ArcGIS Enterprise 11.3 - Printing Map Services using Token Secured External Services

[Cory__Williams]

Morning all,

is anyone else who is using ArcGIS Enterprise 11.3, that is consuming Token Secured Services from an external third party (i.e. Aerial Imagery) showing errors when printing at the moment?

Recently upgrading to 11.3, I've found that we get a Severe error in the ArcGIS Server Printing Tool GP Server.

Has anyone else seen this at all?

This occurs whether it's in ExB or Map using the Print function.

I've tried using the print service on a secondary ArcGIS Server and I'm still experiencing the same issue.

[NicolasGIS]

Hello @Cory__Williams ,

Thanks for sharing !

Currently debugging the same issue. Can't print our secured services since the upgrade to 11.3.

Eithter from a custom print service I am getting the following:

` ConvertWebMapToArcGISProject return webmap_tuple(*_convertArcObjectToPythonObject(arcgisscripting._mapping.ConvertWebMapToArcGISProject(*_gp_fixargs([webmap_json, template_pagx, mapframe_name, notes_gdb, report_template], True))))   RuntimeError: Failed to create layer from service at`

Or from the MapViewer.

This is really bad news 😕

[DavidColey]

Typically esri releases a print service patch as one of the first patches available per enterprise release.  Not sure if that patch solves this issue.  I haven't been able to test that

[Joshua-Young]

Have you tried creating a custom print service and see if it has the issue as well? David is correct that the last several versions of ArcGIS Enterprise (AGE) have had this issue with print services and it usually requires a patch to fix. Be sure to log a support ticket with Esri, the more people that report it the more likely it will get fixed. Also, if you are using an existing custom print service Esri has recommended publishing it again after any AGE upgrades. I re-publish our custom print services, geoprocessing services, and locators after each upgrade and have had fewer issues after AGE upgrades.

[Cory__Williams]

Hi @DavidColey and @Joshua-Young cheers for that. I've tried a custom print service which too fails and I had lodged a ticket with Support. Fingers crossed it gets fixed soon, or a workaround is able to be identified.

[NicolasGIS]

Hi @Cory__Williams,

Thanks for your reply.

I believe I found the problem: it's an issue with SSL certificate.

If you try to browse the URL of the external service from the ArcGIS Server's machines, do you get a certificate error ? In my case it was the case. There was a misconfiguration on my side. It's fixed now. But with external services, that might be more difficult.

[Cory__Williams]

Hi @NicolasGIS cheers for that -- sadly that's not the issue I'm experiencing on my side. The external providers SSL Cert is valid until May 20, 2025. So not joy there.

[NicolasGIS]

Did you try to open the URL once logged on the VM hosting ArcGIS Server ? It might be that your personnal computer has the required CA intermediate certificate but maybe not the server running ArcGIS Server. Just making sure it is not the same issue.

[KymMcDonagh]

under IIS > bindings > we added all unassigned ip address to port https port 443. Once this was done secure services can be printed. Also please ensure for 11.3 that IPV 6 is enabled in your settings > Network and Internet. 

https://support.esri.com/en-us/knowledge-base/error-arcgis-enterprise-error-executing-tool-failed-to...

[Jared_Yost]

I ran into the same issue.  Try in multiple browsers and incognito window.  I found that my issue was likely related to caching.  My guess is that the print service was grabbing a long term token stored in cache instead of using the necessary short term token that is generated when you login to the secured service for printing.