ArcGIS DataStore - utilitário updatesslcertificate não funciona para substituir SSL

Question

<\/HEAD>Implantando Enterprise 10.7.1, quero substituir o ssl autoassinado do Datastore pelo meu próprio Certificado CA, quando executo updatesslcertificate no PowerShell ou cmd (como administrador) com o comando:<\/P> <\/P> .\updatesslcertificate.bat my.domain.com.pfx "minhasenha" "meualias"<\/P> ou <\/P> updatesslcertificate.bat <\/SPAN>my.domain.com<\/SPAN>.pfx "minhasenha"<\/SPAN> "meualias"<\/SPAN><\/P><\/P>a saída retorna um erro:<\/P>Erro encontrado: O data store pode não ter sido inicializado.<\/STRONG><\/SPAN><\/P><\/P>informações adicionais:<\/P>Estou usando esta ajuda:<\/P>Substituir certificado SSL do ArcGIS Data Store012012012012012012012012012012012012012012012012012012012 ArcGIS Data Store (Windows) Guia de Instalação | Documentação para ArcGIS Ent012012012012012012012012012012012012012012012...<\/A> <\/P>quando abro https:\/\/localhost:2443\/arcgis\/datastore\/<\/A> , a página abre ok para criar um datastore, e estou tentando substituir este SSL antes de criar um DataStore.<\/P>Estou executando o comando dentro do diretório de instalação: C:\Programs and Files\ArcGIS\DataStore\Tools<\/P> <\/P> Windows Server 2016 no Azure<\/P> Enterprise 10.7.1<\/P> Serviço ArcGIS Datatore windows em execução<\/P> Diretório de instalação do ArcGIS: C:\Programs and Files\ArcGIS\DataStore\<\/SPAN><\/P><\/P>obrigado antecipadamente<\/P><\/P>enterprise 10.7.1\u200c datastore comandos\u200c datatore\u200c ssl\u200c <\/P><\/BODY><\/HTML>

ChristopherPawlyszyn · Answer

The certificate would have to include either a CN or SAN entry that would cover the URL you're using to access the Data Store URL. Typically when we run into issues with customers using their Web Adaptor SSL certificate on all endpoints for ArcGIS Enterprise's internal web servers, the Web Adaptor certificate covers the public-facing URLs or DNS aliases without including the internal machine FQDNs. We have logged a documentation defect internally to fix the misinformation on the Data Store configuration page in terms of importing the certificate prior to the initial configuration.

RenatoTeixeira1 · Answer

I found out that the tool only works after I have joined ArcGIS Server, so I decided to give up on this certificate and use Self-Signed, and my certificate is a wildcard issued by globalsign and ArcGIS is not making it secure even by installing root on the server. I really can't understand why, since the same certificate is used on the webserver for the webadaptor and it works.

tx

ChristopherPawlyszyn · Answer

Hi RENATO TEIXEIRA,

Have you tried importing the certificate following the configuration of the ArcGIS Data Store with the associated Server site? We have a defect in the works regarding the logic of the updatesslcertificate tool, but that is the established workaround for the time-being. Hope that helps! Otherwise as Jeff suggested a support case may be helpful to pursue some additional troubleshooting angles.