Latest Contributions by RandallWilliams

‎01-12-2018

While I'm unsure at this point, I think this issue may be related to the MS notice regarding the .net 4.7.1 security rollup. https://blogs.msdn.microsoft.com/dotnet/2018/01/09/net-framework-january-2018-security-and-quality-rollup/ "Please avoid installing this update on Windows 7 or Windows Server 2008 R2. See .NET Framework January 2018 Rollup Known Issue KB4074906 – “TypeInitializationException” or “FileFormatException” error in WPF applications for more information. More information will be provided here when a fix is made available." Will follow up.

‎01-12-2018

Hi Ed, thanks for reporting this issue. I've reproduced this issue in house on a Windows 2008 r2 machine. Steps are: 1. install .net 4.7.1 2. Install KB KB4055002 If earlier versions of .net are installed, KB4055002 doesn't impact PRO. I've reported this issue to Esri Development.

‎01-11-2018

The log reads like somethings blocking access to RMI, which ArcGIS Server uses internally when publishing services. By default RMI runs on port 1098, and should increment up if that port is in use. http://enterprise.arcgis.com/en/server/latest/install/linux/ports-used-by-arcgis-server.htm

‎01-11-2018

I'd like to be sure I understand the requirement here. I understand that you've disabled the services directory, but that only disables the HTML representation that a user can access in order to perform operations against a web service via a browser. It doesn't prevent clients from communicating with the resource via text/JSON. Given the nature of the services, could you potentially enable the services directory, secure all of the services, and provide a specific user to the client to access this single web service? Given the sensitivity you mention, I'd expect that most of those services are secured regardless.

‎01-11-2018

Philip's response above is going to be the best bet. I totally forgot about that setting. Updating the SAN would also have worked, but Philip's is the 'proper' fix.

‎01-11-2018

If you're working with Windows Server 2008r2 or Windows 7, then this issue is likely related conflicts with patches that Microsoft has released regarding the Meltdown and Spectre bugs. As Carmel Connolly mentioned above, we've been discussing this issue in this blog: https://blogs.esri.com/esri/arcgis/2018/01/08/meltdown-and-spectre-processor-vulnerabilities Esri support services is tracking this as [#BUG-000110662 Geoprocessing service instances crash after installing windows patches on Microsoft Windows Server 2008 R2 or Windows 7. ] We are diligently testing and investigating this issue.

‎01-10-2018

Ok, got it. Does that mean that https://internal.gis.bisnet.com/team is a DNS alias that points to your web adaptor? If that's the case, that would imply that the CN issued for your cert is also internal.gis.bisnet.com. Is that correct? If those are correct, I'd address this issue by adding updating your cert to include server01.ina.bisnet.com in the cert's SAN (Subject Alternative Name). I think that you're getting that error because the browser doesn't believe that the cert that's presented matches the hostname you're reaching. Setting the SAN would help correct that.

‎01-10-2018

I'm unsure I completely understand. A few questions: Are Portal and Server installed on separate machines? How many web adaptors are you using, and where are they located? There should be two, one for Portal and one for Server. Portal is on server01.ina.bisnet.com, correct? If you're installed on two separate machines, then that puts ArcGIS Server on internal.ina.bisnet.com, is that correct? The response to the call to the SELF resource would be coming from the Portal.

‎01-10-2018

Sounds like you need to add the root certificate to the machines Trusted Toot Certificate Authorities Store. Step 1 - Download All Certs and Chains Open the website in question via HTTPS. Click on the lock icon/shield icon in the browser > View Certificate > Install Certificate... Choose "Place all certificates in the following store" > Browse > Personal > OK > Finish Look at the "Certification Path" and identify if additional certificates are in a chain. If another certificate exists in the chain above the one you installed above, click on it and click View Certificate. Repeat steps 2-4 above until all certificates have been added to your Personal certificate store. Step 2 - Access Certificate Manager Console Start > Run > "mmc" to launch the Microsoft Management Console (MMC) Click File > Add/Remove Snap-in Select "Certificates" > Add > My User Account Select "Certificates" > Add > Computer Account Click OK Step 3 - Copy Certificates into Local Computer Store Note Step 1.4 above, where you viewed the certification path. Here we need to use that information to install a certificate path into the Local Computer certificate store. Within the Certificate Management Console created in Step 2 above, expand Certificates - Current User > Personal > Certificates. Locate the certificate from the top of the chain (this is the root ceritificate authority) and drag this into Certificates - Local Computer > Trusted Root Certification Authorities > Certificates. If applicable, locate the "middle chain" aka Intermediate Certifiates, and drag them certificate into Certificates - Local Computer > Intermediate Certification Authorities > Certificates. Locate the final certificate (bottom of the chain) and drag that into Certificates - Local Computer > Trusted Publishers > Certificates. Step 4 - Restart ArcGIS Server Type "services" in start menu search dialog and select it from the list select ArcGIS Server service and click "restart"

‎01-08-2018

And just to confirm, you're mapping ports 80 and 443 on the firewall to ports 80 and 443 on the machine hosting ArcGIS Server and IIS?

‎01-08-2018

Hmmm...are you routing from the firewall to the web server using IP or hostname? If hostname, where's the firewall getting DNS from?

‎01-08-2018

I'm unsure that I understand the path you've undertaken to attempt to resolve this issue. If you're using the web adaptor, the web adaptor will proxy between the external facing ports 80 and 443 to the GIS Server on ports 6080 and 6443. No NATting/port mapping/redirects are required in that sense. What you've done is ship incoming requests to the GIS Server, running on port 6080. None of the documents in the screenshot above are hosted on the GIS Server - they're all hosted on your IIS instance. The first thing you need to do is undo the port mapping you've set up at the router end (from port 80 to port 6443). By setting that mapping, you're bypassing your web server entirely. Ports 80 and 443 on the router should translate to ports 80 and 443 on your IIS web server. The web adaptor will handle proxying from the web adaptor instance (called ArcGIS) to your GIS Server.

‎01-05-2018

While I wouldn't personally use windows 10 in a PROD environment, Windows 10 is perfectly capable of running an instance of the IIS web server. I do so on my own laptop. While people frequently talk about a server as a distinct piece of hardware, a 'server' is actually software that runs on a machine that listens for requests from clients and responds in kind. IIS is just a role that can be enabled on a Windows machine. The process of enabling IIS is pretty easy. Windows 10 installs IIS version 10 instead of version 8, for obvious reasons. It’s the same exact process either way. https://www.howtogeek.com/112455/how-to-install-IIS-8-on-windows-8/ Once you have IIS enabled, you'll want to install the web adaptor as part of your ArcGIS Enterprise installation. The web adaptor installer will configure the IIS role features you need. ArcGIS Enterprise ships with it's own JRE. Unless you're deploying the Java web adaptor, you don't need to install a separate JRE. In fact, the IIS instance will only provide a hosting environment for the web adaptor. ArcGIS Enterprise is a complete system that doesn't have external dependencies on additional web servers beyond the web adaptor.

‎01-02-2018

Hi Joe, Apologies for the delay. If read/writes rates are impacted, there can be corruption when multiple machines attempt to write to the config-store simultaneously. I saw this usually when config-stores were housed on NAS/SAN devices that we not really designed for 'immediate consistency' - think servers for streaming media files instead of high I/O.

‎12-21-2017

Is the webcontextUrl set? http://server.arcgis.com/en/portal/latest/administer/linux/using-a-reverse-proxy-server-with-portal-for-arcgis.htm

Online Status	Offline
Date Last Visited	‎04-10-2026 06:56 AM

My Ideas

Latest Contributions by RandallWilliams

Re: ArcGIS Pro Crash - Suspected Windows Update

Re: ArcGIS Pro Crash - Suspected Windows Update

Re: ArcGIS Server 10.5 server starting but services failing to start

Re: Service Access For A Client

Re: An insecure item from ArcGIS Portal's Server URL is being loaded

Re: Problem starting PublishingTools Service

Re: An insecure item from ArcGIS Portal's Server URL is being loaded

Re: An insecure item from ArcGIS Portal's Server URL is being loaded

Re: ArcGIS Server - Utilities - PrintingTools - • Export Web Map Task

Re: Can't Access wwwroot Directory After Firewall/Router Restart

Re: Can't Access wwwroot Directory After Firewall/Router Restart

Re: Can't Access wwwroot Directory After Firewall/Router Restart

Re: Windows 10 and ArcGIS Server

Re: ESET AntiVirus Inteferring with ArcServer or MSSQL (SDE)

Re: Unable to access shared feature service from outside our domain.

Re: Update ARCGIS ANTIVIRUS GUIDANCE document

Re: Update ARCGIS ANTIVIRUS GUIDANCE document

Re: Best method to change IAA and PSA passwords

Re: Apache Parquet < 1.15.1 Remote Code Execution ...

Re: ArcSOCs Exceed Max Instance Setting