Enterprise 10.7.1 を展開中に、Datastore の自己署名 ssl を自分の CA 証明書に置き換えたいのですが、PowerShell または cmd(管理者として)で次のコマンドを実行すると:<\/P>
<\/P>
.\updatesslcertificate.bat my.domain.com.pfx "mypassword" "myalias"<\/P>
または <\/P>
updatesslcertificate.bat <\/SPAN>my.domain.com<\/SPAN>.pfx "mypassword"<\/SPAN> "myalias"<\/SPAN><\/P><\/P>出力はエラーを返します:<\/P>エラーが発生しました: データストアが初期化されていない可能性があります。<\/STRONG><\/SPAN><\/P><\/P>追加情報:<\/P>このヘルプを使用しています:<\/P>Replace ArcGIS Data Store SSL certificateArcGIS Data Store (Windows) Installation Guide | Documentation for ArcGIS Ent<\/A> <\/P>次のページを開くと https:\/\/localhost:2443\/arcgis\/datastore\/<\/A> 、データストアの作成ページは正常に開きますが、DataStore を作成する前にこの SSL を置き換えようとしています。<\/P>インストールディレクトリ内でコマンドを実行しています: C:\Programs and Files\ArcGIS\DataStore\Tools<\/P><\/P>Azure 上の Windows Server 2016<\/P>Enterprise 10.7.1<\/P>ArcGIS Datatore Windows サービスが稼働中<\/P>ArcGIS インストールディレクトリ: C:\Programs and Files\ArcGIS\DataStore\<\/SPAN><\/P><\/P>事前にありがとうございます<\/P><\/P>enterprise 10.7.1 datastore commands datatore ssl <\/P><\/BODY><\/HTML>
次のページを開くと
インストールディレクトリ内でコマンドを実行しています: C:\Programs and Files\ArcGIS\DataStore\Tools<\/P>
Azure 上の Windows Server 2016<\/P>
Enterprise 10.7.1<\/P>
ArcGIS Datatore Windows サービスが稼働中<\/P>
ArcGIS インストールディレクトリ: C:\Programs and Files\ArcGIS\DataStore\<\/SPAN><\/P><\/P>事前にありがとうございます<\/P><\/P>enterprise 10.7.1 datastore commands datatore ssl <\/P><\/BODY><\/HTML>
Hello. Several us on the Architecture & Security team have looked at this and believe this may be a mis-configuration of some sort and the recommendation is to contact Esri Technical Support for further guidance.
Hi RENATO TEIXEIRA,
Have you tried importing the certificate following the configuration of the ArcGIS Data Store with the associated Server site? We have a defect in the works regarding the logic of the updatesslcertificate tool, but that is the established workaround for the time-being. Hope that helps! Otherwise as Jeff suggested a support case may be helpful to pursue some additional troubleshooting angles.
I found out that the tool only works after I have joined ArcGIS Server, so I decided to give up on this certificate and use Self-Signed, and my certificate is a wildcard issued by globalsign and ArcGIS is not making it secure even by installing root on the server. I really can't understand why, since the same certificate is used on the webserver for the webadaptor and it works.
tx
The certificate would have to include either a CN or SAN entry that would cover the URL you're using to access the Data Store URL. Typically when we run into issues with customers using their Web Adaptor SSL certificate on all endpoints for ArcGIS Enterprise's internal web servers, the Web Adaptor certificate covers the public-facing URLs or DNS aliases without including the internal machine FQDNs. We have logged a documentation defect internally to fix the misinformation on the Data Store configuration page in terms of importing the certificate prior to the initial configuration.
サインインしたメンバーは投稿、更新のフォローなどができます。初めてですか?無料アカウントを登録してください。
Find useful guides, FAQs, and documents to help you navigate and make the most of Esri Community.