ArcGIS Enterprise Installation Checklist

Question

I have loaded ArcGIS Enterprise many times on a virtual server and have always had issues arise. An example of one issue is after being installed and configured it suddenly cannot reach a webpage (Portal or Server). Another issue I have seen is after I log into Portal and go to Settings it pops up a "Sign in" window and none of my usernames or passwords work. I recently overcame the Sign in issue by giving privileges to "Everyone". It worries me a bit because in the back of my mind I'm wondering if the software is going to come crashing down because I forgot to set something correctly.

I am not asking for help on a particular installation but I would like to see if I can get a checklist for installing ArcGIS Enterprise for future reference.

I have Windows Server 2019 standard edition with IIS version 10 and I'm going to load ArcGIS Enterprise 10.8. What do I need do, or set, with the OS before installing the software (Portal, Server, the works)? Then after the software is installed is there anything else I should be aware of with the software and OS? Thanks in advance.

Checklist

* Install a CA Signed SSL certificate for https.
* Receive appropriate license for software (in my case a .prvc for Server and .json for Portal)
*

NathanEnge · Answer

I go through a typical ArcGIS Enterprise Base Deployment step by step, including security considerations, and prerequisities...

https://www.esri.ca/content/dam/distributor-restricted/esri-ca/files/news-events/events/uc/past-proceedings/uc2019/toronto/technical/nathan-enge-gettingstartedwitharcgisenterprisesecurityhighlights.pdf

CraigAJohnson · Answer

The class was "ArcGIS Enterprise: Configuring a Base Deployment (ver 10.7)"

ShaneMiles222 · Answer

Hi Craig Johnson‌,

Which exact course did your collegue undertake? That order is fine and I believe is the recommended installation and upgrading order. When you federate the portal with Server it takes on portals security settings as Im sure you are aware. The Datastore however should still be connected to Server utilising its Server URL on port 6443 and utilising the Servers administrator account. Once this has been done the hosting functionality is able to be selected for the server within Portal.

I couldnt answer your question about the host file for the windows system sorry. However it could have something to do with the configuration of your web adaptor and the machine name configuration.

Sure thing, in IIS go to default website and click on bindings. In there adjust settings to Type: https,  IP address: All Unassigned, Port: 443, SSL certificate: Choose the certificate .

From there export that certificate out of IIS as a .pfx and in the chain when you inspect it, export any root or intermediate certificates as a .cer .

From here navigate to portaladmin and follow the steps outlined in Configuring the portal to trust certificates from your certifying authority—Portal for ArcGIS | Documentation for ArcGIS… . Then go to import Existing server certificate and select your .pfx, type in the password and click import. Then in SSL certificates click update and change the web server certificate to the name of the certificate you just ingested as a .pfx .

Then go into Server and follow the steps outlined in Configure ArcGIS Server with an existing CA-signed certificate—ArcGIS Server | Documentation for ArcGIS Enterprise . After this go to serveradmin>machines>machine name and select edit. Change the Web server SSL certificate to the name of your certificate (.pfx) .

I usually conduct these steps as I go through build (prior to configuration of web adaptors) in order to ensure each element is trusted and the secure sign is being displayed within my web browser before proceeding.

Hope this helps.

Shane