ArcGIS Server - Utilities - PrintingTools - • Export Web Map Task

1382
3
Jump to solution
01-03-2018 01:12 PM
ElizabethNolan
New Contributor III

We are experiencing an issue where if a ArcGIS server is set to HTTPS only or HTTP and HTTPS only then we cannot "Execute Task" on the Export Web Map Task using a url with https. If we set the url to http is works fine. On a HTTP only ArcGIS server with works fine.

The error that we are getting is:

Unable to complete operation.
Error executing tool. Export Web Map Task : Layer "layer0": Unable to connect to map server at https://services.arcgisonline.com/ArcGIS/rest/services/World_Street_Map/MapServer. Failed to execute (Export Web Map). Failed to execute (Export Web Map Task).

On the ArcGIS server itself we are getting this error in the logs:

SEVEREJan 3, 2018, 3:48:11 PM

Error executing tool. Export Web Map Task : Layer "layer0": Unable to connect to map server at https://services.arcgisonline.com/ArcGIS/rest/services/World_Street_Map/MapServer. Failed to execute (Export Web Map). Failed to execute (Export Web Map Task).

Utilities/PrintingTools.GPServer

And this warning:

WARNINGJan 3, 2018, 3:48:11 PMThe certificate authority is invalid or incorrect (WinINet ERROR_INTERNET_INVALID_CA, 12045), URL = https://services.arcgisonline.com/ArcGIS/rest/services/World_Street_Map/MapServer?f=jsonUtilities/PrintingTools.GPServer

Ideas on how to resolve this would be great.

I have tried many different scenarios including

Getting the proxy server from GitHub, and testing it to make sure that it works.

Changing the cert, updating the cert, importing a new cert.

Adding the cert to all locations on the window's side.

Netstat to check the ports, and the porta are opened.

I can access the url outside of export map, on the ArcGIS server.

In fiddler I get a 304 not modified. I can see that a token was generated, the token life in the header is set to 60 minutes, but on the server the lifespan is 1 year for all generated tokens.

I will take any suggestions I can. We also opened a ticket with ESRI and they are also looking into this.

0 Kudos
1 Solution

Accepted Solutions
RandallWilliams
Esri Regular Contributor

Sounds like you need to add the root certificate to the machines Trusted Toot Certificate Authorities Store. 

Step 1 - Download All Certs and Chains

  1. Open the website in question via HTTPS.
  2. Click on the lock icon/shield icon in the browser > View Certificate > Install Certificate...
  3. Choose "Place all certificates in the following store" > Browse > Personal > OK > Finish
  4. Look at the "Certification Path" and identify if additional certificates are in a chain.
    1. If another certificate exists in the chain above the one you installed above, click on it and click View Certificate.
    2. Repeat steps 2-4 above until all certificates have been added to your Personal certificate store.

Step 2 - Access Certificate Manager Console

  1. Start > Run > "mmc" to launch the Microsoft Management Console (MMC)
  2. Click File > Add/Remove Snap-in
  3. Select "Certificates" > Add > My User Account
  4. Select "Certificates" > Add > Computer Account
  5. Click OK

Step 3 - Copy Certificates into Local Computer Store

  1. Note Step 1.4 above, where you viewed the certification path. Here we need to use that information to install a certificate path into the Local Computer certificate store.
  2. Within the Certificate Management Console created in Step 2 above, expand Certificates - Current User > Personal > Certificates.
    1. Locate the certificate from the top of the chain (this is the root ceritificate authority) and drag this into Certificates - Local Computer > Trusted Root Certification Authorities > Certificates.
    2. If applicable, locate the "middle chain" aka Intermediate Certifiates, and drag them certificate into Certificates - Local Computer > Intermediate Certification Authorities > Certificates.
    3. Locate the final certificate (bottom of the chain) and drag that into Certificates - Local Computer > Trusted Publishers > Certificates.

Step 4 - Restart ArcGIS Server

  1. Type "services" in start menu search dialog and select it from the list
  2. select ArcGIS Server service and click "restart"

View solution in original post

3 Replies
Juan_ManuelAngel
New Contributor III

Try to configure the Intermediate Certificate in your ArcGIS Server or run a SSL Certificate Checker to verify that the certificate its ok.

RandallWilliams
Esri Regular Contributor

Sounds like you need to add the root certificate to the machines Trusted Toot Certificate Authorities Store. 

Step 1 - Download All Certs and Chains

  1. Open the website in question via HTTPS.
  2. Click on the lock icon/shield icon in the browser > View Certificate > Install Certificate...
  3. Choose "Place all certificates in the following store" > Browse > Personal > OK > Finish
  4. Look at the "Certification Path" and identify if additional certificates are in a chain.
    1. If another certificate exists in the chain above the one you installed above, click on it and click View Certificate.
    2. Repeat steps 2-4 above until all certificates have been added to your Personal certificate store.

Step 2 - Access Certificate Manager Console

  1. Start > Run > "mmc" to launch the Microsoft Management Console (MMC)
  2. Click File > Add/Remove Snap-in
  3. Select "Certificates" > Add > My User Account
  4. Select "Certificates" > Add > Computer Account
  5. Click OK

Step 3 - Copy Certificates into Local Computer Store

  1. Note Step 1.4 above, where you viewed the certification path. Here we need to use that information to install a certificate path into the Local Computer certificate store.
  2. Within the Certificate Management Console created in Step 2 above, expand Certificates - Current User > Personal > Certificates.
    1. Locate the certificate from the top of the chain (this is the root ceritificate authority) and drag this into Certificates - Local Computer > Trusted Root Certification Authorities > Certificates.
    2. If applicable, locate the "middle chain" aka Intermediate Certifiates, and drag them certificate into Certificates - Local Computer > Intermediate Certification Authorities > Certificates.
    3. Locate the final certificate (bottom of the chain) and drag that into Certificates - Local Computer > Trusted Publishers > Certificates.

Step 4 - Restart ArcGIS Server

  1. Type "services" in start menu search dialog and select it from the list
  2. select ArcGIS Server service and click "restart"

View solution in original post

MichaelVolz
Esteemed Contributor

Thank you so much for these instructions Randall

0 Kudos