Latest Contributions by RandallWilliams

‎10-25-2018

What kind of client are you using? Like, are you using the web app builder, or do you have some JS application that references the REST endpoint directly, or...?

‎10-12-2018

Ah. The plot thickens. This is good. Can you browse to http://portal.domain.com/webadaptor/portaladmin/security/sslCertificates (replacing the placeholders with your Portal instance particulars), log in as an admin to the portal administrator API, and check the Web Server SSL Protocols: value? If it says TLS 1.0, TLS 1.1, and TLS 1.2 I'll have more to offer. I'd like to check what the portal is supporting. Either the portal or the web adaptor server don't support TLS 1.2, and I think that's the issue.

‎10-12-2018

I'm guessing that this is happening when doing an edit against a feature service? Feature service error codes—ArcGIS REST API: Services Directory | ArcGIS for Developers

‎10-12-2018

Hi Bill, I'm very familiar with that bug, I helped test the fix that was installed for 10.6.1 - I also helped write the TLS Whitepaper you posted (thanks for promoting it!) The add data>from portal issue when the server only supports TLS 1.2 should be fixed in 10.6.1 - we're working on patches for previous versions. Can you confirm your Desktop versions and the TLS versions you're supporting on your portal? ArcGIS Desktop 10.6.1 connecting to a portal that only supports TLS 1.2 should work (my personal portal only supports TLS 1.2, and I run Windows 10 as a client). Seems there's more to this than that bug.

‎10-11-2018

Which SSL and TLS versions are you supporting at the web tier? On the desktop machines, which versions of .Net framework are installed? My hunch is that as a client .net on your desktop machines wants to connect using TLS 1.2 but doesn't have the right .net cersion to do that. Try installing .Net framework 4.6 on a test machine and see if that helps.

‎10-04-2018

SSL and TLS are protocols for HTTPS. By default, newer versions of ArcGIS Enterprise only support TLS - SSL was effectively deprecated with the POODLE bug. Modern web servers all support TLS. I think what you're looking to do is to support ONLY TLSv1.0, TLSv1.1, and TLSv1.2, and not support SSLv3. Some organizations attempting to meet PCI compliance only support TLSv1.2. You shouldn't have to acquire a new certificate to support only TLS versions. At the GIS tier, you can configure the TLS versions and cipher suites you want to support via the ArcGIS Admin API. At the web tier, the process is different depending on the web server, but for IIS I tend to use the IISCRYPTO tool to manage the protocols and cipher suites my web servers support.

‎10-04-2018

Do any of these suggestions help? https://community.esri.com/thread/206617-arcgis-10-clean-uninstallation

‎10-03-2018

The Portal for ArcGIS Security 2018 Update 2 Patch has been released for Portal for ArcGIS 10.3.1. ArcGIS Enterprise Administrators should consider installing this patch as high priority, as it addresses an incorrect proxy access control vulnerability, among others. Security patches are released for the last minor release in a series of ArcGIS products that are still in mainstream support. All versions of this patch are available here: Portal for ArcGIS Security 2018 Update 2 Patch Users can also run the ArcGIS Patch Notification tool to check for, download, and install patches. Check for and install software patches and updates—ArcGIS Server (Windows) Installation Guide (10.5) | ArcGIS Enterpri…

‎10-02-2018

Hi Folks, The Esri Software Security and Privacy group wants to hear from you. Our goal is to use this space to start a conversation with Esri customers and users in the realms of Security, Privacy, and Compliance. How can we use this space to create value for you? Which conversation topics would you like to see discussed? What are your compliance goals that you need assistance obtaining? In short, how can we add value to this space to better engage with you? We're listening. Please comment below as to your thoughts. Thanks! Randall Your friendly space admin

‎10-02-2018

In today’s cybersecurity landscape, ensuring the products and services you receive from a software company have security and privacy considerations built-in is paramount. Today, we are publicly releasing an overview of the assurance measures we incorporate, including governance, standards alignment, assessments/tools, vulnerability/incident management, and guidelines utilized. We have also updated the Trust Center to have its own domain, so that users are no longer directed to .doc.arcgis.com pages as part of the main site and we have updated the Documents section descriptions to more easily identify what content is best for you (including the SDLC overview document titled “Esri Software Security and Privacy”). We welcome your feedback on this overview, so feel free to reach out to our team – Esri’s Software Security & Privacy team –[email protected] Reference: Esri Software Security & Privacy (SDLC Overview) –https://downloads.esri.com/RESOURCES/ENTERPRISEGIS/Esri_SDLC.pdf

‎10-02-2018

The ArcGIS SSL/TLS Guidance Briefing has been updated. Updates include specific guidance for ArcGIS Client software, insight into TLS plans for ArcGIS Online, and details regarding ArcGIS Enterprise components. Browse to the ArcGIS Trust Center document repository to review this document and all of our other helpful resources!

‎09-28-2018

I'd reach out to Support Services. Tell them that when a query is made from AGO to display all of the features in this dataset, the query fails. If you request a specific object ID, it works. Can you try clipping out a subset of features and publishing that as a service on ArcGIS.com? Curious if that works. It'll help narrow your issue down.

‎09-25-2018

WebGISDR didn't exist as a feature at 10.3, which is why it's not in the help.

‎09-12-2018

Ah - I wasn't suggesting to enable HSTS - I was thinking that this issue could have been caused *BY* HSTS - if it were enabled. Doesn't sound like that was the case...

‎09-11-2018

What's the specific error message you're seeing? Did you have HSTS configured at the web tier?

Online Status	Offline
Date Last Visited	‎04-10-2026 06:56 AM

My Ideas

Latest Contributions by RandallWilliams

Re: Single Sign On Issues

Re: Can you add data using ArcMap 10.6.1 from Portal 10.5?

Re: Event 1000, Application error ArcSOC.exe

Re: Can you add data using ArcMap 10.6.1 from Portal 10.5?

Re: Can you add data using ArcMap 10.6.1 from Portal 10.5?

Re: Migrate SSL Certificate to TLS Certificate

Re: Download ArcGIS 10.1 (so I can uninstall it to install 10.6.1)

Portal for ArcGIS Security 2018 Update 2 Patches for ArcGIS Enterprise 10.3.1 are available

Help us shape this space!

Esri Secure Development Lifecycle Overview Released

ArcGIS SSL/TLS Guidance Briefing has been updated

Re: Imported layer won't draw in ArcGIS Online map

Re: Upgrading from Arc Server 10.3.1 to 10.6.1

Re: "Can't connect securely to this page" - ArcGIS Portal

Re: "Can't connect securely to this page" - ArcGIS Portal

Re: Update ARCGIS ANTIVIRUS GUIDANCE document

Re: Update ARCGIS ANTIVIRUS GUIDANCE document

Re: Best method to change IAA and PSA passwords

Re: Apache Parquet < 1.15.1 Remote Code Execution ...

Re: ArcSOCs Exceed Max Instance Setting