Skip to main content

Configure ArcGIS Monitor with the default self-signed certificate

When you deploy ArcGIS Monitor, a self-signed certificate is automatically created for the ArcGIS Monitor Server machine. Monitor Server uses this self-signed certificate for HTTPS requests by default.

In rare cases, the self-signed certificate for Monitor Server may no longer be valid, usually because the certificate has expired or the host name of the machine was changed. In these cases, you need to generate a new self-signed certificate.

View the default self-signed certificate

To view the default self-signed certificate, complete the following steps:

  1. Access ArcGIS Monitor if necessary.

    The Home page appears.

  2. Click Administration.

    The Administration page appears.

  3. Click the System tab.

    Server configuration settings and HTTP communication settings are displayed. The certificate information is listed in the HTTP communication settings section, under SSL certificate.

Generate a new self-signed certificate

To generate a new self-signed certificate, complete the following steps:

  1. Sign in to the Monitor Server machine with an account that has administrative privileges and access to the configuration store directory.

  2. Start Windows Service Manager.

  3. Right-click ArcGIS Monitor Server in Windows Service Manager and click Stop.

  4. Delete the .pfx file from the C:\Users\<ArcGIS Monitor account username>\AppData\Local\ESRI\ArcGISMonitor\config-store-server directory.

  5. Right-click ArcGIS Monitor Server in Windows Service Manager and click Start.

    Monitor Server uses the self-signed certificate for HTTPS requests.

  6. Open a command shell.

  7. Run the following command to stop the arcgis-monitor service:

    • Ubuntu: sudo service arcgis-monitor-server stop

    • Red Hat Enterprise Linux Server: sudo systemctl stop arcgis-monitor-server

  8. Delete the .pfx file from the $HOME/.config/ESRI/ArcGISMonitor/config-store-server directory.

  9. Run the following command to start the arcgis-monitor service:

    • Ubuntu: sudo service arcgis-monitor-server start

    • Red Hat Enterprise Linux Server: sudo systemctl start arcgis-monitor-server

    Monitor Server uses the self-signed certificate for HTTPS requests.

Access Monitor Server

Monitor Server listens on port 30443 for requests when HTTPS is enabled. Use the following URL syntax to securely access Monitor Server:

https://monitorserver.example.com:30443/arcgis/monitor

Note:

If you rename the Monitor Server machine, you can continue to access it using HTTPS; however, the host name will no longer match the original certificate. You must generate a new certificate and configure Monitor Server to use it.