Server cannot be verified

[JamesCrandall]

Tracker service: AGOL hosted (we do not have ArcGIS Enterprise or Portal)

Mobile Device: Android Galaxy Note 10+

Tracker v 19.4.0

I am unable to launch the Tracker app when attempting to sign in with ArcGIS Enterprise and receive the error: "The server you are trying to connect to (https://<our AGOL org url>) cannot be verified"

My coworker using iOS is able to sign in just fine.  We are both licensed and have been added to the list of users of the tracker view.

Have uninstalled/re-installed, cleared app cache, and just about out of options... Thought I'd post to see if there's any quick solutions.

Thanks!

[Anonymous User]

It's probably something to do with your SSL certifcate. Does your Android device have the certificate for your portal installed and trusted?

There's some information about it in this Collector thread:

https://community.esri.com/thread/203945-collector-for-arcgis-the-server-you-are-trying-to-connect-c... 

[JamesCrandall]

Hi Aaron -- thank you for the reply!  I'm unaware of any certificate requirements and will take a look at the thread you've referenced.  

[JamesCrandall]

I forgot to mention: I have Explorer installed on the same device and when I go thru the same sign-in process it completes successfully.

[Anonymous User]

I think the released version of Explorer (released in 2018) does not block un-trusted hosts. If you install the Beta version of Explorer (2020) it should block untrusted hosts similar to Tracker.

[JamesCrandall]

Another co-worker with an Android device has no issue and authenticates successfully.

Is this an issue with the tracker.arcgis.app domain, our own adfs network or is it just something with this particular device?

[Anonymous User]

Oh sorry, for some reason I thought you were signing into Enterprise. It's very weird you are seeing this when signing into ArcGIS Online. The error indicates that specific device does not trust the certificate at "https://your-org.maps.arcgis.com". Can you sign into your org using Chrome with the same url on that device?

[JamesCrandall]

Yes!  After clicking thru the Enterprise Login button I am directed to our adfs login and required to enter credentials again.

Thank you again!

[JamesCrandall]

It appears the certificate contained in the app that is being downloaded from the play store for android is out of date (December 31, 2019?).  However, the certificate for web version http:/tracker.arcgis.com appears to be valid.

Workflow:

1. Completely cleared data and cache prior to uninstalling existing ESRI Tracker app on the android device.

2. Uninstalled ESRI Tracker.

3. Restarted device.

4. In Google Chrome browser, navigated to http://tracker.arcgis.com (I think it auto-redirects to appropriate url).

5. Sign in-->Enterprise Login-->[org url first part]-->Continue

6. Successfully logged in!

7. Re-install ESRI Tracker app on device.

8. Attempt to sign-in via same as in step #5.

9. Error: "The server you are trying to connect to (https://www.arcgis.com) cannot be verified"

[Anonymous User · Accepted solution]

This was resolved offline, there were two issues.

1. The certificate at http://tracker.arcgis.com was invalid - the development team addressed this.

2. There was an issue with the organizations proxy server and intermediate certificate - this was resolved by the organizations IT department.