nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

TLS Configuration 1.2 does not take effect on ArcGIS Server 10.9.1

Felipe_Costa

Hello,

Recently I have updated the security configuration on ArcGIS Server, running the version 10.9.1 to use the TLS 1.2. However, even limiting the only for the mentioned version, this server is still supporting the version 1.1 on the port 6443.

I only modified the security configuration on ArcGIS Server Admin page. Is there any other configuration that I should have changed?

Thanks a lot!
Felipe

TLS.PNG

BenjaminOgren_1-1725992068568.png

Vind meer berichten getagd met

Accepted answers

Felipe_Costa

Hi Jeff,

Amazing! I removed the permission for the account running the ArcGIS Server and applied it again. After I ran the OpenSSL and the version accepted was only the 2.2.

Thank you for your help!

Best regards,

Felipe

All comments

JeffSmith

Hi Felipe,

When you make any changes to the Server security configuration, Server should restart automatically. Just to be absolutely certain, you might try restarting the Server service. Limiting it to TLSv1.2 is fine. Was the 10.9.1 system upgraded from an earlier release? I ask because 10.9.1 only enables TLSv1.2 and TLSv1.3 by default so I was wondering if TLSv1.1 had been enabled previously from an older release.

Also, are you using OpenSSL to validate what TLS protocols are enabled?

Felipe_Costa

Hi Jeff,

Thank you for your answer!

Yes, the server restarted after the configuration was changed. I did this more than once, but the result was the same. Also yes, the system upgraded from the 10.8 to 10.9.1, and I configured manually to the TLSv1.2. Before I set the configuration to the TLSv1.2, it had also the configuration TLSv1.1.

What is weird is that I have done this to many severs with the same conditions, but only one didn't stop accepting TLSv1.1.

Yes, I am using the OpenSSL to validate the TLS protocol enabled. Here part of my script to check the protocol.
(OpenSSL.SSL.TLSv1_METHOD, "TLSv1.0"),
(OpenSSL.SSL.TLSv1_1_METHOD, "TLSv1.1"),
(OpenSSL.SSL.TLSv1_2_METHOD, "TLSv1.2"),

Many thanks!
Felipe

JeffSmith

Ok. That sounds fine. I wonder if it is a permission issue of some sort. I would double-check to make sure the account running the Server service has full control to the <ArcGIS root>\Server\framework folder. If that still doesn't help, I would recommend contacting technical support to have someone review your system a little more closely.

Felipe_Costa

Hi Jeff,

Amazing! I removed the permission for the account running the ArcGIS Server and applied it again. After I ran the OpenSSL and the version accepted was only the 2.2.

Thank you for your help!

Best regards,

Felipe

Doe mee aan het gesprek

Aangemelde leden kunnen berichten plaatsen, updates volgen en meer. Nieuw hier? Registreer een gratis account.

Snelle Links

Community Help
Find useful guides, FAQs, and documents to help you navigate and make the most of Esri Community.