topic Re: Patchnotification tool unable to connect to proxy with SSL interception enabled in ArcGIS Enterprise Questions

Patchnotification tool unable to connect to proxy with SSL interception enabled

ar_tw — Thu, 05 Jun 2025 00:58:22 GMT

We are using ArcGIS Enterprise in an environment with an outbound HTTPS proxy that performs SSL interception. While accessing HTTPS resources (such as https://downloads.arcgis.com) from a browser or using curl with our proxy CA installed works as expected, the ArcGIS Patch Notification Tool fails to connect, suggesting a trust or SSL handshake failure.

Loading the Root CA cert into Portal, and Server didn't seem to work. Which kind of makes sense - I doubt the patchnofitication tool actually goes to cehck the Portal cert store - I would imagine it is a stand alon application.

Investigation shows that loading the proxy CA into the java keystore (which has the default jks password):

<ArcGISInstall>\framework\runtime\jre\lib\security\cacerts

Allows connection to the proxy, and download of patches.

My problem is: is this a documented and supported solution.

Re: Patchnotification tool unable to connect to proxy with SSL interception enabled

Priya_Das — Wed, 11 Jun 2025 15:01:39 GMT

Hi @ar_tw

If you don't have internet access in ArcGIS Enterprise machine. You can configure proxy setting in patch notification tool

Re: Patchnotification tool unable to connect to proxy with SSL interception enabled

ar_tw — Fri, 13 Jun 2025 06:03:31 GMT

Yes, but for it to accept my proxy, I need to manually load the Root CA into <ArcGISInstall>\framework\runtime\jre\lib\security\cacerts

And this isn't documented or supported as far as I can tell - and as advised by Esri Support

Re: Patchnotification tool unable to connect to proxy with SSL interception enabled

SimonSchütte_ct — Mon, 08 Dec 2025 06:54:15 GMT

The topic was also discussed here: Solved: ArcGIS Enterprise Patch Notification: Connect to p... - Esri Community