topic Re: ArcGIS Data Store Breaks pg_hba.conf File During Upgrade in ArcGIS Enterprise Questions

ArcGIS Data Store Breaks pg_hba.conf File During Upgrade

RyanUthoff — Mon, 02 Feb 2026 15:11:13 GMT

I just upgraded one of our ArcGIS Enterprise environments from 11.2 to 11.5 and noticed that the upgrade "breaks" the pg_hba.conf file in the ArcGIS Data Store.

When using the allow connection data store command line tool to allow connections to the ArcGIS Data Store, it adds them to the pg_hba.conf file like this: host db username ip/hostname scram-sha-256

However, after upgrading to 11.5, the upgrade changed all the entries from "host" to "hostssl" which breaks any and all connections to it (including the ArcGIS Server). For example, it changed it to this: hostssl db username ip/hostname scram-sha-256

After upgrading, all of my hosted services didn't work and saw a "bad user login" message in the ArcGIS Server logs. Luckily, I've worked with the ArcGIS Data Store enough to know what this message means.

Running the allow connection data store command "fixes" this by adding a new entry with only the "host" option.

What I am looking for is a little bit of clarity on why this happened, because it appears that the ArcGIS Data Store isn't even compatible with any "hostssl" connections in the first place for two reasons:

The previously existing ArcGIS Server entry in the pg_hba.conf file didn't work by default after the upgrade, nor did the Esri upgrade mitigate this by adding a new "host" only entry.
Even after upgrading, the allow connection data store command line adds entries only as "host" and not "hostssl", despite the upgrade changing everything to "hostssl".

I'm unable to find anywhere in Esri's upgrade documentation stating that re-adding entries to the pg_hba.conf file is a required step, so I'm just wondering why Esri changes all of the entries in the pg_hba.conf file when it's not even compatible in the first place?

If anything, hopefully this will help others who encounter this issue considering this is not a documented step in the upgrade process.

Re: ArcGIS Data Store Breaks pg_hba.conf File During Upgrade

DavidColey — Mon, 02 Feb 2026 15:23:17 GMT

HI @RyanUthoff - and you are using CA-signed certs across your deployment I assume?

Re: ArcGIS Data Store Breaks pg_hba.conf File During Upgrade

RyanUthoff — Mon, 02 Feb 2026 15:24:03 GMT

Yep!

Re: ArcGIS Data Store Breaks pg_hba.conf File During Upgrade

DavidColey — Mon, 02 Feb 2026 15:53:44 GMT

hmmm. Well, wish I had more to tell you. I did not experience this going from 11.2 >11.3 >11.4 or 11.4 > 11.5. or from 11.5 > 12.0 .It is interesting that the help https://enterprise.arcgis.com/en/get-started/latest/windows/what-s-new-in-arcgis-enterprise.htm doesn't include "11.2" as a "other version" that you can toggle to.

Re: ArcGIS Data Store Breaks pg_hba.conf File During Upgrade

RyanUthoff — Mon, 02 Feb 2026 15:57:51 GMT

Esri removed all of the 11.2 documentation that you can select from in the toggles because it's already in mature support (at least, I'm assuming that's the reason).

But yeah, it's definitely strange that we encountered that issue. I'm assuming it's not a common issue, otherwise there would have been a fix for it, or at least talked about here. But I was just posting here in case anyone had also encountered that issue. Or to hopefully help someone else who's actively experiencing the issue.

Re: ArcGIS Data Store Breaks pg_hba.conf File During Upgrade

DavidColey — Mon, 02 Feb 2026 18:01:48 GMT

indeed - this is definitely the first I heard of this is here.