Configuring HTTPS using an existing certificate

If you already have a certificate issued by a commercial or internal Certificate Authority (CA), you can use this existing certificate to configure HTTPS in ArcGIS Server. To import this certificate into ArcGIS Server, the certificate and its associated private key must be stored in the PKCS#12 format, which is represented by a file with either the .p12 or .pfx extension. The steps to configure HTTPS using an existing certificate are as follows:

1. Import the certificate into ArcGIS Server.
2. Configure ArcGIS Server to use the certificate.
3. Configure each GIS server in your deployment.
4. Configure HTTPS for your site.
5. Import the certificate into the OS certificate store.
6. Access your site using HTTPS.

Import the certificate into ArcGIS Server

1. Log in to the ArcGIS Server Administrator Directory as the primary site administrator or a user with administrative privileges, for example, https://gisserver.domain.com:6443/arcgis/admin.
2. Browse to machines > [machine name] > sslcertificates.
3. Since the certificate you are importing was issued by a CA, you must first import the CA's root or intermediate certificate. Click importRootOrIntermediate to import the CA's root or intermediate certificate.
4. Click importExistingServerCertificate to import the server certificate.
   1. In the Certificate password field, type the password to unlock the file containing the certificate.
   2. In the Alias field, type a unique name that easily identifies the certificate.
   3. Click Browse to choose the .p12 or .pfx file that contains the certificate and its private key.
   4. Click Import to import the certificate.

Configure ArcGIS Server to use the certificate

To specify the certificate that ArcGIS Server should use, complete the following steps:

1. Log in to the ArcGIS Server Administrator Directory at https://gisserver.domain.com:6443/arcgis/admin.
2. Browse to machines > [machine name].
3. Click edit.
4. Type the name of the certificate that you want to use in the Web server SSL Certificate field.
5. Click Save Edits to apply your change. This automatically restarts your ArcGIS Server site.
6. After your site is restarted, verify that you can access the URL https://gisserver.domain.com:6443/arcgis/admin. If you do not get a response from this URL, ArcGIS Server was unable to use the certificate. Log in to the ArcGIS Server Administrator Directory at http://gisserver.domain.com:6080/arcgis/admin, check your SSL certificate, and configure ArcGIS Server to use a new or different certificate.
7. On the current page, view the property Web server SSL Certificate to verify that the desired certificate will be used for HTTPS.

Configure each GIS server in your deployment

If you have a multiple machine deployment of ArcGIS Server, you must repeat the steps in the previous sections for each GIS server that participates in your site.

Configure HTTPS only for your site

1. Log in to the ArcGIS Server Administrator Directory: https://gisserver.domain.com:6443/arcgis/admin.
2. Browse to security > config > update.
3. For the Protocol parameter, choose the HTTPS Only option and click Update. Your ArcGIS Server site is automatically restarted.

Note:

It takes ArcGIS Web Adaptor one minute to recognize changes to the communication protocol of your site.

Legacy:

In 10.2.1 and earlier versions, you were required to reconfigure ArcGIS Web Adaptor after updating the communication protocol of ArcGIS Server. In 10.2.2 and later versions, this is no longer necessary.

Import the certificate into the OS certificate store

Import the CA's root certificate into the operating system's certificate store:

1. Log in to a machine hosting ArcGIS Server.
2. Copy the signed certificate received from the CA to a location on this computer.
3. Open this certificate, and click the Certificate Path tab. If the Certificate Status: is This certificate is OK., the CA root certificate is present in the Windows certificate store and does not need to be imported. Proceed to step 12.
4. Copy the CA root certificate to a location on this computer.
5. Open this certificate, and click the General tab. Click the button to Install Certificate.
6. Once the Certificate Import Wizard opens to the Welcome panel, click Next.
7. On the Certificate Store panel, choose the option to Place all certificates in the following store.
8. Click the Browse button. On the Select Certificate Store dialog, enable the option to Show physical stores.
9. Expand the Trusted Root Certification Authorities folder to expose its contents. Select Local Computer as the certificate store you want to use. Click OK.
10. On the Certificate Store panel, click Next.
11. Click Finish.
12. Repeat steps 1–11 for each GIS server in your site.
13. Restart each GIS server in your site.

Access your site using HTTPS

Once HTTPS has been configured, ArcGIS Server listens on port 6443 for HTTPS requests. Use the URLs below to securely access ArcGIS Server:

ArcGIS Server Manager	https://gisserver.domain.com:6443/arcgis/manager
ArcGIS Server Services Directory	https://gisserver.domain.com:6443/arcgis/rest/services

Note:

If you rename ArcGIS Server while HTTPS is enabled, you can continue to access ArcGIS Server using HTTPS; however, you must generate a new certificate and configure ArcGIS Server to use it.