nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Unable to install latest security patches for Portal for ArcGIS and ArcGIS Server (10.9.1)

arahman_mdmajid

We're having trouble installing the latest security patches for Portal for ArcGIS (Portal for ArcGIS Security 2025 Update) and ArcGIS Server (ArcGIS Server Security 2025 Update 1). When we try to install, we get an error saying "No installed products have the version 10.9.1".

We've also tried applying a previous patch that we've already installed, but we get another error: "Could not find any $HOME/.ESRI.properties.xyzx files matching this patch version (10.9.1)". We've checked our versions and system requirements, but can't seem to resolve the issue. Has anyone else encountered this problem?

Encontre mais publicações marcadas com

Accepted answers

arahman_mdmajid

We were able resolved the issue and would like to share the solution.

When we reverted back to the old version, there were some hidden files in the user home directory that were not restored to their original state. These files, maintained by each component installation on user/root home directory, are updated or rolled back during an upgrade. However, since we reverted back manually, these files were not restored to indicate the original version before the upgrade.

With the help of the ESRI support team, we located the .ESRI.properties.<FQDN>.11.3 files in the user's home directory, which can be accessed using the command "cd ~". These files are hidden, and to see them, you'll need to use the command "ls -la". We made copies of these files associated with the Portal, Server, and DataStore machines where we intended to install the patches and backed them up to another location.

We then renamed the original files from .ESRI.properties.<FQDN>.11.3 to .ESRI.properties.<FQDN>.10.9.1. After restarting the machines, we attempted to install the patch again, and it was successful.

All comments

George_Thompson

If you run the PatchFinder tool, what does it report?

It should at least report the version of Esri software installed.

What is the OS that you have 10.9.1 deployed on?

arahman_mdmajid

We're running Portal for ArcGIS on Red Hat Enterprise Linux Server release 7.9 (Maipo). Recently, we tried to upgrade from version 10.9.1 to 11.3, but the upgrade failed and reverted back to 10.9.1.

The Patch Finder and patchnotification tool shows that we have Portal for ArcGIS 11.3 installed, but the portal diagnostic tool indicate that we're still on version 10.9.1. Here are the results:

Patch Finder result:

 Searching Portal for ArcGIS ...

  *********Portal for ArcGIS install summary:********
  Portal for ArcGIS 11.3 Install Location: 
  /arcgis/portal
 
  Service Pack / Patch / Hot Fix Found:

  Patch-ID: Portal for ArcGIS 10.9.1 Security 2023 Update 1 Patch B
  Date Installed: 08/09/23 08:38:15

Portal Diagnostic Tool The portal diagnostic tool shows the following information:

========================================================================
                Portal for ArcGIS 10.9.1 Diagnostic Tool
                                    
                   Hostname: 
========================================================================

 DIAG000: Check for installation as root                       [PASSED]
 DIAG001: Check for 64-bit architecture                        [PASSED]
 DIAG002: Check OS version                                     [PASSED]
 DIAG003: Check hostname for invalid characters                [PASSED]
 DIAG005: Check system limits                                  [PASSED]
 DIAG004: Check installed packages                             [PASSED]
 DIAG016: Check Portal for ArcGIS ports                        [PASSED]
 DIAG024: Check localhost resolution                           [PASSED]
 DIAG029: Check file system type                               [PASSED]
 DIAG020: Check hostname IP address mismatches                 [PASSED]
 DIAG026: Check processes of Portal for ArcGIS core services   [WARNING]
 DIAG028: Check data directory                                 [PASSED]

------------------------------------------------------------------------
There were 0 failure(s) and 1 warning(s) found:


WARNINGS:
------------------------------------------------------------------------
*** DIAG026: One or more core services was not started.  Start Portal
for ArcGIS by running the startportal.sh script or restart Portal for
ArcGIS if it is already started.

The discrepancy between the Patch Finder results and the portal diagnostic tool is causing confusion. We're not sure where the 11.3 version is coming from and is there a way to rectify the situation?

George_Thompson

Yeah, that is a not what I would expect.

I would contact technical support and work with them on this. This is the best path forward.

It seems that the roll back was not 100% successful (given I am not sure how you did this).

MikeVolz

Can you explain how you rolled back the software (webgisdr, server backups, server snapshots, etc. with order of operations)?

arahman_mdmajid

We took snapshots of our HA machines and also took backup using WebGISDR. Server, and Data Store components were also backed up using their tools before attempting to upgrade from 10.9.1 to 11.3. However, we missed a crucial step and started the upgrade on RHEL 7.9 instead of RHEL 8, which caused the portal upgrade to fail.

After upgrading the OS to RHEL 8, we re-attempted the upgrade, but it failed again due to a bug (BUG-000167282). ESRI support advised us to proceed with upgrading the other components and provided files to resolve the issue. Unfortunately, this corrupted the index, and we were advised to revert back to our snapshots.

We restored our machines from the snapshots and the config store from a point-in-time backup. We are not entirely sure about the restored items in the config store as there was no way to check them except from their file modification time. We then switched the servers on on in the order of Data Stores, Server, and then Portal machines. Our Sever componenets came out unfederated which led us to join the sites again and restored from our server backup, which restored our published services. However, we encountered issues with data store validation and machine registration, which we eventually resolved by re-joining the data stores machine as well.

Now that everything is back to normal, we're trying to apply new security patches, but the Patch Finder shows 11.3 instead of 10.9.1, despite the admin interface showing 10.9.1. We're unsure why this discrepancy exists and would appreciate any guidance on resolving this issue.

TL;DR: We attempted to upgrade from 10.9.1 to 11.3, but it failed due to OS compatibility and a bug. We reverted back to our snapshots, restored our machines, and resolved issues with Server and Data Store machine registration. Now, we're trying to apply security patches, but the Patch Finder shows 11.3 instead of 10.9.1, causing confusion.

arahman_mdmajid

We were able resolved the issue and would like to share the solution.

We then renamed the original files from .ESRI.properties.<FQDN>.11.3 to .ESRI.properties.<FQDN>.10.9.1. After restarting the machines, we attempted to install the patch again, and it was successful.

Participe da Conversa

Membros conectados podem postar, seguir atualizações e mais. Novo aqui? Registre uma conta gratuita.

Links Rápidos

Community Help
Find useful guides, FAQs, and documents to help you navigate and make the most of Esri Community.