Importing CA certificate failed.

Question

Importing a .pfx and I get the error 'Importing CA certificate failed'. I don't know why and I'm not sure where to begin with troubleshooting this as the error message doesn't give me much to go on. Any ideas?

MarcelBalcarek · Answer

Hi csa aus,

I tried importing the certificate (pfx with all certs) via IIS and via certmgr.msc. Both appeared to work.

I do not see the certificate I want to use under: http://server:6080/arcgis/admin/machines/Server.Domain.LOCAL/sslcertificates

When I try to importRootOrItermediate  via http://server:6080/arcgis/admin/machines/Server.Domain.LOCAL/sslcertificates/importRootOrIntermediate

I continue to get 'Importing CA Certificate Failed'.

In my case we have a wildcard certificate *.extdomain.com which is for a different domain than the local GIS server. I want to use it to expose the rest services to the outside world. e.g.

Using http://abc.extdomain.com/arcgis/rest/services works internally

We need to use: https://abc.extdomain.com/arcgis/rest/services in the outside world.

Can you clarify anything that might help?

Thank you, Marcel

csaaus · Answer

Seem to have resolved the issue - issuing the .pfx via IIS instead of certmgr.msc, the certificate was able to be imported. Now running happily on HTTPS.