ArcGIS DataStore - la utilidad updatesslcertificate no funciona para reemplazar SSL

Question

<\/HEAD>Desplegando Enterprise 10.7.1, quiero reemplazar el ssl autofirmado de Datastore con mi propio Certificado CA, cuando ejecuto updatesslcertificate en PowerShell o cmd (como administrador) con un comando:<\/P> <\/P> .\updatesslcertificate.bat my.domain.com.pfx "mypassword" "myalias"<\/P> o <\/P> updatesslcertificate.bat <\/SPAN>my.domain.com<\/SPAN>.pfx "mypassword"<\/SPAN> "myalias"<\/SPAN><\/P><\/P>la salida devuelve un error:<\/P>Error encontrado: Es posible que la tienda de datos no haya sido inicializada.<\/STRONG><\/SPAN><\/P><\/P>información adicional:<\/P>Estoy usando esta ayuda:<\/P>Reemplazar certificado SSL de ArcGIS Data StoreGuArcGIS Data Store (Windows) Gu Instalacin Gua de Documentacin para ArcGIS Ent...<\/A> <\/P>cuando abro https:\/\/localhost:2443\/arcgis\/datastore\/<\/A> , la pgina se abre correctamente para crear un datastore, y estoy intentando reemplazar este SSL antes de crear un DataStore.<\/P>Estoy ejecutando el comando dentro del directorio de instalacin: C:\Programs and Files\ArcGIS\DataStore\Tools<\/P> <\/P> Windows Server 2016 en Azure<\/P> Enterprise 10.7.1<\/P> Servicio de Windows ArcGIS Datatore en ejecucin<\/P> Directorio de instalacin de ArcGIS: C:\Programs and Files\ArcGIS\DataStore\<\/SPAN><\/P><\/P>gracias por adelantado<\/P><\/P>enterprise 10.7.1\u200c datastore commands\u200c datatore\u200c ssl\u200c <\/P><\/BODY><\/HTML>

ChristopherPawlyszyn · Answer

The certificate would have to include either a CN or SAN entry that would cover the URL you're using to access the Data Store URL. Typically when we run into issues with customers using their Web Adaptor SSL certificate on all endpoints for ArcGIS Enterprise's internal web servers, the Web Adaptor certificate covers the public-facing URLs or DNS aliases without including the internal machine FQDNs. We have logged a documentation defect internally to fix the misinformation on the Data Store configuration page in terms of importing the certificate prior to the initial configuration.

RenatoTeixeira1 · Answer

I found out that the tool only works after I have joined ArcGIS Server, so I decided to give up on this certificate and use Self-Signed, and my certificate is a wildcard issued by globalsign and ArcGIS is not making it secure even by installing root on the server. I really can't understand why, since the same certificate is used on the webserver for the webadaptor and it works.

tx

ChristopherPawlyszyn · Answer

Hi RENATO TEIXEIRA,

Have you tried importing the certificate following the configuration of the ArcGIS Data Store with the associated Server site? We have a defect in the works regarding the logic of the updatesslcertificate tool, but that is the established workaround for the time-being. Hope that helps! Otherwise as Jeff suggested a support case may be helpful to pursue some additional troubleshooting angles.