ArcGIS Server - Utilities - PrintingTools - • Export Web Map Task

[ElizabethNolan]

We are experiencing an issue where if a ArcGIS server is set to HTTPS only or HTTP and HTTPS only then we cannot "Execute Task" on the Export Web Map Task using a url with https. If we set the url to http is works fine. On a HTTP only ArcGIS server with works fine.

The error that we are getting is:

Unable to complete operation.
Error executing tool. Export Web Map Task : Layer "layer0": Unable to connect to map server at https://services.arcgisonline.com/ArcGIS/rest/services/World_Street_Map/MapServer. Failed to execute (Export Web Map). Failed to execute (Export Web Map Task).

On the ArcGIS server itself we are getting this error in the logs:

SEVERE

Jan 3, 2018, 3:48:11 PM

Error executing tool. Export Web Map Task : Layer "layer0": Unable to connect to map server at https://services.arcgisonline.com/ArcGIS/rest/services/World_Street_Map/MapServer. Failed to execute (Export Web Map). Failed to execute (Export Web Map Task).

Utilities/PrintingTools.GPServer

And this warning:

WARNING

Jan 3, 2018, 3:48:11 PM

The certificate authority is invalid or incorrect (WinINet ERROR_INTERNET_INVALID_CA, 12045), URL = https://services.arcgisonline.com/ArcGIS/rest/services/World_Street_Map/MapServer?f=json

Utilities/PrintingTools.GPServer

Ideas on how to resolve this would be great.

I have tried many different scenarios including

Getting the proxy server from GitHub, and testing it to make sure that it works.

Changing the cert, updating the cert, importing a new cert.

Adding the cert to all locations on the window's side.

Netstat to check the ports, and the porta are opened.

I can access the url outside of export map, on the ArcGIS server.

In fiddler I get a 304 not modified. I can see that a token was generated, the token life in the header is set to 60 minutes, but on the server the lifespan is 1 year for all generated tokens.

I will take any suggestions I can. We also opened a ticket with ESRI and they are also looking into this.

[Juan_ManuelAngel]

Try to configure the Intermediate Certificate in your ArcGIS Server or run a SSL Certificate Checker to verify that the certificate its ok.

[RandallWilliams · Accepted solution]

Sounds like you need to add the root certificate to the machines Trusted Toot Certificate Authorities Store. 

Step 1 - Download All Certs and Chains

1. Open the website in question via HTTPS.
2. Click on the lock icon/shield icon in the browser > View Certificate > Install Certificate...
3. Choose "Place all certificates in the following store" > Browse > Personal > OK > Finish
4. Look at the "Certification Path" and identify if additional certificates are in a chain.
   1. If another certificate exists in the chain above the one you installed above, click on it and click View Certificate.
   2. Repeat steps 2-4 above until all certificates have been added to your Personal certificate store.

Step 2 - Access Certificate Manager Console

1. Start > Run > "mmc" to launch the Microsoft Management Console (MMC)
2. Click File > Add/Remove Snap-in
3. Select "Certificates" > Add > My User Account
4. Select "Certificates" > Add > Computer Account
5. Click OK

Step 3 - Copy Certificates into Local Computer Store

1. Note Step 1.4 above, where you viewed the certification path. Here we need to use that information to install a certificate path into the Local Computer certificate store.
2. Within the Certificate Management Console created in Step 2 above, expand Certificates - Current User > Personal > Certificates.
   1. Locate the certificate from the top of the chain (this is the root ceritificate authority) and drag this into Certificates - Local Computer > Trusted Root Certification Authorities > Certificates.
   2. If applicable, locate the "middle chain" aka Intermediate Certifiates, and drag them certificate into Certificates - Local Computer > Intermediate Certification Authorities > Certificates.
   3. Locate the final certificate (bottom of the chain) and drag that into Certificates - Local Computer > Trusted Publishers > Certificates.

Step 4 - Restart ArcGIS Server

1. Type "services" in start menu search dialog and select it from the list
2. select ArcGIS Server service and click "restart"

[MichaelVolz]

Thank you so much for these instructions Randall