topic Re: Hosting server grayed out unable to select Hosting server in ArcGIS Enterprise Questions

Hosting server grayed out unable to select Hosting server

KennethBusby — Tue, 07 Aug 2018 21:17:32 GMT

The following message is in a flyout when I put my cursor over the server.

"The federated server uses a non-ArcGIS Data Store as the ArcGIS Server's Managed Database and cannot be set as a hosting server."

I have installed Arcgis Data Store and followed the instructions but it is not showing up.

anyone have this issue?

ArcGIS_DataStore_Windows_1061_163980

Re: Hosting server grayed out unable to select Hosting server

JeffSmith — Mon, 20 Aug 2018 17:34:57 GMT

I think this may be caused by an SSL certificate trust issue. I'd recommend checking the certificate used by Server over 6443. If this is a certificate that was imported into Server, can you confirm that Portal trusts the certificate authority that signed the certificate? If this is the default self-signed certificate that was generated when Server was installed, can you confirm that the hostname listed in the Server admin url matches the common name for the certificate? Another good way to test if Portal trusts the certificate is to use the checkUrl.jsp endpoint.

https://portal.mydomain.com/portal/sharing/checkUrl.jsp?url=https://server.mydomain.com:6443/arcgis/admin

If this comes back with an http 200 response, the certificate is trusted. If this comes back with an error, it is likely a certificate issue.

Once the certificate is trusted, the Hosting Server should not be grayed out.

Re: Hosting server grayed out unable to select Hosting server

ZahinaKhan — Fri, 21 Sep 2018 14:42:24 GMT

Did you configure the ArcGIS Data store as a relational data-store with ArcGIS Server?

Do you have any enterprise database that is configured as managed database with the ArcGIS Server?

Re: Hosting server grayed out unable to select Hosting server

AdamCottrell — Thu, 03 Jan 2019 21:17:02 GMT

Kenneth, did you every get this figured out?

I'm having the same issue and yes, my site has a trusted SSL, and yes, the data store has been configured as a relational and no, I do not have an enterprise DB set up as a managed DB with ArcGIS Server. Mine is a fresh install. Any help would be greatly appreciated. Kenneth, did you every get this figured out?

Re: Hosting server grayed out unable to select Hosting server

JonathanQuinn — Fri, 04 Jan 2019 00:34:26 GMT

Check the network requests when loading the My Organization page. If you see a request from Portal to the Admin API of Server through the Admin URL you used to federate failing with a 403 error, then the problem is that the Portal doesn't trust the certificate used for the Admin URL as Jeff Smith‌ mentioned. The Portal is attempting to determine if the Server has a registered relational Data Store and if that request fails, the option will be disabled. The Portal logs would also contain an error about a certification path not being trusted.

If all requests return a 200, then you may have to look at the response of the request I mentioned above to check what's returned.

Re: Hosting server grayed out unable to select Hosting server

AdamCottrell — Fri, 04 Jan 2019 13:47:33 GMT

Thank you for your quick response. I did the network request lookup and I am getting an error. A 500 error. I also checked the logs and I am receiving a Invalid SSL certificate found. PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

The funny thing, both the Portal and Server are on the same machine and I have both of them using the same imported CA SSL Cert. IIS has it binded to 443, I have imported the .pfx to both Portal and Server Apps, and pointed both apps to this imported PFX. Both Portal and Server, when browsing to the web adaptor URL, show that they are trusted.

Any ideas? What I'm I missing?

Re: Hosting server grayed out unable to select Hosting server

AdamCottrell — Fri, 04 Jan 2019 14:16:08 GMT

Here's an update... I went to Portal admin > Federation > Servers > Server ID > Update > Set the server as hosting server from the Server role drop-down menu. This seemed to have done the trick. Curious if this is a bug?

Re: Hosting server grayed out unable to select Hosting server

JonathanQuinn — Fri, 04 Jan 2019 19:36:45 GMT

There's more logic within the home application/My Organization page to ensure that you have a relational Data Store, which is the request from Portal to the Admin API to get the list of registered Data Stores. You're bypassing that logic by updating the federated Server manually, so it's not a bug.

Did you import the certificate into Portaladmin through the Import Root or Intermediate Certificate operation?

Configuring the portal to trust certificates from your certifying authority—Portal for ArcGIS (10.6) | ArcGIS Enterpri…

Re: Hosting server grayed out unable to select Hosting server

AdamCottrell — Fri, 04 Jan 2019 19:43:00 GMT

I used the option "Import Existing Server Certificate" because I thought it was an existing since I had already exported from IIS. Do I need to remove this and import it as "Import Root or Intermediate"? I did this for both Portal and Server so I'm guessing I will need to do it there too.

Re: Hosting server grayed out unable to select Hosting server

JonathanQuinn — Fri, 04 Jan 2019 20:03:41 GMT

The Import Existing Server Certificate option is used if you want to use your own certificate for the 6443 and 7443 endpoints for Server and Portal. The Import Root or Intermediate operation is used to tell Portal to trust certificates. You don't need to remove anything, just import your certificate using the Import Root or Intermediate operation. If you want to use the same alias, you'll need to remove any existing certificates first.

Re: Hosting server grayed out unable to select Hosting server

AdamCottrell — Fri, 04 Jan 2019 21:03:53 GMT

OK - I'm experiencing issues trying to import this PFX file that way. Portal does not give me an error and I see nothing in the logs. Server, on the other hand, I am getting nothing in the logs but, when I click import, Importing CA certificate failed. I'm wondering if this is because I first imported as existing certificate. I'm wondering if I just need to do a reinstall. These are fresh installs so there are no services or portal groups/content created yet.

Re: Hosting server grayed out unable to select Hosting server

JonathanQuinn — Fri, 04 Jan 2019 21:19:35 GMT

Are you using a wildcard certificate? Do you have the root certificate in .cer format? You can export the certificate from your browser and import it into Portal. There's no need to reinstall to fix this problem.

Re: Hosting server grayed out unable to select Hosting server

AdamCottrell — Fri, 04 Jan 2019 21:22:27 GMT

Yes. It is a wildcard certificate. I used IIS to export it. It is in a PFX file format. Going through browser only lets me export it in 2 CER file formats or P7B. According to documentation, Esri wants to use PFX or P12.

edited...

OK - So I went ahead and exported the CER file and imported it successfully through the Import Root or Intermediate. I'm a little confused because it shows up exactly like the one that I imported through the other method. So both are listed there now but I'm still using the first one that i imported. I did this previously by the "Edit" operation so I can use this one instead of the selfsignedcertificate. I did all this (both portal and server) previous to federating Arcgis Server. So I'm still confused as to what the difference/mechanism that is going on behind the scenes because, through the admin directory, it appears to be the same. ...and the hosting server is working going through the Admin URL. So I guess I'm good.

Jonathan, I cannot thank you enough for your time. I truly appreciate!

Re: Hosting server grayed out unable to select Hosting server

EdgarIparraguirre — Thu, 21 Mar 2019 23:40:23 GMT

Yes, it has also solved my issue and I agree this is bug. Also (in my case) I am quite sure it has nothing to do with certificates validity. In my case, I had remove the federation an Portal, then installed Portal. The federation went fine with no issue, but I got the issue with DS. Prio to removing Portal and the federation, all certificates were valid and still are - so I suppose there is more than one cause triggering the issue ...

Funny, I had the same issue on a Ubuntu 16.04 enviroment (mine is Windows). Comparing to another installations, we corrected the server type .... and everything went then right. Obviously, we had concluded then "odd thing, it must be one-off" and forgot about how we solved ... until I got the same issue today.

Re: Hosting server grayed out unable to select Hosting server

JonathanQuinn — Thu, 21 Mar 2019 23:50:47 GMT

The only time I've seen the hosting server list is greyed out is when the certificate isn't trusted.

Portal makes a request for the data store items via the Portal's internal proxy. If Portal doesn't trust the certificate, then the request fails and the drop down is greyed out, as it can't get a response that indicates the federated Server has a registered relational Data Store.

The network traffic will capture the 403, indicating that the URL is not trusted, and the Portal logs will record an error about the certification path not being trusted.

The certificate itself could be valid, sure. I typically use a certificate issued from our domain certificate authority. It's 100% valid, but the Portal will never trust that certificate by default because it's not in the trust store. If you use the self-signed certificate, then it's trusted by Portal by default.

If you see this, check the network traffic, and you see that a) the request for the data store items is a 200 and the request body contains the information for the registered relational ArcGIS Data Store, then yes, I could see this as a bug.

Re: Hosting server grayed out unable to select Hosting server

EdgarIparraguirre — Sun, 24 Mar 2019 15:55:50 GMT

Jonathan,

I suppose I have not expressed myself clearly. The system – which I was referring to – was working perfectly and configured with valid certificates, including the corresponding CA’s. Also everything operating through Web Adaptors (IIS).

Due to a coupled of changes which rendered Portal inaccesible for us. So we decided to uninstall Portal – loosing federation was not relevant as it concerned a play-ground machine.

After installing Portal again, we recreated the AGE federation with no issue, except for the issue regarding Data Store. Before we federated AGE we took care of loading the Portal Server certificate & root CA’s – as for replacing the self-signed certificate. In essence, all the individual components were configured with valid certificates prior federation.

Being that all involved certificates were valid, I still do not see a) why the issue can be related to untrusted certificates, and b) it only suffices to select HOSTING_SERVER to solve the issue.

As a final remark, that the issue has only be seen by Esri Inc when related to untrusted certificates, it does not mean that it cannot due to different causes.

Regards,

Edgar.

Re: Hosting server grayed out unable to select Hosting server

FardoshtAmirpanahi2 — Mon, 27 Jan 2020 14:29:21 GMT

Hi Jonathan,

I have the server and portal running on a single AWS instance. The SSL is issued for the DNS of this server for port 443. I have imported the certificate into Portaladmin through the Import Root or Intermediate Certificate operation. I have configured both the web adapters, and configured relation and tile DS on this server. The server and the portals are federated, and it is valid. Both the server and portal home are accessible via an ELB from outside.

But, the server is disabled under the Hosting Server dropdown list, and I get this message from the checkUrl.jsp.

{   "success": false,   "error": {"message": "Unknown Exception"} }

Regards,

Fardosht

Re: Hosting server grayed out unable to select Hosting server

EdgarIparraguirre — Tue, 28 Jan 2020 09:33:51 GMT

It might be related at the AGS Admin URI configured in Portal, it might still be pointing to the internal server name

Re: Hosting server grayed out unable to select Hosting server

MarianneCaouette1 — Sun, 12 Dec 2021 00:49:12 GMT

Hello ,

I actually have a similar error and we cannot understand which configuration is causing the undesired behavior.

All certificated seems to be correctly in position; if I execute the :

https://portal.mydomain.com/portal/sharing/checkUrl.jsp?url=https://server.mydomain.com:6443/arcgis/admin

I get also

{   "success": false,   "error": {"message": "Unknown Exception"} }

Has Anyone found any solution?

I logged an error when I try to select the hosting server in the portal admin.



where 
https://portal.agiro.org/arcgis is my portal 
and 
https://apelaapp01.apel.dom:6443 is my internal server

If I try the string on my server it works....

Any help from the world is welcome

GIancarlo

Re: Hosting server grayed out unable to select Hosting server

JonathanQuinn — Tue, 09 Jun 2020 16:40:29 GMT

Did you import your own certificate to use for port 6443? If so, can you describe how the certificate was created, (CN, who it's signed by, etc).