topic Re: I am upgrading from ArcGIS Portal 10.4.1 to 10.5.1 in ArcGIS Enterprise Portal Questions

I am upgrading from ArcGIS Portal 10.4.1 to 10.5.1

BanchanaPandey — Fri, 14 Jul 2017 20:05:07 GMT

I am upgrading from ArcGIS Portal 10.4.1 to ArcGIS Portal 10.5.1

In the step where I create the initial administrator account, the dialog doesn't show the information about where the content directory location is pointed at. Screenshot attached error1. This screen shot is from the time when i upgraded to 10.4.1. This time, when I am upgrading to 10.5.1, i don't see the red box highlighted part, but I see all items from beginning with First Name and ending at Answer. I am thinking that this must be the cause of the two issues that I am seeing when I complete the installation. the issues explained below:

When I complete the installation, I am seeing these two issues below.

Screen shot below: error2 "Unable to configure the Portal with Web Adaptor. Please make sure that the Portal and WebAdaptor are of the same version".

ArcGIS Portal and WebAdaptor, both are of the same version and i did make sure that before i started with the protal upgrade, i logged in to the portaladmin and unregistered the web adaptor as well.

screen shot below: error3 You are not authorized to use this resource

when I try logging into the portal admin with the initial administrator account, i get his message You are not authorized to use this resource. But using the same account, i can log in to the portal home just fine and see all the contents etc.

Any ideas anybody, specially from esri? Any information is highly appreciated.

Thanks!

Re: I am upgrading from ArcGIS Portal 10.4.1 to 10.5.1

JonathanQuinn — Mon, 17 Jul 2017 16:51:29 GMT

We're moving towards the Portal upgrade behaving like the Server upgrade, where there is less information to enter and more of a "one-click" upgrade process. For example, for Server, you don't define another admin account and you don't enter the location for the config-store and directories. Portal will behave the same way eventually and graying out the content directory is one of the steps.

Not sure why the WA would complain about the version being different. You can verify that both are of 10.5.1 when looking at Programs and Features?

Take a look at the Portal logs on disk to determine why you can't log into Portaladmin.

Re: I am upgrading from ArcGIS Portal 10.4.1 to 10.5.1

BanchanaPandey — Mon, 17 Jul 2017 21:54:59 GMT

Hi Jonathan,

I am glad this has grabbed attention from one of the genius product engineers.

This has become a more bigger issue for us now, as we don't see a road ahead with the upgrade process from 10.4.1 to 10.5.1.

If I revert back the upgrade to 10.4.1 version(which works without any issues so far luckily) and everything works the way it should. I can log in to portal admin and I am able to configure the 10.4.1 portal with 10.4.1 web adaptor.

But when I upgrade to 10.5.1, it doesn't work the same way.

Here are few things that I would like to bring to your attention, although I already mentioned it in my original question.

1. In the page where I create the initial administrator account (IAA), I don't see the greyed out location for the content directory as I had seen during my 10.4.1 upgrade previously.

2. I get past the creation of IAA fine and as I try to log in to portal admin, I can't log in. I get resource not authorized message.

3. Then the third one, like you noted, I am unable to configure the portal with web adaptor. I get the message about the versions being different. They are absolutely the same version 10.5.1 as that's what I downloaded from myesri account for our organization.

I am working with an esri support person on this case and I have provided all the log files, information to him.

While he troubleshoots on his end, it would be highly appreciated if somebody from the core product team looks at this issue as well so that we can identify this bizarre situation that we are experiencing during what should have been a simple upgrade from 10.4.1 to 10.5.1.

Thanks!

Re: I am upgrading from ArcGIS Portal 10.4.1 to 10.5.1

SusmitaDuncan — Fri, 21 Jul 2017 21:12:44 GMT

Did you get this resolved? We are also planning a full HA Prod 10.4.1 --> 10.5.1 upgrade, and in prep I just attempted to upgrade a 10.5 Portal (small test site) to 10.5.1 following the directions here Upgrade ArcGIS Server—Installation Guides (10.5) | ArcGIS Enterprise . After I ran the 10.5.1 Portal setup.exe, it says I no longer have a site and in the log files these error messages: "The process monitor did not find the connection to the configuration store. The site may not have been initialized. After the site is initialized, the check for database processes will be reattempted." and "com.esri.arcgis.portal.admin.core.SiteNotInitializedException: The portal site has not been initialized. Please create a new site and try again." over and over again

We have the config store local on the machine, on the same drive that portal is installed on (E: - as C: is reserved for OS only per our standard Enterprise VM images).

Re: I am upgrading from ArcGIS Portal 10.4.1 to 10.5.1

SusmitaDuncan — Mon, 24 Jul 2017 15:28:28 GMT

Just an update, we resolved this, apparently the Portal upgrade process didn't complete so had to manually initiate the rest of it.

Re: I am upgrading from ArcGIS Portal 10.4.1 to 10.5.1

JoeHershman — Wed, 09 Aug 2017 22:27:03 GMT

What do you mean "manually initiate the rest of it." We are stuck in the upgraded to Portal 10.5.1 and now the portaladmin login no longer works. Get a

You are not authorized to use this resource.

message trying to connect to /portaladmin resource. None of our users are able to connect to /portaladmin anymore. This occurred after we changed the ssl cert After it applied the cert we can no longer log in. Really don't want to go backwards and uninstall 10.5.1 and reinstall 10.4.1.

Re: I am upgrading from ArcGIS Portal 10.4.1 to 10.5.1

ZGUMGDY — Sat, 09 Sep 2017 11:05:58 GMT

I had the same issues after changing HTTPS only settings. None of our users was able to connect to /portaladmin and error message "You are not authorized to use this resource" was displayed. But at the same time we was able to login to main Portal site. I restarted Portal and everything is working OK now.

Re: I am upgrading from ArcGIS Portal 10.4.1 to 10.5.1

DamianSlee — Wed, 13 Sep 2017 06:53:19 GMT

Having this issue also after importing a SSL certificate into portaladmin.

after hours of diagnosing we are seeing this warning when logging in. In short, because the certificate only has the DNS alias, not the machine name as well, it won't generate a login token. I don't think network certificates should be related to generating login tokens, but it is. perhaps internally /portaladmin is invoking a /generateToken service

have not found a fix. might be restoring some servers from backup.

<Msg time="2017-09-13T14:14:21,194" type="WARNING" code="219999" source="Portal Admin" process="24060" thread="14" methodName="" machine="mymachinename" user="" elapsed=""> Failed to generate a token for user 'portaladmin'. javax.net.ssl.SSLException: hostname in certificate didn't match:

...

Re: I am upgrading from ArcGIS Portal 10.4.1 to 10.5.1

DamianSlee — Wed, 13 Sep 2017 07:39:31 GMT

I managed to restore access to my /portaladmin after breaking it by importing SSL certificate and setting it as the default certificate.

edit Portals tomcat server.xml, and revert the keyAlias="portal". it was set to the alias of the certificate I imported.

D:\Program Files\ArcGIS\Portal\framework\runtime\tomcat\conf\server.xml

Re: I am upgrading from ArcGIS Portal 10.4.1 to 10.5.1

MathiasGieser — Wed, 27 Sep 2017 20:42:11 GMT

Susmita, how did you fix this? I am encountering the same issue. Did you do the fix Damian Slee mentioned below? I am working with tech support and they are stumped.

Re: I am upgrading from ArcGIS Portal 10.4.1 to 10.5.1

JoeHershman — Wed, 27 Sep 2017 22:10:15 GMT

See this link it describes the workaround to get admin tool working, But no solution on how to actually get it to work with your own cert.

Common problems and solutions—Portal for ArcGIS (10.5.x) | ArcGIS Enterprise

Re: I am upgrading from ArcGIS Portal 10.4.1 to 10.5.1

DamianSlee — Thu, 28 Sep 2017 13:41:59 GMT

Edit the Portal server.xml file and change the ssl certificate back to "portal" to get Portal working on a self signed certificate.

You need certificate with machine name and dns alias in the Subject Alternate Name section of the certificate. Don't proceed importing certificates until you have this. We created a single certificate with the Subject Alternate Name set to a list of all the servers in our stack with and without full domain name, including machine names and DNS aliases. Yea a long list, essentially 4 entries for each server. Works now. One certificate for all IIS, Portal, Server(s),..

Re: I am upgrading from ArcGIS Portal 10.4.1 to 10.5.1

BanchanaPandey — Mon, 13 Nov 2017 05:38:47 GMT

The resolution to my issue was to remove the proxy settings through the portal admin before the installation and that took care of my issue. So I restored portal back to older version where everything was working well. Then removed the proxy settings through Portal Admin and started the 10.5.1 upgrade. After the installation was complete, I put back those settings back again. esri support helped me finally.

Re: I am upgrading from ArcGIS Portal 10.4.1 to 10.5.1

Anonymous User — Tue, 05 Dec 2017 15:58:18 GMT

I had the exact same issue after setting the SSL certificate to one I had imported. Reverting the portalAlias in D:\Program Files\ArcGIS\Portal\framework\runtime\tomcat\conf\server.xml (and restarting the Portal service) resolved the issue for me.