topic Re: ArcGIS Data Store - Import Root or Intermediate Certificate in ArcGIS Enterprise Questions

ArcGIS Data Store - Import Root or Intermediate Certificate

Ranga_Tolapi — Tue, 26 Sep 2023 14:53:04 GMT

How to import Import Root or Intermediate certificate in to ArcGIS Data Store (version 10.9.1)? Can use updatesslcertificate.bat utility for this purpose?

Something similar to ArcGIS Server, refer to below screenshot.

Re: ArcGIS Data Store - Import Root or Intermediate Certificate

AyanPalit — Tue, 26 Sep 2023 15:35:42 GMT

@Ranga_Tolapi You can use updatesslcertificate command utility

Reference: ArcGIS Data Store utility reference

Re: ArcGIS Data Store - Import Root or Intermediate Certificate

Ranga_Tolapi — Wed, 27 Sep 2023 00:03:57 GMT

@AyanPalit not found anything about Root or Intermediate certificate in the updatesslcertificate documentation.

Re: ArcGIS Data Store - Import Root or Intermediate Certificate

MiguelParedes — Wed, 27 Sep 2023 07:54:33 GMT

Greetings @Ranga_Tolapi

As far as I know, the Data Store does not require the Root and/or Intermediate certs. Only what is referred to as the "server" certificate (.pfx or .p12) I would assume because it is always accessed through port 2443 by the ArcGIS Server only, and never directly. It would be great if someone would corroborate whether my assumption is correct.

I found this excellent article from our friends at Esri Australia that you may find of help: SSL Certificates in ArcGIS Enterprise components. It is very complete, but it does lack an explanation about why the DS does not require the Root and Intermediate SSL Certs.

Hope the above helps.

Re: ArcGIS Data Store - Import Root or Intermediate Certificate

AhmadIssa78 — Thu, 28 Sep 2023 09:47:39 GMT

In ArcGIS Datastore machine(s) you need to run the command updatesslcertificate, after you install the certificate on the ArcGIS Server machine(s). no need for any ( Root or Intermediate) crt or p12 certificates installtion on the datastore

Re: ArcGIS Data Store - Import Root or Intermediate Certificate

Marc_Graham — Wed, 11 Oct 2023 21:08:35 GMT

We use the keystore explorer tool to import root and intermediate certificates. You can find the datastore user and password using the listadminusers tool https://enterprise.arcgis.com/en/data-store/latest/install/windows/data-store-utility-reference.htm#ESRI_SECTION1_0129E72EB76448C0A65B8534E84838A7

this is definitely required if you are updating your arcgis servers with a domain CA certificate and you want to establish a full cert chain.

This is poorly documented and supported by esri. it should have a similar admin interface to the rest of the stack.