https://community.esri.com/t5/arcgis-enterprise-questions/arcgis-server-10-8-1-port-6080-ssl-cipher-suites/m-p/1155898#M32793 <P>any AGOL access too?</P><P><A href="https://enterprise.arcgis.com/en/server/latest/administer/windows/secure-arcgis-server-communication.htm" target="_blank">https://enterprise.arcgis.com/en/server/latest/administer/windows/secure-arcgis-server-communication.htm</A></P><P>&nbsp;</P> Mon, 21 Mar 2022 21:25:56 GMT BillFox 2022-03-21T21:25:56Z https://community.esri.com/t5/arcgis-enterprise-questions/arcgis-server-10-8-1-port-6080-ssl-cipher-suites/m-p/1155894#M32791 <P>Hello,</P><P>I have installed a standalone GIS Server 10.8.1 and our contractor wants both HTTP (6080) and HTTPS (6443) ports open. What should '<STRONG><EM>SSL Protocols</EM></STRONG>' and '<STRONG><EM>SSL Cipher Suites</EM></STRONG>' contain in order for HTTP (6080) port to work? -- see the first attachment</P><P>If I leave everything as is and just use an option 'HTTP and HTTPS' protocol and hit update it complains and gives me an <EM>error code 500 -&nbsp;One or more invalid HTTPS cipher suites</EM>. -- see the second attachment</P><P>I suppose ssl protocols and ssl cipher suites need additional suites in order for the port 6080 to work but unsure what. I appreciate your response.</P><P>&nbsp;</P><P>&nbsp;</P> Mon, 21 Mar 2022 21:20:57 GMT https://community.esri.com/t5/arcgis-enterprise-questions/arcgis-server-10-8-1-port-6080-ssl-cipher-suites/m-p/1155894#M32791 LC27 2022-03-21T21:20:57Z https://community.esri.com/t5/arcgis-enterprise-questions/arcgis-server-10-8-1-port-6080-ssl-cipher-suites/m-p/1155897#M32792 <P>TLS 1.2 also?</P><P><A href="https://enterprise.arcgis.com/en/server/latest/administer/windows/restrict-arcgis-server-ssl-protocols-and-cipher-suites.htm" target="_blank">https://enterprise.arcgis.com/en/server/latest/administer/windows/restrict-arcgis-server-ssl-protocols-and-</A><A href="https://enterprise.arcgis.com/en/server/latest/administer/windows/restrict-arcgis-server-ssl-protocols-and-cipher-suites.htm" target="_blank">cipher-suites.htm</A></P><P>&nbsp;</P> Mon, 21 Mar 2022 21:24:26 GMT https://community.esri.com/t5/arcgis-enterprise-questions/arcgis-server-10-8-1-port-6080-ssl-cipher-suites/m-p/1155897#M32792 BillFox 2022-03-21T21:24:26Z https://community.esri.com/t5/arcgis-enterprise-questions/arcgis-server-10-8-1-port-6080-ssl-cipher-suites/m-p/1155898#M32793 <P>any AGOL access too?</P><P><A href="https://enterprise.arcgis.com/en/server/latest/administer/windows/secure-arcgis-server-communication.htm" target="_blank">https://enterprise.arcgis.com/en/server/latest/administer/windows/secure-arcgis-server-communication.htm</A></P><P>&nbsp;</P> Mon, 21 Mar 2022 21:25:56 GMT https://community.esri.com/t5/arcgis-enterprise-questions/arcgis-server-10-8-1-port-6080-ssl-cipher-suites/m-p/1155898#M32793 BillFox 2022-03-21T21:25:56Z https://community.esri.com/t5/arcgis-enterprise-questions/arcgis-server-10-8-1-port-6080-ssl-cipher-suites/m-p/1155912#M32794 <P>Thank you for your prompt response.</P><P>No AGOL access.&nbsp;<SPAN class="">TLSv1.2 is already there but does nothing in terms of enabling HTTP.</SPAN></P><P>&nbsp;</P><P>Based on the article you provided should SSL Protocols be updated in:&nbsp;<EM>TLSv1.1</EM>&nbsp;and&nbsp;SSL Cipher Suites in all these<I>?:</I></P><P>&nbsp;</P><UL><LI><SPAN class="">TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384</SPAN></LI><LI><SPAN class="">TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384</SPAN></LI><LI><SPAN class="">TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA</SPAN></LI><LI><SPAN class="">TLS_RSA_WITH_AES_256_GCM_SHA384</SPAN></LI><LI><SPAN class="">TLS_RSA_WITH_AES_256_CBC_SHA256</SPAN></LI><LI><SPAN class="">TLS_RSA_WITH_AES_256_CBC_SHA</SPAN></LI><LI><SPAN class="">TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256</SPAN></LI><LI><SPAN class="">TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256</SPAN></LI><LI><SPAN class="">TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA</SPAN></LI><LI><SPAN class="">TLS_RSA_WITH_AES_128_GCM_SHA256</SPAN></LI><LI><SPAN class="">TLS_RSA_WITH_AES_128_CBC_SHA256</SPAN></LI><LI><SPAN class="">TLS_RSA_WITH_AES_128_CBC_SHA</SPAN></LI><LI><SPAN class="">TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384</SPAN></LI><LI><SPAN class="">TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384</SPAN></LI><LI><SPAN class="">TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA</SPAN></LI><LI><SPAN class="">TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA256</SPAN></LI><LI><SPAN class="">TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA256</SPAN></LI><LI><SPAN class="">TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA</SPAN></LI></UL> Mon, 21 Mar 2022 21:49:24 GMT https://community.esri.com/t5/arcgis-enterprise-questions/arcgis-server-10-8-1-port-6080-ssl-cipher-suites/m-p/1155912#M32794 LC27 2022-03-21T21:49:24Z https://community.esri.com/t5/arcgis-enterprise-questions/arcgis-server-10-8-1-port-6080-ssl-cipher-suites/m-p/1155947#M32799 <P>you can give this tool a try</P><P><A href="https://www.nartac.com/Products/IISCrypto" target="_blank">https://www.nartac.com/Products/IISCrypto</A></P><P><SPAN>download and run best practice, then reboot the server</SPAN></P> Mon, 21 Mar 2022 23:58:31 GMT https://community.esri.com/t5/arcgis-enterprise-questions/arcgis-server-10-8-1-port-6080-ssl-cipher-suites/m-p/1155947#M32799 BillFox 2022-03-21T23:58:31Z