Certificates do not conform to algorithm constraints

Error Message

When ArcGIS Server is configured using a self-signed certificates, several processes fail and return one of the following error messages, depending on the user interface, either the ArcGIS Server Administrator Directory, or the Portal Administrator Directory:

Error: 
Certificates does not conform to algorithm constraints

Error: 
Certificates do not conform to algorithm constraints

Some examples of the processes that lead to the error are as follows:

• Publishing a hosted feature layer through Portal for ArcGIS
• Checking the ArcGIS Server machine status
• Federating ArcGIS Server with Portal for ArcGIS

The following images are examples of how the error message is returned in both the ArcGIS Server and the Portal for ArcGIS administrator directories.

Cause

The error is caused by an unsupported signature algorithm used in the self-signed certificate. While ArcGIS Server allows the usage of a self-signed certificate, some certificates use a signature algorithm that is not supported. An example of an unsupported signature algorithm is the RSASSA-PSS algorithm.

1. Open Internet Information Services (IIS) Manager. For detailed steps, see the following Microsoft help document: Microsoft: How to: Open IIS Manager
2. Double-click Server Certificates

 

3. Double-click the desired certificate. This opens the Certificate window.

 

4. Click Details

 

Note:
Even if the algorithm is not supported, the import is still deemed successful and ArcGIS Server page is still accessible without any issue.

Solution or Workaround

Use a certificate with a supported signature algorithm. The following web help document, Portal for ArcGIS: Import a certificate into the portal describes in detail the supported signature algorithm.