topic ArcGIS Server - Utilities - PrintingTools - • Export Web Map Task in ArcGIS Enterprise Questions

ArcGIS Server - Utilities - PrintingTools - • Export Web Map Task

ElizabethNolan — Wed, 03 Jan 2018 21:12:00 GMT

We are experiencing an issue where if a ArcGIS server is set to HTTPS only or HTTP and HTTPS only then we cannot "Execute Task" on the Export Web Map Task using a url with https. If we set the url to http is works fine. On a HTTP only ArcGIS server with works fine.

The error that we are getting is:

Unable to complete operation.
Error executing tool. Export Web Map Task : Layer "layer0": Unable to connect to map server at https://services.arcgisonline.com/ArcGIS/rest/services/World_Street_Map/MapServer. Failed to execute (Export Web Map). Failed to execute (Export Web Map Task).

On the ArcGIS server itself we are getting this error in the logs:

SEVERE

Jan 3, 2018, 3:48:11 PM

Error executing tool. Export Web Map Task : Layer "layer0": Unable to connect to map server at https://services.arcgisonline.com/ArcGIS/rest/services/World_Street_Map/MapServer. Failed to execute (Export Web Map). Failed to execute (Export Web Map Task).

Utilities/PrintingTools.GPServer

And this warning:

WARNING

Jan 3, 2018, 3:48:11 PM

The certificate authority is invalid or incorrect (WinINet ERROR_INTERNET_INVALID_CA, 12045), URL = https://services.arcgisonline.com/ArcGIS/rest/services/World_Street_Map/MapServer?f=json

Utilities/PrintingTools.GPServer

Ideas on how to resolve this would be great.

I have tried many different scenarios including

Getting the proxy server from GitHub, and testing it to make sure that it works.

Changing the cert, updating the cert, importing a new cert.

Adding the cert to all locations on the window's side.

Netstat to check the ports, and the porta are opened.

I can access the url outside of export map, on the ArcGIS server.

In fiddler I get a 304 not modified. I can see that a token was generated, the token life in the header is set to 60 minutes, but on the server the lifespan is 1 year for all generated tokens.

I will take any suggestions I can. We also opened a ticket with ESRI and they are also looking into this.

Re: ArcGIS Server - Utilities - PrintingTools - • Export Web Map Task

Juan_ManuelAngel — Tue, 09 Jan 2018 21:43:37 GMT

Try to configure the Intermediate Certificate in your ArcGIS Server or run a SSL Certificate Checker to verify that the certificate its ok.

Re: ArcGIS Server - Utilities - PrintingTools - • Export Web Map Task

RandallWilliams — Wed, 10 Jan 2018 15:02:22 GMT

Sounds like you need to add the root certificate to the machines Trusted Toot Certificate Authorities Store.

Step 1 - Download All Certs and Chains

Open the website in question via HTTPS.
Click on the lock icon/shield icon in the browser > View Certificate > Install Certificate...
Choose "Place all certificates in the following store" > Browse > Personal > OK > Finish
Look at the "Certification Path" and identify if additional certificates are in a chain.
1. If another certificate exists in the chain above the one you installed above, click on it and click View Certificate.
2. Repeat steps 2-4 above until all certificates have been added to your Personal certificate store.

Step 2 - Access Certificate Manager Console

Start > Run > "mmc" to launch the Microsoft Management Console (MMC)
Click File > Add/Remove Snap-in
Select "Certificates" > Add > My User Account
Select "Certificates" > Add > Computer Account
Click OK

Step 3 - Copy Certificates into Local Computer Store

Note Step 1.4 above, where you viewed the certification path. Here we need to use that information to install a certificate path into the Local Computer certificate store.
Within the Certificate Management Console created in Step 2 above, expand Certificates - Current User > Personal > Certificates.
1. Locate the certificate from the top of the chain (this is the root ceritificate authority) and drag this into Certificates - Local Computer > Trusted Root Certification Authorities > Certificates.
2. If applicable, locate the "middle chain" aka Intermediate Certifiates, and drag them certificate into Certificates - Local Computer > Intermediate Certification Authorities > Certificates.
3. Locate the final certificate (bottom of the chain) and drag that into Certificates - Local Computer > Trusted Publishers > Certificates.

Step 4 - Restart ArcGIS Server

Type "services" in start menu search dialog and select it from the list
select ArcGIS Server service and click "restart"

Re: ArcGIS Server - Utilities - PrintingTools - • Export Web Map Task

MichaelVolz — Wed, 30 Oct 2019 19:19:32 GMT

Thank you so much for these instructions Randall