topic Re: Wildcard SSL installation help! in ArcGIS Enterprise Questions

Wildcard SSL installation help!

Jay_Gregory — Mon, 10 Dec 2012 12:49:51 GMT

I have a relatively new installation of ArcGIS for Server 10.1. My IT department has provided a wildcard SSL cert from digicert to use on the server. However, the instructions to install a CA-signed certificate on the server are different: http://resources.arcgis.com/en/help/main/10.1/index.html#/Enabling_SSL_using_a_new_CA_signed_certificate/0154000005wr000000/

The instructs say I must generate a cert using the admin interface, then get our CA to sign it. Is that true? Can I not just install a wildcard SSL cert on the server?

Jay

Re: Wildcard SSL installation help!

BubbaHey — Tue, 11 Dec 2012 15:43:09 GMT

I've seen some probs with wildcard certs. You may have seen this but if not:

Enabling SSL on ArcGIS Serverhttp://resources.arcgis.com/en/help/main/10.1/index.html#//0154000005q0000000

Enabling SSL using the default self-signed certificate
http://resources.arcgis.com/en/help/main/10.1/index.html#/Enabling_SSL_using_the_default_self_signed_certificate/0154000005wq000000/

Enabling SSL using a self-signed certificate
http://resources.arcgis.com/en/help/main/10.1/index.html#/Enabling_SSL_using_a_self_signed_certificate/0154000005w7000000/

Re: Wildcard SSL installation help!

ZacharyHart — Tue, 11 Dec 2012 16:46:45 GMT

Jay,

Are you using the webadaptor to expose your GIS services? If so, you should just be able to import your certificate at the web server level, enabling SSL there (if not already which i'm guessing it already is), then secure your GIS server with SSL using the self-signed certificate as shown in the links above.

Re: Wildcard SSL installation help!

Jay_Gregory — Tue, 18 Dec 2012 14:50:04 GMT

Thanks all - I got it working. The wildcard cert worked by creating a cert from the admin utility specifying the actual hostname, then submitting that to our CA and creating a duplicate using our wildcard cert order.

Jay

Jay,

Are you using the webadaptor to expose your GIS services? If so, you should just be able to import your certificate at the web server level, enabling SSL there (if not already which i'm guessing it already is), then secure your GIS server with SSL using the self-signed certificate as shown in the links above.