English

Problem: Unable to register ArcGIS GeoEvent Processor for Server when using a self-signed certificate

Description

Unable to register ArcGIS GeoEvent Processor for Server when using a self-signed certificate over a Secure Sockets Layer (SSL) connection.

Cause

The registration fails when a self-signed certificate makes an untrusted connection to the browser while establishing the SSL connection.

Solution or Workaround

Add the self-signed certificate to the certificate authority (CA) to ensure the self-signed certificate makes a trusted connection to the browser.

  1. Stop ArcGIS GeoEvent Processor for Server from the Services console. To do this, click the Start button, and in the search box, type "services.msc" to launch the console.

  2. Save a copy of the CA certificate to the "C:\Program Files\ArcGIS\Server\GeoEventProcessor\jre\lib\security" folder. This certificate only works with .cer files.

  3. To open a Command Prompt window as an Administrator, click Start > All Programs > Accessories > right-click Command Prompt, and select Run as Administrator.
  4. Navigate to the above folder location, "C:\Program Files\ArcGIS\Server\GeoEventProcessor\jre\lib\security".

  5. Within the folder, paste the following command to import the self-signed certificate to the CA (cacerts) file:
    "C:\Program Files\ArcGIS\Server\GeoEventProcessor\jre\bin\keytool" -import -trustcacerts -file esrica.cer -alias esri_ca -keystore cacerts 


    Note:
    In this example, the certificate is named esrica.cer. Users must replace this name with a unique name for the self-signed certificate. When prompted for a password, type 'changeit'. For the Alias parameter, select any name; the alias is a unique name that easily identifies the certificate.

  6. When prompted to trust the certificate, click Yes.

  7. To implement the changes, restart ArcGIS GeoEvent Processor for Server from the Services console.

Related Information