Unable to install latest security patches for Portal for ArcGIS and ArcGIS Server (10.9.1)

[arahman_mdmajid]

We're having trouble installing the latest security patches for Portal for ArcGIS (Portal for ArcGIS Security 2025 Update) and ArcGIS Server (ArcGIS Server Security 2025 Update 1). When we try to install, we get an error saying "No installed products have the version 10.9.1".

We've also tried applying a previous patch that we've already installed, but we get another error: "Could not find any $HOME/.ESRI.properties.xyzx files matching this patch version (10.9.1)". We've checked our versions and system requirements, but can't seem to resolve the issue. Has anyone else encountered this problem?

[George_Thompson]

If you run the PatchFinder tool, what does it report?

It should at least report the version of Esri software installed.

What is the OS that you have 10.9.1 deployed on?

[arahman_mdmajid]

We're running Portal for ArcGIS on Red Hat Enterprise Linux Server release 7.9 (Maipo). Recently, we tried to upgrade from version 10.9.1 to 11.3, but the upgrade failed and reverted back to 10.9.1.

The Patch Finder and patchnotification tool shows that we have Portal for ArcGIS 11.3 installed, but the portal diagnostic tool indicate that we're still on version 10.9.1. Here are the results: 

Patch Finder result:

 Searching Portal for ArcGIS ...

  *********Portal for ArcGIS install summary:********
  Portal for ArcGIS 11.3 Install Location: 
  /arcgis/portal
 
  Service Pack / Patch / Hot Fix Found:

  Patch-ID: Portal for ArcGIS 10.9.1 Security 2023 Update 1 Patch B
  Date Installed: 08/09/23 08:38:15

Portal Diagnostic Tool The portal diagnostic tool shows the following information:

========================================================================
                Portal for ArcGIS 10.9.1 Diagnostic Tool
                                    
                   Hostname: 
========================================================================

 DIAG000: Check for installation as root                       [PASSED]
 DIAG001: Check for 64-bit architecture                        [PASSED]
 DIAG002: Check OS version                                     [PASSED]
 DIAG003: Check hostname for invalid characters                [PASSED]
 DIAG005: Check system limits                                  [PASSED]
 DIAG004: Check installed packages                             [PASSED]
 DIAG016: Check Portal for ArcGIS ports                        [PASSED]
 DIAG024: Check localhost resolution                           [PASSED]
 DIAG029: Check file system type                               [PASSED]
 DIAG020: Check hostname IP address mismatches                 [PASSED]
 DIAG026: Check processes of Portal for ArcGIS core services   [WARNING]
 DIAG028: Check data directory                                 [PASSED]

------------------------------------------------------------------------
There were 0 failure(s) and 1 warning(s) found:


WARNINGS:
------------------------------------------------------------------------
*** DIAG026: One or more core services was not started.  Start Portal
for ArcGIS by running the startportal.sh script or restart Portal for
ArcGIS if it is already started.

The discrepancy between the Patch Finder results and the portal diagnostic tool is causing confusion. We're not sure where the 11.3 version is coming from and is there a way to rectify the situation?

[George_Thompson]

Yeah, that is a not what I would expect.

I would contact technical support and work with them on this. This is the best path forward.

It seems that the roll back was not 100% successful (given I am not sure how you did this).

[MikeVolz]

Can you explain how you rolled back the software (webgisdr, server backups, server snapshots, etc. with order of operations)?

[arahman_mdmajid]

We took snapshots of our HA machines and also took backup using WebGISDR. Server, and Data Store components were also backed up using their tools before attempting to upgrade from 10.9.1 to 11.3. However, we missed a crucial step and started the upgrade on RHEL 7.9 instead of RHEL 8, which caused the portal upgrade to fail.

After upgrading the OS to RHEL 8, we re-attempted the upgrade, but it failed again due to a bug (BUG-000167282). ESRI support advised us to proceed with upgrading the other components and provided files to resolve the issue. Unfortunately, this corrupted the index, and we were advised to revert back to our snapshots.

We restored our machines from the snapshots and the config store from a point-in-time backup. We are not entirely sure about the restored items in the config store as there was no way to check them except from their file modification time. We then switched the servers on on in the order of Data Stores, Server, and then Portal machines. Our Sever componenets came out unfederated which led us to join the sites again and restored from our server backup, which restored our published services. However, we encountered issues with data store validation and machine registration, which we eventually resolved by re-joining the data stores machine as well.

Now that everything is back to normal, we're trying to apply new security patches, but the Patch Finder shows 11.3 instead of 10.9.1, despite the admin interface showing 10.9.1. We're unsure why this discrepancy exists and would appreciate any guidance on resolving this issue.

TL;DR: We attempted to upgrade from 10.9.1 to 11.3, but it failed due to OS compatibility and a bug. We reverted back to our snapshots, restored our machines, and resolved issues with Server and Data Store machine registration. Now, we're trying to apply security patches, but the Patch Finder shows 11.3 instead of 10.9.1, causing confusion.