We are trying to run Field Maps onto Windows 11 on the Android Subsystem. We can open field maps and can connect to AGOL. The problem is we want to use for our internal ArcGIS Enterprise. For ArcGIS Enterprise we use a certificate signed by the domain CA.
When we connect to our portal from Field Maps, we get an error about an untrusted certificate. The problem is there does not seem to be a (straight forward) way that we could load the root certificate onto the device.
Does anyone know how this would be done?
Solved! Go to Solution.
Hello @ScottEwart,
I have included some steps to installing a User CA cert on Windows Subsystem for Android. WSA hides “.cer” files in the Windows file sharing tool. In order to install a user root certificate, you will need to rename, move and rename the certificate file. I have filed an enhancement request with the Microsoft team to try and make this process simpler (or at least fewer steps). Once we get that a bit dialed in with them, I can make a blog article.
Prepare the certificate file:
Configure WSA for Windows file access and stage certificate:
Install Certificate:
let me know how that goes for you -
Jake Brown
Field Maps Product Engineer
Hey Scott,
I had a similar issue with getting Survey123 app working with our Enterprise deployment.
It ended up being that the certs had an incomplete chain which caused them to not be trusted by Android.
Using an SSL cert checker should hopefully shed some light.
Go Daddy for example or searching your SSL providers site for a cert checker to verify the chain is complete was what revealed our problems.
ssltools.godaddy.com/views/certChecker
The problem is specifically how would one load a root cert into the Android subsystem on Windows 11. This does not seem to be a straight forward process
Hello @ScottEwart,
I have included some steps to installing a User CA cert on Windows Subsystem for Android. WSA hides “.cer” files in the Windows file sharing tool. In order to install a user root certificate, you will need to rename, move and rename the certificate file. I have filed an enhancement request with the Microsoft team to try and make this process simpler (or at least fewer steps). Once we get that a bit dialed in with them, I can make a blog article.
Prepare the certificate file:
Configure WSA for Windows file access and stage certificate:
Install Certificate:
let me know how that goes for you -
Jake Brown
Field Maps Product Engineer
Thank you for this information. I will give this a try and let you know.
Scott Ewart
Just a follow up - I worked with the Microsoft team and was able to get .cer and .pem files natively supported by the WSA file handler feature and created a blog outlining the steps.