Esri / arcgis-powershell-dsc

This repository contains scripts, code and samples for automating the install and configuration of ArcGIS (Enterprise and Desktop) using Microsoft Windows PowerShell DSC (Desired State Configuration).
Apache License 2.0
120 stars 62 forks source link

Certificate update Portal/Server - with InstallLicenseConfigure - Noe respons in reading new certificate #561

Open grumor opened 2 months ago

grumor commented 2 months ago

Community Note

Module Version

Affected Resource(s)

Configuration Files

{
    "NodeName": "servermachine",
    "Role": [
        "Server",
        "Portal"
    ],
    "SslCertificates": [
        {
            "Path": "\\\\fileserver\\share$\\Certificates\\cert_file.pfx",
            "Password": "REDACTED",
            "CNameFQDN": "servermachine",
            "Target": [
                "Server",
                "Portal"
            ],
            "SslRootOrIntermediate": [
                {
                    "Alias": "ROOT_ALIAS",
                    "Path": "\\\\fileserver\\share$\\Certificates\\ca_root_cert_file.cer"
                }
            ]
        }
    ]
}

Expected Behavior

New renewed certificate with new Thumbprint, read from fileshare and exchanged with existing certificate on Portal/Server

Actual Behavior

Nothing happens - No log entries, no steps in - debugSwitch written. It seams like the certificate is not read at all.

Steps to Reproduce

Renew Certificate from CA Authority - Replace the certificate on fileshare (Rename old certificate _old. Give new certificate the same name as the origin certificate

run - -Mode InstallLicenseConfigure

Important Factoids

References

cameronkroeker commented 1 month ago

Hi @grumor,

Are you also passing in the ConfigData.Portal and ConfigData.Server attributes in the json configuration file?

Thanks, Cameron K.

grumor commented 1 month ago

Yes. I do. I think you can close this. I have tested this in another environment and it worked as expected. I think the reason st where i got the problem is the certificate it selves. The certificate is valid, but its not readable (you are only able to delete it by adding /delete in the admin). I know there is some use of characters that Esri dont like. I need to figure out that first. Before persue this issue.

Sendt fra Outlook for Androidhttps://aka.ms/AAb9ysg


From: Cameron Kroeker @.> Sent: Wednesday, October 9, 2024 5:58:12 PM To: Esri/arcgis-powershell-dsc @.> Cc: Morten Grude @.>; Mention @.> Subject: Re: [Esri/arcgis-powershell-dsc] Certificate update Portal/Server - with InstallLicenseConfigure - Noe respons in reading new certificate (Issue #561)

Hi @grumorhttps://github.com/grumor,

Are you also passing in the ConfigData.Portal and ConfigData.Server attributes in the json configuration file?

Thanks, Cameron K.

— Reply to this email directly, view it on GitHubhttps://github.com/Esri/arcgis-powershell-dsc/issues/561#issuecomment-2402722760, or unsubscribehttps://github.com/notifications/unsubscribe-auth/AIBQJFV7UR2YXQJS67XB4SLZ2VHBJAVCNFSM6AAAAABOLSYLMOVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDIMBSG4ZDENZWGA. You are receiving this because you were mentioned.Message ID: @.***>