ArcGIS DataStore - l'utilitaire updatesslcertificate ne fonctionne pas pour remplacer SSL

Question

<\/HEAD>Déploiement d'Enterprise 10.7.1, je souhaite remplacer le ssl auto-signé du Datastore par mon propre certificat CA, lorsque j'exécute updatesslcertificate avec PowerShell ou cmd (en tant qu'administrateur) avec la commande :<\/P> <\/P> .\updatesslcertificate.bat my.domain.com.pfx "mypassword" "myalias"<\/P> ou <\/P> updatesslcertificate.bat <\/SPAN>my.domain.com<\/SPAN>.pfx "mypassword"<\/SPAN> "myalias"<\/SPAN><\/P><\/P>la sortie retourne une erreur :<\/P>Erreur rencontrée : Le data store n'a peut-être pas été initialisé.<\/STRONG><\/SPAN><\/P><\/P>info supplémentaire :<\/P>J'utilise cette aide :<\/P>Remplacer le certificat SSL d'ArcGIS Data Store rcGIS Data Store (Windows) Guide d'installation | Documentation pour ArcGIS Ent <\/P>quand j'ouvre https:\/\/localhost:2443\/arcgis\/datastore\/<\/A> , la page s'ouvre correctement pour créer un datastore, et j'essaie de remplacer ce SSL avant de créer un DataStore.<\/P>J'exécute la commande dans le répertoire d'installation : C:\Programs and Files\ArcGIS\DataStore\Tools<\/P> <\/P> Windows Server 2016 sur Azure<\/P> Enterprise 10.7.1<\/P> Service Windows ArcGIS Datatore en cours d'exécution<\/P> Répertoire d'installation ArcGIS : C:\Programs and Files\ArcGIS\DataStore\<\/SPAN><\/P><\/P>merci d'avance<\/P><\/P>enterprise 10.7.1\u200c datastore commands\u200c datatore\u200c ssl\u200c <\/P><\/BODY><\/HTML>

ChristopherPawlyszyn · Answer

The certificate would have to include either a CN or SAN entry that would cover the URL you're using to access the Data Store URL. Typically when we run into issues with customers using their Web Adaptor SSL certificate on all endpoints for ArcGIS Enterprise's internal web servers, the Web Adaptor certificate covers the public-facing URLs or DNS aliases without including the internal machine FQDNs. We have logged a documentation defect internally to fix the misinformation on the Data Store configuration page in terms of importing the certificate prior to the initial configuration.

RenatoTeixeira1 · Answer

I found out that the tool only works after I have joined ArcGIS Server, so I decided to give up on this certificate and use Self-Signed, and my certificate is a wildcard issued by globalsign and ArcGIS is not making it secure even by installing root on the server. I really can't understand why, since the same certificate is used on the webserver for the webadaptor and it works.

tx

ChristopherPawlyszyn · Answer

Hi RENATO TEIXEIRA,

Have you tried importing the certificate following the configuration of the ArcGIS Data Store with the associated Server site? We have a defect in the works regarding the logic of the updatesslcertificate tool, but that is the established workaround for the time-being. Hope that helps! Otherwise as Jeff suggested a support case may be helpful to pursue some additional troubleshooting angles.