Enabling SSL using the default self-signed certificate
This tutorial shows you how you can enable SSL for ArcGIS Server using the default self-signed certificate. When you first create your ArcGIS Server site, a self-signed certificate is automatically created for each GIS server machine that participates in your site. By default, ArcGIS Server will use this self-signed certificate when SSL is enabled.
In rare cases, the self-signed certificate for ArcGIS Server may no longer be valid, usually because the certificate has expired or the hostname of the machine was changed. In these cases you will need to generate a new self-signed certificate. For instructions on how to do this, see Creating a new self-signed certificate.
If you want to view the default self-signed certificate, you can do so by following the instructions below:
- Log in to the ArcGIS Server Administrator Directory: http://gisserver:6080/arcgis/admin.
- Navigate to machines > [machine name] > sslcertificates > selfsignedcertificate.
Enable SSL for your site
- Log in to the ArcGIS Server Administrator Directory: http://gisserver:6080/arcgis/admin.
- Navigate to security > config > update.
- For the Protocol parameter, choose the HTTPS Only option then click Update. Your ArcGIS Server site is automatically restarted. In a developer environment, you may also choose to use the HTTP and HTTPS option. With this option, users will be able to access ArcGIS Server through either HTTP or HTTPS.
If you are using the ArcGIS Web Adaptor with ArcGIS Server, you'll need to reconfigure it with your server. This will update the Web Adaptor's configuration to reflect the changes you made when enabling SSL on your site. For instructions, see Configuring the Web Adaptor after installation.
Access your site using SSL
Once SSL has been configured, ArcGIS Server listens on port 6443 for HTTPS requests. Use the URLs below to securely access ArcGIS Server:
ArcGIS Server Manager | https://gisserver:6443/arcgis/manager |
ArcGIS Server Services Directory | https://gisserver:6443/arcgis/rest/services |
If you rename ArcGIS Server while SSL is enabled, you can continue to access ArcGIS Server using SSL; however, you must generate a new SSL certificate and configure ArcGIS Server to use it.