Install a CA-issued certificate

Clients connecting to your Version 1 (V1) deployment receive warning messages if your ArcGIS Server site or ArcGIS Enterprise portal is not configured with a certifying authority (CA) certificate recognized by the client. To prevent untrusted site messages from appearing every time clients connect, use ArcGIS Enterprise Cloud Builder for Microsoft Azure to install an SSL (or TLS) certificate to your site.

If you need to change certificates for Version 2 (V2) deployments, you must use the Azure portal to do so. See the Microsoft Azure documentation for instructions.

If you initially deployed your V1 ArcGIS Server site or ArcGIS Enterprise portal with a self-signed certificate, follow these steps to install a CA-issued certificate.

1. Obtain an SSL certificate and export the certificate to a .pfx file.
2. Set up CNAME mapping for to your cloud service domain.
3. Start ArcGIS Enterprise Cloud Builder for Microsoft Azure.
4. Sign in to Microsoft Azure.

   If you want to use the Microsoft Azure Government cloud and have an Azure Government subscription, check U.S. Government Cloud.

5. Choose the Azure subscription that contains the deployment to which you want to install an SSL certificate.
6. Click the down arrow next to the deployment in the Deployments list and click the certificate button .

   The Certificate Information page opens.

7. Type the CNAME for your deployment in the Domain Name (Alias) field.
Choose the source type for the certificate.
8. If you have a certificate (.pfx) file on disk that you want to reference, choose From File, browse to the location of your certificate (.pfx) file, and type the password to authenticate use of the .pfx file.

   This password was set when you created the .pfx file.

9. If you have an SSL certificate stored in an Azure key vault, choose From Key Vault.

   See Azure documentation for more information on keys, secrets, and certificates.

10. Choose the Key Vault from the drop-down list and choose the Certificate from the drop-down list.
11. Provide the site administrator's user name and password.
12. Click next to install the certificate.