|Manuals

Next Steps: Production Readiness

Once you have confirmed that the services are running and your initial troubleshooting is complete, follow these post-installation next steps to move from a basic setup to a production-ready environment.

Configure Identity and Access Management

While the default authentication is Windows logon, you should now define how users will interact with the system long-term.

  • Active Directory Integration: If using a remote environment, ensure the AD Cache role is enabled to manage user and group synchronization.
  • Alternative Methods: Explore other supported identity providers to match your corporate security policies and use mappings to enable Single Sign-On.
  • Permission Mapping: Use the Permissions tab in the Primary Broker to grant specific access to users or groups to the different components and features of the workspace.

Create Access Profiles

Optimize for High Availability (HA)

If your deployment needs to support more than 100 users or requires 24/7 uptime, transition to a distributed model.

  • External Database: Migrate from the local Absolute Database to SQL Server, MySQL, or MariaDB to allow multiple brokers to share configuration data.
  • Role Expansion: Add Secondary Brokers to your resource pools to handle increased session loads and provide redundancy.
  • Concurrent Gateways: Deploy multiple Gateway instances to enhance performance and ensure redundant entry points for web traffic.

Secure the Connection

Move beyond the initial testing phase by hardening your network bindings.

  • SSL Certificates: If you haven’t already, configure a valid certificate for your HTTPS bindings in the Gateway’s General tab.
  • Client Certificates: For high-security environments, consider enabling the Require Client Certificate option to restrict access further.
  • Port Management: Verify that no other applications are conflicting with your designated ports, particularly TCP 9443.

Establish a Backup Routine

Protect your configuration before making significant architecture changes or performing upgrades.

  • Critical Folders: Regularly back up C:\ProgramData\Cybele Software\Thinfinity and C:\Users\Public\Documents\Cybele Software.
  • Sensitive Data: Ensure these backups include your user data, access profiles, and identity provider mappings.

User Experience Finalization

Determine the best way for your employees to access their workspace.

  • Web Access: Provide users with the Gateway URL (e.g., https://[serverIP]:9443) for clientless browser access.
  • Desktop Client: For users requiring native Windows features or better peripheral support, distribute the Thinfinity Workspace Desktop Client installation package.