Federeted ArcGIS Server Base ArcGIS GeoEvent Server #12
Closed
opened 3 years ago by rbsetiawan
·
1 comments
Loading…
Reference in new issue
There is no content yet.
Delete Branch '%!s(MISSING)'
Deleting a branch is permanent. It CANNOT be undone. Continue?
ArcGIS GeoEvenet Server befor Federeted
ArcGIS GeoEvenet Server after Federeted
Error SSL Trusted from GeoEvent Server to Portal for ArcGIS or Othe Server
ini terjadi karena SSL Trusted dari ArcGIS GeoEvent ke atau dari Portal for ArcGIS dan Server lain dalam 1 organisasi (Federeted) di anggap tidak aman.
Untuk mengatasi hall ini maka di perlukan penyelarasan ssl atau penyamaan ssl yang di gunakan dari masing-masing ArcGIS
Berikut merupakan stadar atau default ssl yang di unakan atau buil-in dari ArcGIS
Default SSL ArcGIS Enterprise
ArcIS GeoEvent Server SSL Default:
Home > machines > RND07.GISPORTAL.ID
Web server SSL Certificate: SelfSignedCertificate
Home > security > config
SSL Cipher Suites:
TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_256_GCM_SHA384, TLS_RSA_WITH_AES_256_CBC_SHA256, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_128_GCM_SHA256, TLS_RSA_WITH_AES_128_CBC_SHA256, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_AES_256_GCM_SHA384, TLS_AES_128_GCM_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA
ArcGIS Server (Hosting) SSL Default:
Home > machines > RND01.GISPORTAL.ID
Web server SSL Certificate: SelfSignedCertificate
Home > security > config
SSL Cipher Suites:
TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_256_GCM_SHA384, TLS_RSA_WITH_AES_256_CBC_SHA256, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_128_GCM_SHA256, TLS_RSA_WITH_AES_128_CBC_SHA256, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_AES_256_GCM_SHA384, TLS_AES_128_GCM_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA
Portal for ArcGIS SSL Default:
Home > Machines > RND00.GISPORTAL.ID > SSLCertificates
Web Server SSL Certificate: portal
Home > Machines > RND00.GISPORTAL.ID > SSLCertificates
Web Server SSL Cipher Suites:
TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_256_GCM_SHA384, TLS_RSA_WITH_AES_256_CBC_SHA256, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_128_GCM_SHA256, TLS_RSA_WITH_AES_128_CBC_SHA256, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_AES_256_GCM_SHA384, TLS_AES_128_GCM_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA
Change SSL ArcGIS Enterprise
Step 1 ArcIS GeoEvent Server SSL gisportal.id:
Home > machines > RND07.GISPORTAL.ID > edit
Web server SSL Certificate: SelfSignedCertificate
Home > security > config
SSL Config:
Error GeoEvent Server: An SSL Handshake error has occurred when attempting to communicate with URL: "https://RND00.GISPORTAL.ID:7443/arcgis/sharing/community/self?f=json&token=-LDzLnbwOUH7SB4H69nXzXcE3hwtcrRBUYDwPw2P8r0jUn9CgVRVZsqmAOksjri2dSfkn-DzHZbLg-ZJlSy3O2vwK1vvxTp0fIyJG9vzag1flRLdeIb5OrFzgkwj-znS50LW46u15wgI7U6LUh7pNhZTPb33eeoVia_J2OiOjKmjnP9OOfwgcnL43qYsbvILu5pxwHSp1tcCeESqYO7l_nbklN7rk0h-g9mQdU3yHOFN_kNuEYkKJJf2ioIvmtiI". Please make sure you have imported the SSL certificate from "https://RND00.GISPORTAL.ID:7443/arcgis/sharing/community/self?f=json&token=-LDzLnbwOUH7SB4H69nXzXcE3hwtcrRBUYDwPw2P8r0jUn9CgVRVZsqmAOksjri2dSfkn-DzHZbLg-ZJlSy3O2vwK1vvxTp0fIyJG9vzag1flRLdeIb5OrFzgkwj-znS50LW46u15wgI7U6LUh7pNhZTPb33eeoVia_J2OiOjKmjnP9OOfwgcnL43qYsbvILu5pxwHSp1tcCeESqYO7l_nbklN7rk0h-g9mQdU3yHOFN_kNuEYkKJJf2ioIvmtiI" into GeoEvent's site via the ArcGIS Server Admin API. Root Cause: "PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target".
Step 2 ArcGIS Server (Hosting) SSL gisportal.id:
Home > machines > RND01.GISPORTAL.ID > edit
Web server SSL Certificate: gisportal.id
Home > security > config
SSL Config:
Error GeoEvent Server: An SSL Handshake error has occurred when attempting to communicate with URL: "https://RND00.GISPORTAL.ID:7443/arcgis/sharing/community/self?f=json&token=lkkxS-xSmFO3tXSCtmEjJs_OH91SbV7aYMcnkkNgQVGPXj7r-rMliwlGd-f_TEdtlaK9MACfI7FCw6wdyYV_2lwu71cGzFiA8yThCgPycAWXxK6wb245x0vta7xkbS60Q9s9Gt4M8Uxa9i37LaaHqJNkObkG5pfSkxzwIJZFv_tVL_VV4wcCRYARGg93u09Le2Q8O_jQSzhTqXCAT5VlRnuYv7QfaRqSEOUvoFwyWRUvbSMbHIw3SjsvxZyuS_ws". Please make sure you have imported the SSL certificate from "https://RND00.GISPORTAL.ID:7443/arcgis/sharing/community/self?f=json&token=lkkxS-xSmFO3tXSCtmEjJs_OH91SbV7aYMcnkkNgQVGPXj7r-rMliwlGd-f_TEdtlaK9MACfI7FCw6wdyYV_2lwu71cGzFiA8yThCgPycAWXxK6wb245x0vta7xkbS60Q9s9Gt4M8Uxa9i37LaaHqJNkObkG5pfSkxzwIJZFv_tVL_VV4wcCRYARGg93u09Le2Q8O_jQSzhTqXCAT5VlRnuYv7QfaRqSEOUvoFwyWRUvbSMbHIw3SjsvxZyuS_ws" into GeoEvent's site via the ArcGIS Server Admin API. Root Cause: "PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target".
Step 3 Portal for ArcGIS SSL gisportal.id:
Home > Machines > RND00.GISPORTAL.ID > SSLCertificates
Web Server SSL Certificate: gisportal.id
Home > Machines > RND00.GISPORTAL.ID > SSLCertificates
SSL Config:
Success GeoEvent Server:

Portal for ArcGIS federeted ArcGIS Server (Hosting) not valid:

Portal for ArcGIS federeted ArcGIS GeoEvent not valid:
