Error loading new SSL cert to ArcGIS Monitor 2023

[WhitneyLoy]

I am getting an error when try to load a new SSL cert into ArcGIS Monitor 2023. Says "Unsupported"... not a lot information to go on here.

[DerekLaw]

Hi @WhitneyLoy,

Can you please provide more information about the new SSL cert? Is there anything different between this and the previous one you were using? Did you change CA provider perhaps? Also, are you using Monitor 2023.2?

[WhitneyLoy]

Our old cert expired and this is the new one. We are reviewing the article referenced below and checking our new cert. Yes, we are using 2023.2. I will report back next week.

[JeffMertzXcel]

Old post, but just ran into this with applying/replacing a new cert to Monitor 2025.0. The certificate process is done through an internal automated process. We fill out the request form the same way every time, but it seems Monitor was fine with the "old" certs that are now near expiration, but doesn't like the replacements. These "new" certs work fine importing into all other Enterprise products. I can dump out the cert properties through powershell but do not see any major differences between old and new certs.

[GeoJosh · Accepted solution]

Hi @WhitneyLoy,

ArcGIS Monitor's SSL provider recently underwent a major version change and, in doing so, has deprecated a number of older and less secure algorithms. Please review the technical article linked below and see if this situation applies to you.

https://support.esri.com/en-us/knowledge-base/problem-openssl-3-x-changes-and-legacy-provider-deprec...

A list of deprecated algorithms can be found here:

https://www.openssl.org/docs/man3.0/man7/OSSL_PROVIDER-legacy.html

Josh

[WhitneyLoy]

I was able to get this work by reexporting the cert from MMC using the AES256-SHA256 option as described in the ESRI support article.

[GraceSmith99]

When encountering the "Unsupported" error while loading a new SSL certificate into ArcGIS Monitor 2023, it's essential to ensure compatibility and follow proper procedures.

Check if the SSL certificate format is supported, as ArcGIS Monitor may require certificates in specific formats such as .p12 or .pfx. Additionally, verify if the certificate has a passphrase, and if so, provide it during the configuration process.

If the issue persists, consult the ArcGIS Monitor community forums or support resources for more detailed assistance.