vWorkspace secure connection setup

Hi,

I'm setting up a application publishing using vWorkspace with two physical servers, one server is a Session Host and the other is a Broker with WebAccess. The setup works fine, internal desktops are connecting to the vWorspace Farm using port 8080 once they have desktop integrated connector installed. Users can also launch published apps from webaccess using the port 80, but not port 443 ( they get error that ****.pit file is not trusted and this is because I dont have the valid trusted certificate, I have self-signed cert  at this time).

1. How do I configure vWorspace farm to only work with port 443 directly to WebAccess without installing Gateway service? I don't want to open ports 8080 and 3389 on the firewall to allow external users access to web portal, I would like users to connect to WebAccess server and launch applications from the Session Host server. Are there instructions for this type of setup?

3. This setup is only a demo but might turn into a farm with multiple session hosts, what do I have to do to prep the setup now to be easily scaleable down the road.

Any comments are welcome.

dkgcb