How do you configure HTTPS and SSL certificates for ArcGIS Enterprise?

1 Step 1: Obtain a certificate

The first step is to obtain a certificate from a trusted certificate authority (CA) or generate a self-signed certificate. A certificate contains information about your identity, your domain name, and your public key. You can use the same certificate for multiple servers or portals, or use different certificates for each one. You can also use wildcard certificates that cover multiple subdomains.

2 Step 2: Install the certificate

The next step is to install the certificate on your server or portal machine. You can use the Windows Certificate Manager, the ArcGIS Server Manager, or the ArcGIS Enterprise Portal Administrator to import the certificate. You need to make sure that the certificate is stored in the Personal or Web Hosting store of the Local Computer account. You also need to grant read access to the certificate for the ArcGIS Server or Portal account.

3 Step 3: Configure HTTPS

The third step is to configure HTTPS for your server or portal. You can use the ArcGIS Server Manager or the ArcGIS Enterprise Portal Administrator to enable HTTPS and select the certificate you installed. You can also choose the HTTPS port, the minimum TLS version, and the cipher suites. You need to restart the server or portal service after changing the HTTPS settings.

4 Step 4: Update the web adaptor

The fourth step is to update the web adaptor for your server or portal. The web adaptor is a component that routes requests from your clients to your server or portal. You need to update the web adaptor configuration to use HTTPS and point to the correct server or portal URL. You can use the web adaptor configuration utility or the command line to update the web adaptor.

5 Step 5: Verify the HTTPS connection

The fifth step is to verify that your HTTPS connection is working properly. You can use a web browser to access your server or portal URL and check if the certificate is valid and trusted. You can also use tools like curl or openssl to test the HTTPS connection and inspect the certificate details. You should see a lock icon or a green padlock in your browser address bar indicating a secure connection.

6 Step 6: Redirect HTTP to HTTPS

The final step is to redirect HTTP requests to HTTPS for your server or portal. This ensures that your clients always use the secure protocol and avoid mixed content errors. You can use the ArcGIS Server Manager or the ArcGIS Enterprise Portal Administrator to enable HTTP to HTTPS redirection. You can also use web server settings or rewrite rules to redirect HTTP requests to HTTPS.