Notebook Server Configuration for Azure Application Gateway

pachdam-nc — Wed, 15 Jan 2025 21:50:51 GMT

Hello,

My setup details:

Architecture: Multi-Machine Setup (Portal, Server, Datastore have separate Windows Server VMs, Notebook Server is hosted on Ubuntu Server)

ArcGIS Enterprise version: 11.3

Web Adaptors: No Web Adaptors, Azure Application Gateway used instead

----------------------

I am struggling with the Notebook Server configuration. These are the steps that I have made and issues I have encountered.

1. Installed the Notebook Server on Linux machine (+ configured the post-deployment steps)

2. Exported the Notebook SelfSignedCertificate and uploaded it via PortalAdmin tool.

3. Federated the Server using https://vm-portal-fqdn:7443/arcgis/home/index.html

Server URL and Admin URL are the same now.

But when I went to the Notebook tab in the Portal, I got this error:

4. Decided to generate a custom root certificate to get rid of the self-signed certificate problem.

5. While generating the certificate, it turned out that my machine's FQDN is too long (*.ax.internal.cloudapp.net) and the certificate cannot be generated.

6. Decided to use the wildcard CA certificate (*.my.domain.com), so the certificate was uploaded to the Notebook Admin site and also to Portal Admin site (together with the root/int certificates).

7. Added a new recordset in Azure DNS zones: test-notebook.my.domain.com -> IP of the Notebook Server's VM.

8. Unfederated the Notebook machine and federated again using https://test-notebook.my.domain.com/arcgis

9. This helped immediately or after a few additional changes made to the setup. As a result I was able to open a new Notebook/Esri example notebooks and execute some test code via https://vm-portal-fqdn:7443/arcgis/home/index.html

10. When I wanted to reach the Notebook tab using the domain-based URL: https://test-my.domain.com/portal/home/index.html

I got the same error message as in #3. To resolve that I made some additional changes, that caused another problem:

As a result I can't open any Notebook, neither from the https://vm-portal-fqdn:7443/arcgis/home/index.html nor https://test-my.domain.com/portal/home/index.html

1. What is the correct way of configuring Notebook Server in Azure with App Gateway replacement of Web Adaptors? (Notebook Admin tool, Portal Admin Tool and Application Gateway config)

2. Are there any docs explaining that?

3. What are the preferred ways of generating SSL certificates?

Thank you for any advices or remarks!

topic Notebook Server Configuration for Azure Application Gateway in ArcGIS Notebooks Questions

Notebook Server Configuration for Azure Application Gateway