Enabling SSL using a self-signed certificate
This tutorial shows you how you can enable SSL for ArcGIS Server using a self-signed certificate. The steps to enable SSL using a self-signed certificate are:
Create a new self-signed certificate
- Log in to the ArcGIS Server Administrator Directory: http://gisserver:6080/arcgis/admin.
- Navigate to machines > [machine name] > sslcertificates.
- Click generate.
- Enter values for the parameters on this page:
Option
Description
Alias
A unique name that easily identifies the certificate.
Key Algorithm
Use RSA (the default) or DSA.
Key Size
Specifies the size in bits to use when generating the cryptographic keys used to create the certificate. The larger the key size, the harder it is to break the encryption; however, the time to decrypt encrypted data increases with key size. For DSA, the key size can be between 512 and 1,024. For RSA, the recommended key size is 2,048 or greater.
Signature Algorithm
Use the default (SHA1withRSA). If your organization has specific security restrictions, then one of the following algorithms can be used: SHA256withRSA, SHA384withRSA, SHA512withRSA, SHA1withDSA for DSA.
Common Name
Use the domain name of your server name as the common name.
If your server will be accessed on the Internet through the URL https://www.gisserver.com:6443/arcgis/, use www.gisserver.com as the common name.
If your server will only be accessible on your local area network (LAN) through the URL https://gisserver:6443/arcgis, use gisserver as the common name.
Organizational Unit
The name of your organizational unit, for example, GIS Department
Organization
The name of your organization, for example, Esri
City or Locality
The name of the city or locality, for example, Redlands
State or Province
The full name of your state or province, for example, California
Country Code
The abbreviated code for your country, for example, US
Validity
The total time in days during which this certificate will be valid, for example, 365.
- Click Generate to generate the certificate.
Configure ArcGIS Server to use the SSL certificate
To specify the SSL certificate that ArcGIS Server should use:
- Log in to the ArcGIS Server Administrator Directory: http://gisserver:6080/arcgis/admin.
- Navigate to machines > [machine name].
- Click edit.
- Enter the name of the SSL certificate that you want to use in the box for Web server SSL Certificate.
- Click Save Edits to apply your change.
- On the current page, view the property Web server SSL Certificate to verify that the desired SSL certificate will be used for SSL.
Configure each GIS server in your deployment
If you have a multimachine deployment of ArcGIS Server, you must create a new self-signed certificate for each GIS server that participates in your site and configure each machine to use the certificate.
Enable SSL for your site
- Log in to the ArcGIS Server Administrator Directory: http://gisserver:6080/arcgis/admin.
- Navigate to security > config > update.
- For the Protocol parameter, choose the HTTP and HTTPS option then click Update. This will automatically restart your ArcGIS Server site.
- After your site is restarted, verify that you are able to access the URL https://gisserver:6443/arcgis/admin. If you do not get a response from this URL, ArcGIS Server was unable to use the specified SSL certificate. Check your SSL certificate and configure ArcGIS Server to use a new or different SSL certificate.
- If you are able to access the URL https://gisserver:6443/arcgis/admin, navigate to security > config > update.
- For the Protocol parameter, choose the HTTPS Only option then click Update.
![Note Note](rsrc/note.png)
If you are using the ArcGIS Web Adaptor with ArcGIS Server, you'll need to reconfigure it with your server. This will update the Web Adaptor's configuration to reflect the changes you made when enabling SSL on your site. For instructions, see Configuring the Web Adaptor after installation.
Access your site using SSL
Once SSL has been configured, ArcGIS Server listens on port 6443 for HTTPS requests. Use the URLs below to securely access ArcGIS Server:
ArcGIS Server Manager | https://gisserver:6443/arcgis/manager |
ArcGIS Server Services Directory | https://gisserver:6443/arcgis/rest/services |
![Note Note](rsrc/note.png)
If you rename ArcGIS Server while SSL is enabled, you can continue to access ArcGIS Server using SSL; however, you must generate a new SSL certificate and configure ArcGIS Server to use it.