topic Re: Can you add data using ArcMap 10.6.1 from Portal 10.5? in ArcGIS Enterprise Questions

Can you add data using ArcMap 10.6.1 from Portal 10.5?

BillFox — Tue, 09 Oct 2018 16:51:06 GMT

Several desktop users have reported this error:

After updating ArcMap from 10.5.1 to 10.6.1 they're getting this ArcMap popup error when they try to add data from Portal.

The request was aborted: Could not create SSL/TLS secure channel.

Re: Can you add data using ArcMap 10.6.1 from Portal 10.5?

ChadKopplin — Tue, 09 Oct 2018 20:33:32 GMT

Yes you can if all you do is upgrade your desktop software to 10.6.

Re: Can you add data using ArcMap 10.6.1 from Portal 10.5?

BillFox — Tue, 09 Oct 2018 23:15:31 GMT

Hi Chad,

I just tested what you recommended (10.5.1 to 10.6.0) and it works fine bringing in content from Portal 10.5.0

What changed at 10.6.1 to break it?

Re: Can you add data using ArcMap 10.6.1 from Portal 10.5?

RandallWilliams — Thu, 11 Oct 2018 21:46:10 GMT

Which SSL and TLS versions are you supporting at the web tier? On the desktop machines, which versions of .Net framework are installed?

My hunch is that as a client .net on your desktop machines wants to connect using TLS 1.2 but doesn't have the right .net cersion to do that. Try installing .Net framework 4.6 on a test machine and see if that helps.

Re: Can you add data using ArcMap 10.6.1 from Portal 10.5?

BillFox — Thu, 11 Oct 2018 23:34:22 GMT

Just verified with esri support:

Fixed at Portal 10.6.1

Severity: High

#BUG-000104437 Viewing content from Portal for ArcGIS in ArcMap with TLSv1 disabled results in an error.

Re: Can you add data using ArcMap 10.6.1 from Portal 10.5?

BillFox — Thu, 11 Oct 2018 23:45:23 GMT

Clients at Windows 10 that lists installed feature .Net Framework 4.7 Advanced Services.

Portal server is 2008 R2 with .Net 4.7.2

Re: Can you add data using ArcMap 10.6.1 from Portal 10.5?

BillFox — Fri, 12 Oct 2018 00:17:09 GMT

Esri's TLS Guidance attached here:

Re: Can you add data using ArcMap 10.6.1 from Portal 10.5?

RandallWilliams — Fri, 12 Oct 2018 13:37:11 GMT

Hi Bill,

I'm very familiar with that bug, I helped test the fix that was installed for 10.6.1 - I also helped write the TLS Whitepaper you posted (thanks for promoting it!)

The add data>from portal issue when the server only supports TLS 1.2 should be fixed in 10.6.1 - we're working on patches for previous versions.

Can you confirm your Desktop versions and the TLS versions you're supporting on your portal? ArcGIS Desktop 10.6.1 connecting to a portal that only supports TLS 1.2 should work (my personal portal only supports TLS 1.2, and I run Windows 10 as a client). Seems there's more to this than that bug.

Re: Can you add data using ArcMap 10.6.1 from Portal 10.5?

BillFox — Fri, 12 Oct 2018 17:20:36 GMT

Hi Randall,

The ArcMap 10.6.1 users that reported this also say they can add data from portal 10.5 from existing mxd files they had before updating to ArcMap 10.6.1

If they try with a new mxd they get that error

Desktop user are running Windows 10 Pro 1709

Re: Can you add data using ArcMap 10.6.1 from Portal 10.5?

BillFox — Fri, 12 Oct 2018 17:34:48 GMT

From my win 10 desktop, opening portal's url with ie 11 > page > properties

Connection: TLS 1.0, AES with 256 bit encryption (High); ECDH_P256 with 256 bit exchange

Randall Williams‌

Re: Can you add data using ArcMap 10.6.1 from Portal 10.5?

RandallWilliams — Fri, 12 Oct 2018 17:41:59 GMT

Ah. The plot thickens. This is good. Can you browse to http://portal.domain.com/webadaptor/portaladmin/security/sslCertificates (replacing the placeholders with your Portal instance particulars), log in as an admin to the portal administrator API, and check the Web Server SSL Protocols: value? If it says TLS 1.0, TLS 1.1, and TLS 1.2 I'll have more to offer. I'd like to check what the portal is supporting. Either the portal or the web adaptor server don't support TLS 1.2, and I think that's the issue.

Re: Can you add data using ArcMap 10.6.1 from Portal 10.5?

BillFox — Fri, 12 Oct 2018 19:21:39 GMT

Portal Administrator Directory

Web Server SSL Protocols:

TLSv1.2,TLSv1.1,TLSv1

Re: Can you add data using ArcMap 10.6.1 from Portal 10.5?

BillFox — Fri, 12 Oct 2018 20:30:35 GMT

ArcGIS Server is on its own machine separate from portal and it lists this:

Security/Config

SSL Protocols:

TLSv1.2,TLSv1.1,TLSv1

From my win 10 desktop, opening ArcGIS Server's home > security > config url with ie 11 > page > properties

Connection: TLS 1.2, AES with 256 bit encryption (High); ECDH_P256 with 256 bit exchange

This is different than the reply from the portal url above.

TLS 1.0 vs. TLS 1.2

The web adaptors for ArcGIS Server and Portal are on the same machine as Portal

Randall Williams‌

Re: Can you add data using ArcMap 10.6.1 from Portal 10.5?

BillFox — Fri, 14 Dec 2018 22:09:26 GMT

Here's the fixed it URL, I mean PURL (;Parallel Universe Resource Locator;)

https://community.esri.com/community/esri-software-security-privacy/blog/2018/12/13/portal-for-arcgis-critical-security-patch-elevation-of-privilege-vulnerability

Randall Williams‌ George Thompson‌ Peter Buwembo‌