topic Re: Field maps on Windows Subsystem for Android in ArcGIS Field Maps Questions

Field maps on Windows Subsystem for Android

ScottEwart — Tue, 12 Sep 2023 20:44:15 GMT

We are trying to run Field Maps onto Windows 11 on the Android Subsystem. We can open field maps and can connect to AGOL. The problem is we want to use for our internal ArcGIS Enterprise. For ArcGIS Enterprise we use a certificate signed by the domain CA.

When we connect to our portal from Field Maps, we get an error about an untrusted certificate. The problem is there does not seem to be a (straight forward) way that we could load the root certificate onto the device.

Does anyone know how this would be done?

Re: Field maps on Windows Subsystem for Android

KPattison — Wed, 13 Sep 2023 06:10:48 GMT

Hey Scott,

I had a similar issue with getting Survey123 app working with our Enterprise deployment.

It ended up being that the certs had an incomplete chain which caused them to not be trusted by Android.

Using an SSL cert checker should hopefully shed some light.

Go Daddy for example or searching your SSL providers site for a cert checker to verify the chain is complete was what revealed our problems.

ssltools.godaddy.com/views/certChecker

Re: Field maps on Windows Subsystem for Android

JoeHershman — Wed, 13 Sep 2023 22:11:22 GMT

The problem is specifically how would one load a root cert into the Android subsystem on Windows 11. This does not seem to be a straight forward process

Re: Field maps on Windows Subsystem for Android

JakeBrownMaps — Thu, 21 Sep 2023 18:35:03 GMT

Hello @ScottEwart,

I have included some steps to installing a User CA cert on Windows Subsystem for Android. WSA hides “.cer” files in the Windows file sharing tool. In order to install a user root certificate, you will need to rename, move and rename the certificate file. I have filed an enhancement request with the Microsoft team to try and make this process simpler (or at least fewer steps). Once we get that a bit dialed in with them, I can make a blog article.

Prepare the certificate file:

Download your CA certificate (it should be in your c:\users\{login}\Downloads folder)
Rename the file from <cert_name>.cer to <cert_name>.txt

Configure WSA for Windows file access and stage certificate:

Open the Windows Subsystem for Android app
Advanced settings tab -> Experimental features -> Toggle ON “Share user folders”
System tab -> Select “Turn off Windows Subsystem for Android”
System tab -> Files pop-out
Navigate to with Subsystem for Android(TM) -> Windows -> Downloads
Long click on the <cert_name>.txt file so it’s selected with a blue check
Click on the upper right overflow (…) menu -> select “Move to”
Move file to “Downloads” folder (note this is the “Android devices” download folder)
Navigate to the new file location in the download folder -> Long click on the <cert_name>.txt
Click on the upper right overflow (…) menu -> select “Rename”
Change file extension to .cer

Install Certificate:

Windows Start -> run -> wsa://com.android.settings
Search “CA certificate” —> Select “CA certificate” -> Select “CA certificate” -> Install Anyway
Choose <cert_name>.cer
Certificate is installed

let me know how that goes for you -

Jake Brown

Field Maps Product Engineer

Re: Field maps on Windows Subsystem for Android

hopescott — Mon, 18 Sep 2023 15:02:58 GMT

Thank you for this information. I will give this a try and let you know.

Scott Ewart

Re: Field maps on Windows Subsystem for Android

hopescott — Wed, 20 Sep 2023 12:11:10 GMT

Jake this worked perfectly. Thank you for your help on this.

Re: Field maps on Windows Subsystem for Android

JakeBrownMaps — Mon, 06 Nov 2023 15:05:45 GMT

Just a follow up - I worked with the Microsoft team and was able to get .cer and .pem files natively supported by the WSA file handler feature and created a blog outlining the steps.

https://community.esri.com/t5/arcgis-field-maps-blog/how-to-resolve-untrusted-certificate-error-install/ba-p/1340852