topic Re: Portal for ArcGIS Depolyment Scenario in ArcGIS Enterprise Portal Questions

Portal for ArcGIS Depolyment Scenario

ApurvDanke — Thu, 18 Feb 2016 14:42:28 GMT

Hi,

I want to setup portal for ArcGIS in my development environment. Currently I have ArcGIS Server 10.3.1 and Web Adaptor installed on same machine. I have configured the ArcGIS Server in Web Adaptor. Can I install Portal for ArcGIS on the same machine and configure it through Web Adaptor, so that both ArcGIS Server and Portal for ArcGIS would work on the same machine? Is there any restriction or disadvantage in doing that?

Regards,

Apurv

Re: Portal for ArcGIS Depolyment Scenario

DerekLaw — Thu, 18 Feb 2016 18:16:59 GMT

Hi Apurv,

Q) Can I install Portal for ArcGIS on the same machine and configure it through Web Adaptor, so that both ArcGIS Server and Portal for ArcGIS would work on the same machine?

Yes, you can install both ArcGIS Server and Portal for ArcGIS on the same machine. We recommend that you install two separate Web Adaptors, one each for ArcGIS Server and Portal for ArcGIS. As this is for a development environment, you should be fine.

Hope this helps,

Re: Portal for ArcGIS Depolyment Scenario

PaulDavidson1 — Fri, 19 Feb 2016 01:59:11 GMT

You can build an all in one machine with Portal, a Hosting Server, a Data Store and the two web adaptors with very little effort if you utilize the Chef Cookbook from Esri.

I only use this setup as a dev environment and after it's setup, you want to look into the Data Store settings and probably modify the default backup schedules etc... I overflowed our disk initially with some fairly small data sets.

Others have reported using all in one boxes in production though.

Check out this post:

Get Started With ArcGIS Cookbook · Esri/arcgis-cookbook Wiki · GitHub

A new cookbook for setting up 10.4 was just released.

Seriously worth a look

Re: Portal for ArcGIS Depolyment Scenario

SharonMeier — Mon, 22 Feb 2016 15:59:29 GMT

I have a similar setup with 10.4 Pre-release. When I try to access the GeoEvent Manager I get an Error:Invalid redirect_uri message. Not sure if this is the best place to post a question but just wondered if anyone else has seen that error.

Re: Portal for ArcGIS Depolyment Scenario

DerekLaw — Tue, 23 Feb 2016 07:11:31 GMT

Hi Sharon,

FYI, last week ArcGIS 10.4 final was released. You may want to install the final release instead of 10.4 Pre-Release.

Unfortunately, I am not an expert on the GeoEvent extension for Server, please re-post your question in this forum: GeoEvent

Hope this helps,

Re: Portal for ArcGIS Depolyment Scenario

SharonMeier — Tue, 23 Feb 2016 18:23:16 GMT

Thank you. I'm working on getting our copy of 10.4 final downloaded. Once I get that installed and configured I'll check with the GeoEvent forum. This is the first time I've installed and/or configured/federated Portal, so I suspect I have probably missed a step somewhere along the way.

Re: Portal for ArcGIS Depolyment Scenario

SharonMeier — Thu, 17 Mar 2016 15:46:00 GMT

Hi Derek,

I'm working with the final release version of 10.4 now and am getting the same invalid redirect_uri error. Just posted a new question in the GeoEvent forum. I only get this error when I have my server and Portal federated.

By the way, I attended a couple of your sessions at Dev Summit and found them very helpful.

Re: Portal for ArcGIS Depolyment Scenario

DerekLaw — Wed, 30 Mar 2016 05:20:31 GMT

Hi Sharon,

Belated thanks for the kind feedback on my Dev Summit tech sessions.

Best,

Re: Portal for ArcGIS Depolyment Scenario

ApurvDanke — Thu, 28 Apr 2016 09:48:59 GMT

Thanks for your response Derek. As per your recommendation, a separate web adaptor should be installed for ArcGIS Server and Portal. Judging by Paul Davidson's reply I get that 2 web adaptors can be installed on the same machine? How? As per my understanding it is just a software which is installed on a machine, how can it be installed twice? Or do I need to give a separate instance name? Not sure. Currently I get the screen below when launching web adaptor. ArcGIS Server is already configured with Web Adaptor on same machine. I have installed Portal also on same machine.

Re: Portal for ArcGIS Depolyment Scenario

PaulDavidson1 — Thu, 28 Apr 2016 17:31:26 GMT

Apurv,

As I recall, I just ran the Web Adaptor installation software a second time.

The second go round, you select that it will be for Portal (assuming your first install was for AGS.)

So in the above image, just click on Portal for ArcGIS and proceed to install.

Re: Portal for ArcGIS Depolyment Scenario

PaulDavidson1 — Thu, 28 Apr 2016 17:41:02 GMT

As a follow up to my prior post, we are now utilizing the all in one setup in a Dev, Test and Production Portal setup

We did the initial installation of both Test and Production in a morning.

But that was after we worked through a few issues with our Win 2012 Server R2 - portal wants .NET 3.5 so we had to install that first.

Our Dev and Test are setup as single boxes with the configuration files there on the local drive.

Production is setup for an HA setup down the road if necessary. i.e. configuration files are out on a shared drive/shared folder setup.

To do this you use a slightly different Chef json file that is found in the roles folder. It's clearly labeled for HA work.

I have had a 180 shift in thinking here. Originally I thought everything should be on separate boxes.

But the ease of putting it on one box made me think twice and then some other conversations convinced me to try this route.

I can always split out boxes if performance suffers.

But in our VMware Sphere environment, I can bump resources on the fly.

We are still configuring Portal so I can't report on how well it works in production yet.

Re: Portal for ArcGIS Depolyment Scenario

DerekLaw — Fri, 29 Apr 2016 23:23:49 GMT

Hi Apurv,

> I get that 2 web adaptors can be installed on the same machine? How? As per my understanding it is just a software which is installed on a machine, how can it be installed twice? Or do I need to give a separate instance name?

Yes, you can install multiple instances of the ArcGIS Web Adaptor on the same machine, in the same web server.

As Paul said, all you need to do is run the ArcGIS Web Adaptor installer twice, but give the second Web Adaptor instance a different name from the first instance. I typically install one Web Adaptor called 'server' (to use with ArcGIS Server) and another called 'portal' (to use with Portal for ArcGIS).

Hope this helps,

Re: Portal for ArcGIS Depolyment Scenario

ApurvDanke — Thu, 05 May 2016 13:41:48 GMT

What I finally did was to first install an SSL domain certificate with help from the IT guys, on the same server. Then I did the binding in IIS for https with this certificate. Later I installed the web adaptor but chose port 443 for https and gave a different name for the web adaptor instance.

Thanks for all your inputs.

Regards,

Apurv

Re: Portal for ArcGIS Depolyment Scenario

JuneAcosta — Mon, 09 Jan 2017 17:39:09 GMT

Derek-

I plan to to federate 2 AGS servers with portal- one will be a hosting server. Do I need to install the web adaptor on both the hosting server and the non-hosting server?

I plan to use ArcGIS Enterprise 10.5.

Thanks!

June

Re: Portal for ArcGIS Depolyment Scenario

DerekLaw — Mon, 09 Jan 2017 23:58:11 GMT

Hi June,

While technically you do not have to install the Web Adaptor for both Server sites, we recommend that you do. For both Server sites, the Web Adaptor provides the following:

Ensures that the web services are able to be accessed through ports 80 and 443 (which are typically open for most organizations and not blocked by firewalls). If you don't install the Web Adaptor, then the web services will be accessed via ports 6080 and 6443, which many firewalls may block by default;
Provides a valid security certificate (e.g., a domain or CA Cert) when client web browsers are trying to access the web services. If you don't install the Web Adaptor, then we recommend that you import a valid security certificate into the Server site.

While it may seem like more effort initially, installing the Web Adaptor for both Server sites will likely make their management more easier.

Hope this helps,

Re: Portal for ArcGIS Depolyment Scenario

JuneAcosta — Wed, 11 Jan 2017 16:25:07 GMT

Thanks for that clarification.

Im working on a diagram to present to our security/network team to request servers and a resource to help implement ArcGIS for portal. Our portal will be internal (IWA implemented for single signon), but field staff using collectors app and offsite EOC using collector and/or maybe publishing services to the datastore would access it from the outside using their IWA account. In my attached diagram I have a web adaptor in the DMZ and on the inside.

What is your recommendation or how do most people setup for the DMZ?

Re: Portal for ArcGIS Depolyment Scenario

DerekLaw — Sat, 28 Jan 2017 00:17:42 GMT

Hi June,

Apologies for the late reply, but I wanted to check my response with a colleague before posting a reply.

In your attached deployment diagram, you have a web adaptor installed on both Server #1 and Server #4. This is a little redundant and not needed as Portal for ArcGIS can only have a single web adaptor configured with it.

If you decide you keep the web adaptor on Server #4 and remove the one on Server #1, then this might introduce some complications - because you will need to open up some more ports in your firewall to ensure proper communication between the web adaptor and Portal for ArcGIS installed on Server #1.The web adaptor will also need to be able to access your Windows Active Directory. In addition, your internal users (represented by Admin and Staff icons on the left side of your diagram) will have to connect to Portal through Server #4 - so they will need access to the DMZ.

If you keep the web adaptor on Server #1 and remove the one on Server #4, then Server #4 can just act as a reverse proxy to redirect incoming requests from your field clients to Server #4. This might be an easier workflow to support.

Be advised that I am not an official enterprise architect, and these comments are just some things to consider. If you want an official recommendation, I suggest you reach out to your local Esri account manager/Distributor and they can put you in touch with Esri Professional Services or the Distributor's Professional Services team.

Thanks for your patience and I hope this helps,

Re: Portal for ArcGIS Depolyment Scenario

DianaVettori — Fri, 23 Nov 2018 05:39:21 GMT

Hello Derek,

Need your help in resolving below issue :

For a single machine deployment scenario :

I have two web adapters installed in the same machine. One for ArcGIS server (configured on port 443) and one for portal (configured on port 80).

1) when i access portal with "https:// machinefullname:7443/arcgis/home/signup.html and login

i can see all the menus including "ORGANIZATION" menu at top.

2) But when i access portal with web adaptor " https:// webadaptor/portal/home/signup.html and login with same admin user.

i can't see the "ORGANIZATION" menu at top.

Thanks in advance

Diana

Re: Portal for ArcGIS Depolyment Scenario

DerekLaw — Mon, 26 Nov 2018 17:46:38 GMT

Hi Diana,

I suggest you un-install, then re-install the Web Adaptor configuration for Portal for ArcGIS. I suspect the Web Adaptor installation for Portal was not configured properly. And the Portal Web Adaptor configuration page should default to HTTPS/443.

Hope this helps,

Re: Portal for ArcGIS Depolyment Scenario

BrettHeist — Wed, 15 May 2019 20:07:48 GMT

Derek,

In regards to the installation of ArcServer and Portal for ArcGIS being installed on the same machine, would I need to make 8 cores available in this instance or just 4? I know that ArcServer uses 4 cores and that Portal uses 4 cores so when being installed and run on a single machine does that mean the machine needs to be configured with 4 cores or 8 cores for optimal throughput?

Also, I know you said that this configuration (Server and Portal installed on the same machine) should be fine for his development environment but what about for a production environment? Would this configuration be fine for that as well?