Adding your SSL Certificate to the ArcGIS Monitor Report Server

CecilLamb

While at a client site installing and configuring ArcGIS Monitor, I needed to set up the ArcGIS Monitor Reporting Server with the client’s SSL Domain Certificate for the server so that no security error would be thrown when accessed. I was given the certificate in the PFX format (binary format for storing the server certificate, intermediate certificates, and the private key) common to Windows and readily imported by IIS. ArcGIS Monitor does not use IIS and requires that the Certificate and Private key be in separate files and in PEM format (Base64 encoded ASCII files).

Here are the steps I used to move from the single PFX file to the two PEM files required by ArcGIS Monitor Server.

1. Download/Install OpenSSL software on an available workstation (For information on OpenSSL please visit: www.openssl.org)
2. Open a command window and navigate to the PFX file location
3. Extract the Public/Private key-pair 
4. Extract the Certificate 
5. Get the Private Key from the key-pair 
6. The private key needs to be converted to pkcs8 format ***Copy the output and save it as sample_private_pkcs8.pem***
7. Copy the sample_private_pkcs8.pem and sample_cert.pem files to the <Installation location>\ArcGIS Monitor\Server\ssl directory on the ArcGIS Monitor Report Server.
8. Start ArcGIS Monitor Administrator - the Connections view appears.
9. Click the File menu and click Open - the Open File dialog box appears.
10. Browse to the <Installation location>\ArcGIS Monitor\Server\settings directory on the machine where ArcGIS Monitor Server is installed, click config.db, and click Open.
11. Click Server on the main menu - the Server configuration pane appears. 
12. Click the Private Key browse button - browse to and choose the sample_private_pkcs8.pem file and click Open.
13. Click the Public Key browse button - browse to and choose the sample_cert.pem file and click Open. 
14. Click the File menu and click Save to save your changes.
15. Click the File menu and click Close to return to the Connections view.
16. Right-click the ArcGIS Monitor Server service in the Windows Services manager and click Restart.
17. The result is a secure connection to the ArcGIS Monitor Report Server 

PeterStiegler2

Hello @CecilLamb 

thank you for the great tutorial. If I follow the steps but when i add the certificates and then stop the service, it no longer starts and the monitor is no longer accessible.

do you have any idea what this could be?

Thank you

Peter