ArcGIS Enterprise 11.3 Patch removes Instant Apps from Portal

[Cory__Williams]

Morning all,

has anyone else had an issue where they have installed the following patches;

• Portal for ArcGIS 11.3 Security 2025 Update 1
• Portal for ArcGIS 11.3 Enterprise Sites Gallery Patch

Then found the following instant apps missing from the installation directory:

• Charts
• Interactive Legend
• Notification

I'm not sure which patch may have caused this, but it seems to be an issue.

[James_S]

I've run the Portal for ArcGIS 10.9.1 Security 2025 Update 1 on our Dev Portal and had to uninstall it because after running it we just got 404 errors on Portal.

We could get into portaladmin and we bounced the servers, did iisreset /restart and couldn't go to Portal home, either by the Web Adaptor or bypassing it, just got 404 errors.

I won't be installing this patch on Dev or Prod 10.9.1 or our fresh install of 11.3 we're building up until the issues are addressed.

[MatthiasKl]

We also had folders missing in the C:\Program Files\ArcGIS\Portal\apps\instant directory after installation of the Portal for ArcGIS Security 2025 Update 1 Patch. Only the 3dviewer and attachmentviewer directories still existed. All others were apparently deleted by the patch. There is also a bug that sounds similar (BUG-000175245).

We have a case open with Esri. The support employee who was assigned the case provided us with the missing folders. I already restored them (over 200,000 files, had to use robocopy). Existing instant apps are now working again. New ones can be created, but not configured. Errors also occur when creating new apps (forwarding does not work).

Frankly, we are stunned at how Esri has released such an important security patch (Base CVSS 3.1: 9.8 Temporal CVSS: 8.8 Base CVSS 4.0: 9.3) without first testing it properly.

[MikeVolz]

Matthias:

You said that Portal\apps\instant directory was gone after installing the Portal for ArcGIS 11.3 Enterprise Sites Gallery Patch.  

Have you installed the Portal for ArcGIS 11.3 Security 2025 Update 1 Patch yet?  I ask because the Portal\apps\instant directory is there for me so just wondering if was initially removed by Sites Gallery Patch (unbeknownst to me) and then the directory was restored by the Security 2025 Update 1 Patch.

[MatthiasKl]

Oh, that was a mistake. I meant to write "after installing the ArcGIS 11.3 Security 2025 Update 1 patch". The Portal for ArcGIS Enterprise Sites Gallery Patch was already installed and does not appear to be related to the problem.

BUG-000175245
Synopsis : The Portal for ArcGIS Security 2025 Update 1 Patch for Portal for ArcGIS 11.3 causes issues in the Public Notification app in ArcGIS Instant Apps.
Steps to Reproduce:
Create a new Public Notification Instant App in Portal for ArcGIS 11.3
Install the Portal for ArcGIS Security 2025 Update 1 Patch for 11.3
Open the Public Notification Instant App created in step #1.
The app view page does not load.
Browser error: "No webpage was found for the web address. HTTP ERROR 404."
Create a new Public Notification Instant App and publish it.
The publishing process keeps spinning indefinitely and never completes.
Developer tools show repeated token generation requests to: portal/sharing/rest/generateToken
The new app item appears in Portal Content, but clicking View App results in the same HTTP 404 error.

Other Information:
Security update patch deletes all files and folders under: C:\Program Files\ArcGIS\Portal\apps\instant\notification and uninstalling the patch does not resolve the issue.
Repairing Portal for ArcGIS 11.3 program through Control Panel does not fix the issue.
Manually copying the apps\instant\notification directory from a 11.3 deployment (where the patch was not applied) to the affected 11.3 deployment resolves the issue.
The issue is not reproducible in Portal for ArcGIS 11.4.

[MatthiasKl]

We were able to solve the problem temporarily by also restoring the folder C:\Program Files\ArcGIS\Portal\apps\configure-template. The support employee kindly provided us with this folder. Esri has now recognised the problem:

April 2, 2025:The 11.3 version of the Portal for ArcGIS  Security 2025 Update 1 causes a problem wherein some of the ArcGIS Instant App templates, including the Public Notification template, are removed and thus not available after applying the patch. BUG-000175245 has been logged for this problem. The 11.3 version of the patch will be re-released with a resolution for BUG-000175245. Uninstalling the patch will not resolve the problem. A possible workaround is to get a copy of the ArcGIS Instant App template files from an ArcGIS Enterprise 11.3 environment where the patch was not applied and paste them into the environment where the patch was applied.

Portal for ArcGIS Security 2025 Update 1

[rcGIS]

Hello @MatthiasKl, thank you for keeping this thread updated. I have just seen the new paragraph/note in that previous article too (where Esri adds on BUG-000175245 + that the patch will be re-released), and I was planning to add it here as well, but you have been fast!

I'm still concerned about potential issues described here too, the ones specific to the 10.9.1 version, so if anyone has additional information, happy to know more about it.

[Jen_Zumbado-Hannibal]

Well, this has caused some significant headaches today. Based on a blog I read a while back, I've recreated Public Notification Web App using Experience Builder. 

However, does anyone know if there are widgets to export .csv to .pdf to print address labels (e.g., Avery 5160) for a mail merge?

[rcGIS]

Hello, the 11.3 version of the patch has been re-released as 'Patch B': 

April 10, 2025: A new 11.3 version of the Portal for ArcGIS Security 2025 Update 1 Patch has been released to resolve a problem wherein some of the ArcGIS Instant App templates, including the Public Notification template, are not working. BUG-000175245 was logged for this problem. The 11.3 version of the patch with a resolution for BUG-000175245 is identified as Portal for ArcGIS 11.3 Security 2025 Update 1 Patch B and is listed in the ArcGIS Enterprise Patch Notification tool with a date of April 10, 2025. The B version of the patch can be installed on its own, or where the initial A version is installed, there is no need to uninstall the initial A version.

• The URL is https://support.esri.com/en-us/patches-updates/2025/portal-for-arcgis-security-2025-update-1-patch
• This updated patch addresses [#BUG-000175245 – The Portal for ArcGIS Security 2025 Update 1 patch for Portal for ArcGIS 11.3 causes some ArcGIS Instant Apps to return a 404-error message and not load successfully.]

---

Source: Portal for ArcGIS Security 2025 Update 1 Patch

[MatthiasKl]

Yesterday, we tried to install the patch via the patchnotification utilty. After about 4 hours with no real progress, we cancelled the installation dialog (it's our productive instance which must be back in operation the next day). Later that day I tried again by downloading and executing the patch file directly. This was also unsuccessful. At some point the installation simply stopped. According to the resource monitor there was no significant write process on the hard drive. We are at a bit of a loss, especially as patching has always worked without any problems so far. A lack of disk space or problems with the proxy can be ruled out.