nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

PowerShell DSC Base ArcGIS Enterprise Deployment Hangs During Federation

TraeTimmerman

I'm working on deploying a single-machine base ArcGIS Enterprise 11.2 deployment on an EC2 instance in AWS using PowerShell DSC. It appears that everything is working properly except the federation step, which hangs and never proceeds nor produces an error. Any thoughts on what might cause the federation to hang? Or any ideas on troubleshooting steps/observations?

Find more posts tagged with

Accepted answers

TraeTimmerman

Thank you for the feedback and direction @ArchitSrivastava. I was able to identify the cause for this issue and found a workaround. See Base Enterprise Deployment Hangs During Federation · Esri/arcgis-powershell-dsc · Discussion #515 (github.com).

All comments

MMBR

You can look the C:\chef logs inside the machine to see if it shows any hint of the problem.

If still not able to determine the cause I would open a ticket with Esri Technical Support to investigate further.

TraeTimmerman

Hi @MarceloMarques ,

Thanks for getting back to me. I am using PowerShell DSC, not Chef. That being said, I finally got an error after the step hung for about an hour indicating that token generation was unsuccessful. The exact message is:

PowerShell DSC resource ArcGIS_Federation failed to execute Test-TargetResource functionality with error message: Unable to retrieve Portal Token for 'portaladmin' from Deployment
'EC2AMAZ-RQ2AG6M'

What's odd is that tokens are generated during other steps in the PowerShell DSC deployment and work just fine.

MMBR

AWS Cloud Formation Templates to Deploy ArcGIS Enterprise run behind the scenes Chef scripts that you can check the logs under C:\Chef. I do not use PowerShell DSC on my deployments but I wonder if it also calls Chef scripts inside the machine that you can check the logs. I hope this clarifies.

TraeTimmerman

Hey @MarceloMarques ,

I appreciate the feedback. I realize that AWS CloudFormation templates use CINC under the hood. I'm not using CloudFormation templates. PowerShell DSC does not rely on CINC/Chef. I've opened a case with Support Services to see whether they have any ideas.

ArchitSrivastava

Hello @TraeTimmerman ,

I would like to request if you can share more details like the deployment architecture and which JSON you are utilizing from the sample configs available in the Github link mentioned below (as these are latest and upgraded for 11.2):

arcgis-powershell-dsc/SampleConfigs/v4/v4.2.0/Base Deployment at main · Esri/arcgis-powershell-dsc · GitHub

I would also like to confirm if you are importing certificates in ArcGIS Server Admin and Portal admin prior to configuring federation, for sample check the below sample config JSON:

arcgis-powershell-dsc/SampleConfigs/v4/v4.2.0/Base Deployment/BaseDeployment-ThreeMachine-ssl-per-Node-Example1.json at main · Esri/arcgis-powershell-dsc · GitHub

Additionally, there also seems to be a known and replicated issue with Powershell and 11.1 deployment. The issue seems to produce a similar error. It seems that the same works with 11.0 but has some issues since 11.1, to help understand more details, I am share the Github discussion URL below:

ArcGIS Enterprise 11.1: Portal federation failed with invalid token · Issue #464 · Esri/arcgis-powershell-dsc · GitHub

Hope it helps!

-Archit

TraeTimmerman

Join the Conversation

Signed in members can post, follow updates, and more. New here? Register a free account.

Quick Links

Community Help
Find useful guides, FAQs, and documents to help you navigate and make the most of Esri Community.