Select to view content in your preferred language

SSL on ArcGIS Server 10.1 Windows

7269
11
10-22-2012 09:41 AM
christopherfricke2
Deactivated User
I am setting up ArcGIS Server 10.1 on a windows box that already has an SSL Certificate installed.

However, after running through the instructions in the documentation (stepping over the actual request for the SSL certificate), I am unable to access the rest endpoint on 6433.  (http://resources.arcgis.com/en/help/main/10.1/index.html#/Enabling_SSL_using_a_new_CA_signed_certifi...)


  • Everything works great for 6080.

  • I get a timeout message when I access the server on 6433 through Firefox.

  • The Server log throws the following error every time I try to access the site on 6433 (I have about 30 of these) - <Msg time="2012-10-22T13:32:46,85" type="WARNING" code="7709" source="Admin" process="3104" thread="1" methodName="" machine="LOCALHOST" user="" elapsed="">The Web Server was found to be stopped when it should have been started. Restarting it.</Msg>


Possible scenarios that I think could be causing this:
    Certificate is for IIS not Apache Tomcat/whatever ArcGIS Server uses.  If this is the case, the documentation does not specify what SSL certificate is required.
    [LIST=1]Machine name is Localhost not the real Hostname.  If this is the case, than it should be included in the documentation.


I know a few people have run into issues with this, how have you all been able to fix this issue?
0 Kudos
11 Replies
PamBrangan
Occasional Contributor
I was running into this same issue myself. I'm running 10.1 SP1 and was able to successfully implement this workflow using an existing CA cert. The setup was extremely sensitive and would only work for me when done in the following sequence.

1)Install CA cert. on IIS
2)Enable https and http in AGS Admin.
3)Restart Server (this is key)
4)Log back into AGS Admin. Choose and save settings *again for the "self signed" cert. (the default one)
5)Run web adapter with the "https://xxxxx:6443/arcgis/admin" for admin dir.

These items in this specific order were the only way I successfully implemented using SSL with an existing CA certificate while maintaining http & https access. It was  a lot of trial and error to make this work. Hope this helps some of you out there.


Thank you, Charlie, for these steps.  I have one question before I attempt to follow your steps.  I am running 10.1 SP1 on AWS and I'm wondering if I need to add the cert to the load balancer in EC2?  And if so, where in the above steps should that be done?

I'd appreciate any help folks can offer.

thank you.
Pam
0 Kudos
Mtclimber03
Regular Contributor
Hey Pam,

I did not install the cert at the load balancer level and still have success with my CA cert showing at the rest index. Sorry for the late reply.
0 Kudos