VSA 10 TLS support for Windows XP and Windows Server 2003

SECURITY  Administrator-level permissions on the target endpoint

This article discusses Kaseya's move to TLS 1.2 and the impact this change has on endpoints running Windows XP and Windows Server 2003. It provides a workaround for customers who wish to continue to manage these systems via VSA 10.

Overview

In September 2023, Kaseya started a major project to migrate all customers hosted in our current North American data center to a more resilient and robust one. As part of the move, we enhanced our security position by removing support for TLS 1.0 and 1.1. This change means that machines running Windows XP and Windows Server 2003 will no longer appear online in VSA 10.

We have developed a workaround for customers who still wish to monitor Windows XP and Windows Server 2003 machines.

You must have access to Windows Server 2016 or higher to set up a proxy server. Windows XP and Windows Server 2003 machines can connect to the proxy server via TLS 1.0 and 1.1, and it will forward the requests to our servers via TLS 1.2.

How to...

To configure your Windows Server 2016 machine as a proxy server, perform the following steps.

  1. Download FreeProxy Internet Suite from Softpedia.

  2. Install the application on your Windows Server 2016 system.

  3. Open the Windows Run prompt and enter services.msc. Then, click OK.

  4. In the Services list, locate the Free Proxy Service and double-click it to open its properties.

  5. Change the selection in the Startup type drop-down menu to Automatic. If the Service status field does not say Running, click the Start button.

  6. Click OK to close the properties window.

  7. In the Windows Start Menu, locate and launch FreeProxy Internet Suite.

  8. Configure the proxy server to your requirements. In the following example, Port 8080 with HTTP Proxy and Local binding with a network adapter are being used.

  9. Click Permissions > Add Resource.

  10. Enter the IP address range you'd like the proxy server to use.

  11. Click Done to save your changes.

Once you've configured the proxy server, you'll need to set up the VSA 10 Agents on your Windows XP and Windows Server 2003 systems to connect to it. To do so, perform the following steps.

In the VSA 10 Agent

  1. On the selected endpoint, launch VSA X Manager.

  2. Click Settings > Proxy.

  3. Add the proxy settings from FreeProxy Internet Suite.

  4. Click Apply. Then, click Done. Your system can now be managed in VSA 10.

In Microsoft PowerShell

If you prefer to use Microsoft PowerShell to configure your system, you can do so by running the following script. Be sure to replace ADDPORTNUMBER and ADDIPADDRESS with the port number and IP address of your proxy server.

Set-ItemProperty -Path "HKLM:\Software\Kaseya\PC Monitor\" -Name UseProxyServer -Value "1"
Set-ItemProperty -Path "HKLM:\Software\Kaseya\PC Monitor\" -Name ProxyServerPort -Value "ADDPORTNUMBER"
Set-ItemProperty -Path "HKLM:\Software\Kaseya\PC Monitor\" -Name ProxyServerName -Value "ADDIPADDRESS"