Latest Contributions by RandallWilliams

The biggest issue I'd want to be aware of would be on-demand scanning for changes to the config-store. If the config-store is constantly being scanned (especially if the config-store is hosted on a file share somewhere) I could easily see issues.  ... View more

When you get a certificate make sure to set the IP address as the certificate's SAN (subject alternative name) ... View more

Organizations frequently enforce password policies forcing users to reset passwords every x number of days. There's a concept of 'managed service accounts' that would help password management with ArcGIS Enterprise. Please contact support services to request to be added to the list of users who would like to see these enhancements implemented: [#ENH-000099031 ArcGIS Server's setup (GUI) requires the administrator to supply the username (which is known) and the password (which is unknown) in order for the setup to proceed. This precludes the use of managed service accounts with ArcGIS Server.] [#ENH-000099020 Add support for managed service accounts within the Portal for ArcGIS product setup (either silent or gui setup.)] ... View more

Apologies - no. My response was specifically in regard to ArcGIS Enterprise with a GIS Server federated with Portal. I don't think that these are the same issues. ... View more

This has nothing to do with IIS. This could be related to this issue: [#BUG-000102793 Large Active Directory group structures cause latency issues with Portal for ArcGIS.] This was addressed in 10.5.1.  ... View more

I think that the question is essentially 'Can I federate ArcGIS Server with ArcGIS Online?' per this idea - is that correct? https://community.esri.com/ideas/12092  ... View more

Is this machine on AWS perchance? ... View more

.p7s is for digitally signing emails. I don't think that will work. Judging by your last question, I think we need to take a step back. There are multiple servers in question, and they are mutually exclusive. The web adaptor is installed at the IIS tier. The IIS web server will have it's own web server. Configuring HTTPS at the web tier is a process independent of configuring HTTPS at the GIS tier. At the GIS tier, you have the ArcGIS Server/Portal (ArcGIS Enterprise). Each application server that participates in ArcGIS Enterprise could also have HTTPS enabled (and a certificate installed). Many organizations choose to enable HTTPS with a CA signed certificate at the web tier (on IIS), and use the self signed certificate at the GIS tier. Some organizations require a CA signed certificate at both the web and GIS tiers. The documentation you've been following is meant to apply a CA signed certificate at the GIS tier. The simplest way for you to convey to your IT team to obtain the correct certificate is for them to obtain a certificate from the CA that is meant to be provided for a Tomcat application server. The CA should know exactly what to provide. You'll want to only follow step one from this doc: Download the SSL certificate Download your certificate from the unique secure link we provide your technical contact via order fulfillment email. The ZIP file you download contain the SSL and Intermediate CA certificate in PKCS#7 file (i.e. ssl_certificate.p7b). Unzip the files onto the server where you will install the certificate. https://knowledge.rapidssl.com/support/ssl-certificate-support/index?page=content&actp=CROSSLINK&id=SO16181 From here, follow the Esri documentation. Use the web tools provided in with the ArcGIS Enterprise Admin APIs to import the cert. I'd suggest against manually attempting to import the certificate unless you're comfortable with the Java keytool command. ... View more

If you have a valid .cer, I think you can convert it using OpenSSL. Here's an online tool that might work: SSL Converter - Convert SSL Certificates to different formats  ... View more

Real-Time & Big Data GIS‌ I don't know if a Salesforce connector for Geovent exists. You could build one using the SDK, but I don't think there's one out of the box. Mentioned the Geoevent space in case I'm incorrect. Extending GeoEvent Server—Real-Time Data Feeds and Sensors (10.5.1) | ArcGIS Enterprise  ... View more

That can't be a .txt file. The certificate signing request (CSR) would have been a text file, but what you have above is a .cer or .der. Did you change the extension when you received the response from the CA? Regardless, what you're going to want is a PKCS#7 file. The file name will be in the format of certname.p7b. https://knowledge.rapidssl.com/support/ssl-certificate-support/index?page=content&actp=CROSSLINK&id=SO16181 If the objective is to install the cert on ArcGIS Server itself (and not to the Web Adaptor hosted on IIS), then you can either request do download in .p7b format or convert the cert from .cer or .der to .p7b using OpenSSL or a tool like this: https://www.sslshopper.com/ssl-converter.html. ... View more

Do you see a more verbose message in the GIS Server logs? In which format did the certificate come from your CA? ... View more

Is the password actually encrypted or no? When you save the JSON for this setting, Portal should encrypt the password and set the "isPasswordEncrypted": "false" value to "true". ... View more

Typically HTTPS certificates are issued for a hostname, not an IP address. Did you edit the hosts file on your android device or your GIS server? I'm thinking likely GIS Server. If that's the case, how will the mobile device know how to reach the GIS Server? If you edited the hosts file, why are you trying to connect via IP? Hosts file is for name resolution, and you're trying to connect via IP.  You'll need to provide more details. As it is, there's too many variables to work out and your workflow doesn't make sense. ... View more