topic Re: PKIX Exception in Portal using Utility services in ArcGIS Enterprise Questions

PKIX Exception in Portal using Utility services

RubénPérez_Planillo — Wed, 01 Aug 2018 11:31:46 GMT

Hello,

I have implemented a fully ArcGIS Enterprise Base Deployment (only https with a valid certificate in IIS). I have configured it to use ArcGIS utility services, embedding an arcGIS valid user.

But, when I try to use it (for example create a buffer around point features in the map viewer) an exception arise:

"Create Service exception ' Exception: sun.security.validator.ValidatorException: PKIX path building failed: host unable to find valid certification path to requested target'"

I know this is about SSL certificates and I add some certificates to portal repository (portal/portaladmin/security/sslCertificates/) including the IIS certificate and ArcGIS certificate (I'm desperate... )

What I have to do to fix this??

thanks!!!

Re: PKIX Exception in Portal using Utility services

RandallWilliams — Wed, 01 Aug 2018 20:57:21 GMT

Export the certificate using the 'Certificates' snap in in MMC. Choose to export the private key. Use .pfx format. Use the wizard to define a username and password, and import. Also get and import the root cert.

Re: PKIX Exception in Portal using Utility services

RubénPérez_Planillo — Thu, 02 Aug 2018 06:00:53 GMT

Thanks for the answer!

But I don't understand what is the certificate to export (valid certificate from IIS?) and where to import it... I really don't understand where is the problem: server side or client side...

Re: PKIX Exception in Portal using Utility services

JonathanQuinn — Thu, 23 Aug 2018 18:31:55 GMT

It's likely that the certificate that is used for the admin URL of the federated/hosting server isn't trusted by Portal. Is it a self signed certificate? If not, is it a certificate from your domain signing authority, or a wildcard certificate?

Re: PKIX Exception in Portal using Utility services

RubénPérez_Planillo — Fri, 24 Aug 2018 06:49:18 GMT

Thank you, Jonathan!

Finally I fixed it configuring the IIS certificate (valid server certificate) in server and portal.

I mean, not only installing it but configuring it as active certificate in both.