topic Re: HTTPS Certificate SSL Issues ArcGIS Monitor in ArcGIS Monitor Questions

HTTPS Certificate SSL Issues ArcGIS Monitor

Mark_Verlaat — Wed, 22 Feb 2023 11:29:33 GMT

Hi all,

I just have set up the ArcGIS Monitor 2023.0 on my system. It works quite well.

I have a problem though with implementing the SSL Certificate which we use with the DNS within the Monitor Admin panel.

When I save (and force restart) the server, the server hangs, won't start anymore (not the Localhost, not my own Web Context URL, etc.). It starts, but stops almost instantly.

I want to bypass this to make a rewrite rule (so in this case name.dnsname.nl/arcgis needs to point to name.dnsname.com:30443/arcgis) so that I can bind the certificate to the 443 port (https) of the default server. But that didn't work too (maybe I did something wrong with the rewrite rule).

Can someone help me with this? Thanks in advance,

Re: HTTPS Certificate SSL Issues ArcGIS Monitor

VHolubec — Thu, 23 Feb 2023 14:10:11 GMT

Hi @Mark_Verlaat,

is the certificate compatible with OpenSSL 3 and TLS 1.2?

Another solution could be a Rewrite/Reverse proxy rule on the IIS.

Thanks.

Re: HTTPS Certificate SSL Issues ArcGIS Monitor

EsriEvan — Thu, 23 Feb 2023 16:44:28 GMT

Hi Mark

There is an issue with 2023.0 which does not prevent "unaccepted" certificate chains from passing the upload. This will ultimately cause the runtime to fail when the restart occurs. The dev team has fixed this one and will be part of 2023.1 .

In the meantime, the fastest way to recover from that scenario is to navigate into the config store and delete the PFX file living under the SSL directory. After restarting Monitor, it will re-create the self-signed one and recover.

We're also about to publish a quick article how to use IIS to proxy requests to Monitor Server and how to terminate SSL at IIS, which may be helpful in this scenario.

Re: HTTPS Certificate SSL Issues ArcGIS Monitor

EsriEvan — Fri, 24 Feb 2023 17:25:32 GMT

The article I mentioned above is available here:

Connecting to ArcGIS Monitor 2023 through IIS - Esri Community

Re: HTTPS Certificate SSL Issues ArcGIS Monitor

VHolubec — Tue, 28 Feb 2023 09:18:26 GMT

Hello,

I can confirm, that workflow mentioned by @EsriEvan, is pretty neat and the Monitor and its agents are available via 443 port easily then.

Re: HTTPS Certificate SSL Issues ArcGIS Monitor

Mark_Verlaat — Wed, 01 Mar 2023 11:34:39 GMT

Thanks for the replies, I am being swamped at the moment, so I will be testing this coming weeks.

Re: HTTPS Certificate SSL Issues ArcGIS Monitor

Mark_Verlaat — Wed, 08 Mar 2023 14:58:52 GMT

Thanks Evan, for this article. It works perfectly.

Re: HTTPS Certificate SSL Issues ArcGIS Monitor

JamesFaron — Wed, 08 Mar 2023 20:09:39 GMT

Hi Evan,

Where is the config store that you are referring to in your response?

"the fastest way to recover from that scenario is to navigate into the config store and delete the PFX file living under the SSL directory."

Need some details here in order to try out your proposed solution.

Re: HTTPS Certificate SSL Issues ArcGIS Monitor

VHolubec — Thu, 09 Mar 2023 09:32:30 GMT

Hi @JamesFaron,

the configstore of the Monitor is located in folder under profile of the user running the Monitor: "C:\Users\<user_running_the_Monitor_service>\AppData\Local\ESRI\ArcGISMonitor\config-store-server"

The pfx certificate is then in SSL folder.

Hope it helps.

Re: HTTPS Certificate SSL Issues ArcGIS Monitor

JamesFaron — Thu, 09 Mar 2023 14:37:31 GMT

Thanks Vladimir, I was able to find it after posting, but this will be useful for others as well.

Re: HTTPS Certificate SSL Issues ArcGIS Monitor

JamesFaron — Thu, 09 Mar 2023 15:05:06 GMT

The referenced article will work for some, but in an enterprise environment such as mine, it would be discouraged if not prohibited. So the question is, when will the patch that will fix the bug be released?

By way of commentary, it would also be helpful to release announcements to customers of issues such as this, so that we don't have to waste hours of our time trying to figure out why Arc Monitor is not accessible after following the documentation's instructions.

Re: HTTPS Certificate SSL Issues ArcGIS Monitor

GraceSmith99 — Mon, 19 Feb 2024 06:50:26 GMT

I understand you are facing issues with the SSL Certificate in the ArcGIS Monitor 2023.0.

Here are some steps you can try to troubleshoot and resolve the problem:

First need to ensure that the SSL Certificate is correctly configured in the Monitor Admin panel. Verify that the paths and settings are accurate, and the certificate is valid.

Now a server hangup can occur due to various reasons, including misconfigurations. Review the server hangup causes, effects, and solutions to identify potential issues.

However, If you're trying to set up a rewrite rule, double-check the syntax and configuration. Make sure the rule is correctly redirecting traffic from name.dnsname.nl/Arcgis to name.dnsname.com:30443/Arcgis.

Next is to verify that the SSL certificate is correctly bound to port 443. Check if there are any conflicts or issues with port binding that might be causing the server to hang.

I hope these steps help resolve the SSL Certificate implementation issue with your ArcGIS Monitor. If you need further assistance, feel free to ask.

Re: HTTPS Certificate SSL Issues ArcGIS Monitor

GraceSmith99 — Wed, 26 Jun 2024 04:24:39 GMT

Hi,

It seems you are facing issues with SSL implementation and server restart in ArcGIS Monitor 2023.

Here are a few steps you can try to resolve this:

First, check the SSL certificate is correctly installed and associated with the appropriate domain name in the Monitor Admin panel.

Now, verify that your rewrite rule is correctly set up to redirect name.dnsname.nl/arcgis to name.dnsname.com:30443/arcgis by checking the syntax and ensuring there are no typos or misconfigurations.

Next is to confirm that the SSL certificate is correctly bound to port 443, which might require manual configuration in the web server settings.

Now need to check the server logs for any errors or warnings that might indicate what is causing the server to hang or stop, as this can provide more insight into the underlying issue.

Next, review the ArcGIS Monitor documentation for any specific instructions or known issues related to SSL certificate implementation and server configurations.

I hope it will help for you.

Best of luck!