and MFA (Google Authenticator or other Time-based One-time Password (TOTP) apps such as Microsoft Authenticator).

• Monitor and manage user sessions.

• Manage administrative accounts and sessions

• Configure mailbox.

• Manage your license.

• Contact support and provide necessary system reports.

The following table lists the Parallels RAS 19 release history. Parallels RAS documentation is updated for every release. This guide refers to the latest Parallels RAS 19 release from the table below. If you are using a newer Parallels RAS release or version, please download the current version of the guide from https://www.parallels.com/products/ras/resources/.

To open RAS Management Portal on the machine where you've installed the RAS Web Administration Service, navigate to Apps > Parallels and click Parallels RAS Management Portal.

To log in to RAS Management Portal from a remote computer, enter the following URL in a web browser:

https://<server-address>:20443

The <server-address> is the FQDN or IP address of the server where the RAS Web Administration Service is installed. By default, port 20443 is used for HTTPS connections. You can change the port number if needed as described in Configure RAS Web Administration Service.

On the Welcome page, enter your RAS administrator username and password and click Sign in.

Accounts

To add an administrator account to a Parallels RAS Farm:

1. Navigate to Farm Settings > Administrators > Accounts.

2. Right-click anywhere in the list and choose Add.

3. Specify the new account properties.

   Note that at the time of this writing, only a Root administrator can be added in the Management Portal.

4. In the System notifications drop-down list, select Email to send all system notifications to the specified email address, or select None to disable email system notifications for this account.

5. Click Create to create the account.

To modify an account, click the account name and then click Edit.

To delete an account, right-click it and choose Delete.

Sessions

To see current administrative RAS sessions, navigate to Farm Settings > Administrators > Sessions.

To log off a session, right-click it and choose Log off session.

All navigations in the RAS Management Portal start from the sidebar on the left, which lists management categories. The Site category is selected by default.

Categories

The following table lists all available categories that can be managed in the RAS Management Portal. The Root Administrator can see and manage all categories. Administrators of other types (Power, Custom) may need permissions to see a particular category.

Each category is described in detail later in this guide.

Admin permissions

Some categories and actions in the RAS Management Portal may not be viewed or allowed depending on the Admin permissions configured in the desktop RAS Console. For the information about how to configure administrator permissions, please refer to the Parallels RAS Administrator's Guide. In the guide, look for the Administrator Account Permissions topic. The guide is available on the Parallels website at https://www.parallels.com/products/ras/resources/.

Subcategories

Some categories have subcategories (namely Infrastructure and Site Settings). When you selected a category, the right side of the RAS Management Portal may include one or more additional panes where you can select a subcategory.

Navigation bar

Some components have their settings and information grouped by functionality (e.g. General, Properties, Sessions, etc.). When you view component properties, a navigation bar is displayed in the middle allowing you to browse these settings. When you select an item in the navigation bar, the settings are displayed in the right pane.

Breadcrumbs

As you select categories, subcategories, individual items, a breadcrumb trail is displayed at the top of the page to show where you are. To take one or more steps back, click a link in the trail.

Page header items

The page header includes the following items:

• The Farm and the current Site names. If you have more than one Site, you can select one from the drop-down list. The RAS Management Portal will switch to that site allowing you to manage the Site components.

• The "User" icon is a drop-down list with the following items: Current user name (e.g. Administrator); About (opens the About dialog); Give feedback (takes you to a web page where you can give feedback to Parallels); Configure Management Portal, Logout (logs you out).

• Apply All Changes: This button applies changes that you've made in the RAS Management Portal to Farm components. When you create or modify components and objects, the changes are not applied to Farm components automatically and don't have any effect on the Site or Farm. When you click the Apply All Changes button, the changes are applied across the Farm or Site. Note that you shouldn't always click this button every time you make a change. If you are working on a task that requires multiple changes in different areas, complete all of them and then click the Apply All Changes button, so all changes are applied together.

Editing

When you open a view where you can modify some settings, the view is normally read-only. To enable editing, click the Edit button in the upper right-hand corner. The button name changes to Save. When done editing, click Save. To discard the changes, click Cancel.

Please note that an object that is opened for editing by an admin cannot be edited by another admin at the same time. If you try to enable editing for such an object, you will get an error with the name of the admin who has the object locked.

Edit toolbar

Some views (specifically lists) have a toolbar in the upper right-hand corner from which you can execute actions. To see a toolbar item name, hover over it with the mouse. The standard items (icons) on the toolbar are the following:

• Show filter: Specify a filter to show only the entries that match it.

• Select columns: Select table columns to display or hide.

• Add: Add a new entry. For example, add a new Gateway or RD Session Host, etc.

• Refresh: Refresh the view.

• Ellipsis: The ellipsis menu may have different items in different types of views. Some items have a corresponding toolbar items (e.g. Add, Refresh).

Other items may be present depending on the view you are in. For example, Show running processes and Show sessions.

Wizards

When you add a component to a Farm, a wizard usually opens which takes you through a series of pages where you specify component settings and options. A wizard has the usual Next and Back navigation buttons, and the Cancel button that closes the wizard and cancels the operation.

Modal dialogs

Clicking some menu and navigation bar items brings up a modal dialog. These are usually items that require you to confirm an action or enter additional information.

Object properties views

All objects (components) in the RAS Management Portal have properties. To view these properties, you select a category and a subcategory and click the object name in the list. This opens a view where object properties are displayed with its own navigation bar from which you can configure the object, perform actions. and view additional information.

Adding a RADIUS MFA provider

To add a RADIUS MFA provider:

1. Navigate to Site Settings > Connection > Multi-factor authentication.

2. Click the plus sign icon and select the provider you want to add.

3. Specify the following:

   • Name: Name of the provider.

   • Description: Description of the provider.

   • In the Themes table select the Themes that will use this MFA provider.

4. Click Next.

5. Specify the following:

   • Display name: Specify the name of the connection type that will be displayed on the Logon screen on the client side. This should be the name that your users will clearly understand.

   • Primary server and Secondary server: These two fields allow you to specify one or two RADIUS servers to include in the configuration. Specifying two servers gives you an option to configure high availability for RADIUS hosts (see below). Specify a server by entering its hostname or IP address or click the [...] button to select a server via Active Directory.

     When two RADIUS servers are specified, select one of the following high availability modes from the HA mode drop-down list: Active-active (parallel) means the command is sent to both servers simultaneously, the first to reply will be used; Active-passive (failover) means failover and timeout are doubled, Parallels RAS will wait for both hosts to reply.

   • HA mode: See Primary server and Secondary server above. If only the Primary server is specified, this field is disabled.

   • Port: Enter the port number for the RADIUS Server. Click the Default button to use the default value.

   • Timeout: Specify the packet timeout in seconds.

   • Retries: Specify the number of retries when attempting to establish a connection.

   • Secret key: Type the secret key.

   • Password encoding: Choose from PAP (Password Authentication Protocol) or CHAP (Challenge Handshake Authentication Protocol), according to the setting specified in your RADIUS server.

   • User Prompt: Specify the text that the user will see when prompted with an OTP dialog.

   • Forward username only to RADIUS server: Select this option if needed.

   • Forward the first password to Windows authentication provider: Select this option to avoid a prompt to enter the password twice (RADIUS and Windows AD). Note that for Azure MFA server, this option is always enabled and cannot be turned off.

6. Click Create when done.

Configuring a RADIUS MFA provider

To configure a RADIUS MFA provider:

1. Navigate to Site Settings > Connection > Multi-factor authentication.

2. Double-click the name of the provider that you want to configure.

3. Click the Edit button.

4. The following categories are available for configuration:

   • General and Connection categories: See above.

   • Attributes: See https://download.parallels.com/ras/v19/docs/en_US/Parallels-RAS-19-Administrators-Guide/46769.htm.

• Automation: See https://download.parallels.com/ras/v19/docs/en_US/Parallels-RAS-19-Administrators-Guide/46770.htm.

• Restrictions: See Configure MFA rules.

1. Click Save when done.

This topic describes how to configure existing FSLogix Profile Containers to be managed by Parallels RAS. FSLogix Profile Container configuration defines how and where the profile is redirected. Normally, you configure profiles through registry settings and GPO. Parallels RAS gives you the ability to configure profiles from the Parallels RAS Console or RAS Management Portal without using external tools.

Before you begin

Before you configure FSLogix Profile Containers in Parallels RAS, make note of the following:

• You don't have to change the profiles themselves; existing profiles stay the same.

• You can keep using your existing FSLogix Profile Container locations, such as SMB network shares or Cloud Cache.

Preliminary steps

Perform the following preliminary steps:

1. Back up your existing profiles. It is highly unlikely that profile data can be lost or corrupted, but it is best practice to have a valid backup prior to any change in profile configuration.

2. Turn off the GPO configuration of FSLogix Profile Containers. This step is important because you cannot have both GPO and Parallels RAS management of FSLogix profiles enabled at the same time.

3. Before configuring FSLogix profiles for a server in a RAS Farm, make sure there are no user sessions running on the server. As a suggestion, you can make the transition in a maintenance window out of working hours.

Replicate GPO and FSLogix configuration

To configure existing FSLogix Profile Containers in Parallels RAS, you need to replicate your existing GPO to the FSLogix configuration in Parallels RAS. This can be done in the Parallels RAS Console or the Parallels Management Portal.

To configure profiles in the RAS Management Portal:

1. Navigate to Infrastructure > RD Session Hosts.

2. Click a host in the list and then click Properties.

3. In the middle pane, click User Profile.

4. In the Location of profile disks list box, specify existing SMB or cloud cache locations where you keep your FSLogix profiles. Also, specify the profile disk format, allocation type, and default size.

5. In the middle pane, click Users and Groups, Folders, and Advanced items to configure the rest of FSLogix settings you may have on your servers, such as user exclusions, folder exclusions, and others.

Please note that at the time of this writing RAS Management Portal can only be used to configure RD Session Hosts to use FSLogix Profile Containers. For other host types, please use the desktop-based RAS Console (described below).

To configure profiles in the RAS Console:

1. Open the User profiles tab on a host, Site defaults, or Template Properties dialog.

2. In the Location of profile disks list box, specify existing SMB or cloud cache locations where you keep your FSLogix profiles. Also, specify the profile disk format, allocation type, and default size.

3. Click the Additional settings button and configure the rest of FSLogix settings you may have on your servers, such as user exclusions, folder exclusions, and others.

Recommendations and testing

When performing steps in the previous section, do not configure multiple (or all) servers in a RAS farm right away. Begin with a single server (e.g. an RD Session Host) and then test it with a single user connection. After that, configure some other servers and test the same user logging in to multiple servers consecutively to confirm the profile is loaded and personalization is retained irrespective of a session host. If all is good, configure other host, host pools, or Site defaults.

Your RAS users can now connect to Parallels RAS using pre-existing FSLogix Profile Containers, which are now managed centrally through Parallels RAS.

To configure FSLogix:

1. Do one of the following:

   • To configure Site defaults, navigate to Infrastructure > Host pools > RD Session Hosts > Properties > Site defaults > User Profile.

   • To configure host pools, navigate to Infrastructure > Host pools > <Host pool name> > Properties > User Profile.

   • To configure individual hosts, navigate to Infrastructure > RD Session Hosts > <Host name> > Properties > User Profile.

2. If you want to use Profile Containers, go to User Profile > FSLogix - Profile Containers:

   • Users and Groups: Specify include and exclude user and group lists. By default, Everyone is added to the FSLogix profile include list. If you want some user profiles remain local, you can add those users to the exclude list. Users and group can exist in both lists but exclude takes priority.

   • Folders: Specify include and exclude lists for folders. You can select from common folders or you can specify your own. Please note that folders must reside in user profile path.

   • Disks: Specify the settings of the profile disk. Location type: Select a location type for profile disks (SMB Location or Cloud Cache) and then specify one or more locations. Location of profile disks: Location(s) of profile disks. These are the locations of VHD(X) files (the VHDLocations setting in the registry as specified in the FSLogix documentation). Profile disk format: Select from VHD or VHDX according to your requirements. VHDX is a newer format and has more features. Allocation type: Select Dynamic or Full. This setting is used in conjunction with the Default size setting (see below) to manage the size of a profile. Dynamic causes the profile container to use the minimum space on disk, regardless of the allocated Default size. As a user profile is filled with more data, the amount of data on disk will grow up to the size specified in Default size, but will never exceed it. Default size: Specifies the size of newly created VHD(X) in megabytes.

   • Advanced: This tab allows you to modify advanced FSLogix registry settings. By default, the settings are disabled. To enable a setting, select the checkbox in front of its name. A description for each setting is provided in the RAS console. For further information regarding FSLogix Profile Containers configurations, visit https://docs.microsoft.com/en-us/fslogix/profile-container-configuration-reference.

3. If you want to use Office Containers, go to User Profile > FSLogix - Office Containers:

   • Users and Groups: Same as above.

   • Disks: Same as above.

   • Advanced: Same as above.

4. If you want to configure Cloud Cache, go to User Profile > FSLogix - Cloud Cache. For more information about these settings, see https://learn.microsoft.com/en-us/fslogix/reference-configuration-settings?tabs=ccd#fslogix-settings-profile-odfc-cloud-cache-logging.

5. If you want to configure logging, go to User Profile > FSLogix - Logging. For more information about these settings, see https://learn.microsoft.com/en-us/fslogix/reference-configuration-settings?tabs=ccd#fslogix-settings-profile-odfc-cloud-cache-logging.

RD Session Host properties are split into categories, which are displayed in the middle pane. Each category has its own set of properties. All categories, except General and Scanning, have one common link: Site Defaults or Host pool Defaults, which allows you to view default settings. If you want the properties in a particular category to inherit default settings, select the Inherit Defaults option. When you do this, the default settings will be inherited from one of the following:

• Host pool defaults if the host is assigned to an RD Session Host host pool. Pools are described in Grouping and Cloning RD Session Hosts.

• Site defaults if the host is not assigned to an RD Session Host host pool. Note that a host pool may also inherit Site defaults, but this can be overridden in the host pool properties dialog where you can specify custom settings for a host pool.

Click the Host pool Defaults or Site Defaults link (whichever applies) to open the host pool or Site default properties pane. To modify default settings (if needed), click Edit.

Microsoft FSLogix Profile Container is the preferred Profile Management solution as the successor of Roaming Profiles and User Profile Disks (UPDs). It is set to maintain user context in non-persistent environments, minimize sign-in times and provide native profile experience eliminating compatibility issues.

Beginning with version 18, Parallels provides you with the ability to integrate, configure, maintain and support FSLogix Profile Container, supporting Storage Spaces Direct, Azure Files, Azure NetApp files, based on their supported protocols such as SMB and Cloud Cache for resiliency and availability.

Supported FSLogix Profile Container releases

Parallels RAS has been tested with FSLogix Profile Container releases up to and including release 2105.

Prerequisites

FSLogix Profile Container license eligibility, which is included if you have any of the following licenses:

• Microsoft 365 E3,E5

• Microsoft 365 A3,A5, Student Use Benefits

• Microsoft 365 F1, F3

• Microsoft 365 Business

• Windows 10 Enterprise E3,E5

• Windows 10 Education A3,A5

• Windows 10 VDA per user

• Remote Desktop Services (RDS) Client Access License (CAL)

• Remote Desktop Services (RDS) Subscriber Access License (SAL)

Other prerequisites include:

• Profile Container storage configured according to FSLogix recommendations.

• GPO policies related to FSLogix must be disabled on hosts where Parallels RAS manages FSLogix settings

Install FSLogix Profile Container application in Parallels RAS

To install FSLogix Profile Container application in Parallels RAS Management Portal:

1. Navigate to Site Settings > FSLogix.

2. In the right pane, click Edit and select on the following installation methods:

   • Install manually: Use the FSLogix Profile Container application installed on a host manually (Parallels RAS will not install the FSLogix agent).

   • Install online: Install FSLogix Profile Container from the Microsoft web site. In the drop-down list, select one of the desired supported versions. To specify a custom URL, choose Custom URL and then specify a URL in the field provided. To automatically detect the latest supported version, click Detect latest. The latest version will be identified and added to the Install online drop-down list.

   • Install from a network share: Install the FSLogix agent you have available locally (Parallels RAS requires an official ZIP archive as provided by Microsoft).

   • Push from RAS Connection Broker: The latest version of the FSLogix agent is downloaded and stored on the RAS Connection Broker side to be pushed to target session hosts.

Configure a session host to use FSLogix Profile Container

Please note that at the time of this writing RAS Management Portal can only be used to configure RD Session Hosts to use FSLogix Profile Container. For other host types, please use the desktop-based RAS Console.

To configure a session host:

1. Navigate to Infrastructure > RD Session Hosts.

2. Click a host in the list and then click Properties.

3. In the middle pane, click User Profile.

4. Click Edit to enable editing. To override Site or Host pool defaults, clear Inherit defaults and specify your own settings. To modify Site or Host pool defaults, click the corresponding link and do the editing in its respective view.

5. Specify the settings according to your needs.

To configure an RD Session Host:

1. Navigate to Infrastructure > RD Session Host.

2. Click a host in the list to open the view displaying the host information.

3. In the navigation bar, click Properties (at the bottom). Configure the RD Session Host as described below.

If you would like to configure user profiles for the host based on the FSLogix technology, select FSLogix in the Technology drop-drown list and specify the settings according to your needs. For the information about how to configure FSLogix Profile Container in Parallels RAS, see .

In the navigation bar, select General and specify the following:

• Enable Host in site: Enable or disable the host. A disabled host cannot serve published resources to users. When you disable a host, its name becomes grayed out in the main list.

• Host: Specifies the host name.

• Description: Specifies the host description.

• Change direct address: Select this option if you need to change the direct address that Parallels Client uses to establish a direct connection with the RD Session Host.

The Desktop Access category allows you to restrict remote desktop access to certain users.

To use default settings, select the Inherit default settings option. See the Using default settings subsection above.

By default, all users who have access to remote applications on an RD Session Host can also connect to the host via a standard RDP connection. If you want to restrict remote desktop access to certain users, do the following:

1. Select the Restrict direct desktop access to the following users option. If you have the Inherit default settings option selected, click the Edit Defaults link to see (and modify if needed) the default configuration. The rest of the steps apply to both the Host Properties and Default Host Properties dialogs.

2. Click the plus-sign icon.

3. Select the desired users. To include multiple users, separate them by a semicolon.

4. Click OK.

Users in this list will still be able to access remote applications using Parallels Client, but will be denied direct remote desktop access to this host.

Please note that members of the Administrator group will still be able to connect to the remote desktop even if they are included in this list.

Printing

The Printing category allows you to configure the renaming format of redirected printers. The format may vary depending on which version and language of the host you are using.

To use default settings, select the Inherit default settings option. See the Using default settings subsection above.

The RDP printer name format drop-down list allows you to select a printer name format specifically for the configured host.

Select the Remove session number from printer option to exclude the corresponding information from the printer name.

Scanning

In the Scanning view, configure which imaging interfaces should be enabled on the host(s). Select from WIA, TWAIN, or both.

To serve published resources to users, an RD Session Host must have the Remote Desktop Services (RDS) role installed.

To add an RD Session Host to a Farm:

1. Navigate to Infrastructure > RD Session Hosts.

2. Right-click anywhere in the list and choose Add (you can also choose Add from the ellipsis menu or click the plus-sign icon).

3. Select a host (or multiple host) from the displayed list or click the Browse AD button and browse for a host.

4. Click Next.

5. On the next page, specify the following options:

   • Add firewall rules. Add firewall rules required by Parallels RAS in Windows running on the host. See Port Reference for details.

   • Install RDS Role. Install the RDS role on the host if it's not installed. You should always select this option.

   • Enable Desktop Experience. Enable the Desktop Experience feature in Windows running on the host. This option is enabled only if the Install RDS role option (above) is selected. The option applies to Windows Server 2008 R1/R2 and Windows 2012 R1/R2 on which the Desktop Experience feature is not enabled by default.

   • Restart server if required. Automatically restart the host if necessary. You can restart the host manually if you wish.

   • Add host(s) to host pool. Add the host (or hosts) to a host pool. Select the desired host pool in the list box located below this option or create a new host pool by typing a name and clicking Create. For the information on how to create a host pool, see .

6. Click Next.

7. In order for end users to access published resources on the RD Session Host, they must be added to the Remote Desktop Users group in Windows running on the host. This can be done one of the following ways:

   • Adding each user or group directly on the host using standard Windows administrative tools.

   • Adding users or groups through Active Directory.

   • Using the wizard page described below, which is provided for your convenience.

   If you already added your users to the Remote Desktop Users group on the given host (or if for any reason you want to use one of the other methods listed above), you can simply click Next and skip this page.

   To add users to the Remote Desktop Users group using the wizard, click Browse and specify a user or a group.

8. On the next page, review the settings and click Create.

9. If the host doesn't have RAS RD Session Host Agent installed, you'll see a dialog asking for remote installation credentials. Type a username and password that can be used to remotely install the agent software on the host. Click Submit and follow the onscreen instructions.

10. When the installation is finished, click Done. Note that if the agent cannot be installed, you can still add a host to the Farm, but you will not be able to use it. You can always installed the agent later.

On successful installation, the host will appear in the RD Session Hosts list.

Additional information

To learn how to configure and manage an RD Session Host:

The Overview screen displays the following information:

• The Information section displays the RD Session Host information similar to what is shown on the main RD Session Host list but in one convenient view.

• The Actions section lists actions that you can perform on a host (see below). Please note that you can also perform actions from the main RD Session Host list view by selecting a host and choosing an option from the ellipsis menu.

You can perform the following actions on an RD Session Host:

• Message all: Send a message to users connected to the host.

• Disconnect all: Disconnect all current users.

• Logoff all sessions: Log off all current sessions.

• Update agent: Update the RD Session Host Agent, if required.

• Disable agent: Temporarily disable the agent.

The Control sub-menu contains the following items:

• Enable logons: Enables logons from client sessions, but not from the console. This option performs the same action as the change logon /enable command.

• Disable logons: Disables subsequent logons from client sessions, but not from the console. Does not affect currently logged on users. This option performs the same action as change logon /disable command.

• Drain: Disables logons from new client sessions, but allows reconnections to existing sessions. Drain is kept even after reboot until the admin enables logons.

  Note that while a host is in drain mode, administrators may still log on to the physical console or remotely log on using the /admin or /console command-line option for MSTSC. This allows administrators to remotely maintain the RDS host via Tools > Remote Desktop.

• Drain until reboot: Disables logons from new client sessions until the computer is restarted, but allows reconnections to existing sessions. Drain is kept until the host is restarted. Same action as the change logon /drainuntilrestart command.

• Cancel pending reboot (scheduler): Cancel pending reboot.

• Cancel disabled state (scheduler): Cancel disabled state.

• Install RDS role: Allows to install the RDS role on the host.

• Reboot: Reboot the host.

• Shutdown: Shut down the host.

The Logs sub-menu contains the following items:

• Configure: Allows you to configure logging. For the explanation of log levels, please see below.

• Retrieve: Retrieves a ZIP archive containing the log files to the specified location.

• Clear: Clears all existing logs.

The available log levels are:

• Standard: This is the standard log level that records only the most important events. Unless you are asked by Parallels RAS support to use one of the log levels described below, you should always use this one.

• Extended: This logging involves more information than the standard logging, but it slows down the system because of the additional information that it needs to collect.

• Verbose: Verbose logging involves even more information than the extended logging and can slow down your system significantly.

Please note that to avoid degraded performance, extended and verbose logging should only be enabled for a limited time period (enough to collect the necessary information for analysis). You can set this time period using Reset to the standard level after option. The default value is 12 hours. In specific cases, a Parallels support engineer will advise you whether this time period should be set to a different value. Once this time period is over, the log level will be reset back to standard.

The remaining items include:

• Assign to host pool: Assigns the host to a host pool.

• Remove from host pool: Removes a host from a host pool.

• Refresh: Refreshes the host information displayed on the screen.

• Site Defaults: Opens the RDSH site defaults screen where you can view and configure site defaults.

• Delete: Deletes the host from the RAS Farm.

To perform RD Session Host management tasks:

1. Navigate to Infrastructure > RD Session Hosts.

2. Click a host to open the host properties view.

3. Use the navigation bar to switch between different views where you can view additional information and perform actions. These views are described below.

To view and manage active session on the RD Session Host, click Active Sessions in the navigation bar. To see the detailed session information, click the user name in the list. This opens the Session Info view. For a detailed description of session metrics, please see

To perform an action on a session (or multiple sessions), select it in the list and click the ellipsis menu. Choose from one of the following items:

• Show session info: Opens the Session Info view.

• Message: Send a message to the session owner.

• Disconnect: Disconnect the session.

• Log off: Log off the session.

• Show resources: Opens a view displaying running resources.

• Show running processes: Opens a view displaying running processes.

• Monitoring settings: Opens a dialog where you can configure monitoring settings to highlight values in session metrics for RD Session Hosts. The dialog lists available metrics and allows you to set Warning and Critical thresholds for a given metric. To set a threshold, select the checkbox in front of a metric name and specify the desired values. During the RAS Farm operation, when a threshold is reached, a session metric value is highlighted as follows: Warning threshold — orange; Critical threshold — red.

  To reset values for a given threshold, select it and choose Reset from the ellipsis menu (or right-click > Reset). You can also enable or disable threshold color coding for a metric. To do so, select a metric and choose Enable or Disable from the ellipsis menu.

• Refresh: Refreshes the list.

• Export: Exports the information to a CSV file.

To view running resources for an RD Session Host, click the Running Resources item in the navigation bar. To see the detailed resource information, click the resource name. This opens a view displaying the basic resource information (ID, name, target, etc) and the corresponding session information. For the detailed information about session metrics, please see Session information.

To perform an action on a resource, select it in the list and click the ellipsis menu. Choose from one of the following:

• Message: Send a message to the session owner.

• Disconnect: Disconnect the session.

• Log off: Log off the session.

• Show running processes: Opens a view displaying running processes.

• Show user session: Open a view displaying the information about the session.

• Show information: Opens a view displaying the resource information.

• Monitoring settings: See the description in Active Sessions.

• Refresh: Refreshes the list.

• Export: Save the list into a CSV file.

When you publish resources in Parallels RAS, you need to specify one or more hosts that host them. RDSH host pools allow you to combine multiple RD Session Hosts and then publish the resources from the host pool instead of specifying individual hosts.

The main benefits of using RD Session Host host pools are as follows:

• They simplify the management of published resources and are highly recommended in multi-host environments.

• They allow you to use RD Session Hosts created from a template by utilizing the VDI infrastructure. More on this later in this section.

Note that an RD Session Host can be a member of one host pool only. You cannot add the same host to multiple host pools.

Creating a host pool

To create an RDSH host pool:

1. Navigate to Infrastructure > RD Session Hosts > Host pools.

2. Choose New host pool from the ellipsis menu (or click the plus-sign icon).

3. Type a host pool name and press Enter.

4. Click the new host pool name in the list to open the host pool editing screen.

5. Click Properties in the middle pane and configure the host pool. Settings here are similar to settings of an individual RD Session Host. See Configure an RD Session Host.

Using host pool defaults

RD Sessions Hosts assigned to a host pool have various settings that they can inherit from the host pool defaults. This makes it simpler to configure a single set of settings for all hosts instead of configuring each host individually. A Site also has its own default settings (Site defaults). Moreover, an RD Session Host host pool can inherit these Site defaults. This gives you the following choices when inheriting default settings by an RD Session Host:

• Configure Site defaults and make the host pool inherit these settings. The RD Session Hosts assigned to the host pool will therefore also inherit Site defaults. This is the default scenario for a new host pool.

• Configure default settings for a given host pool. This way you can have multiple host pools, each having its own host pool defaults (different from Site defaults). Therefore, the hosts assigned to a host pool will inherit the host pool defaults.

To view running processes for an RD Session Host, click the Running Processes item in the navigation bar. This opens a view displaying all running processes.

To kill one or multiple processes, select them in the list and chose Kill processes from the ellipsis menu. To refresh the list, choose Refresh.

The Parallels RAS Management Portal includes a certificate management interface that allows you to manage all of your SSL certificates in one place.

Certificates are managed on a Site level. Once a certificate is added to a Site, it can be used with any RAS Secure Gateway or HALB that also exist in this Site.

To manage certificates, navigate to Infrastructure > Certificates. The Certificates list displays existing certificates. When you install Parallels RAS, the <Default> self-signed certificate is created automatically, so you will see at least this certificate in the list. The default certificate is also automatically assigned to all new RAS Secure Gateways and HALB.

The subsequent sections describe certificate management tasks in detail and provide additional certificate information and instructions.