Update SSL Certificate through Chef

[Ayushyadav19]

Hi @cameronkroeker,

I deployed ArcGIS server v10.9.1 on Linux ubuntu 20.04 LTS last year through Chef. The SSL certificate is expired. I just wanted to know if I will run the chef script which is used for the initial deployment having the below recipes will automatically update the SSL certificate on the ArcGIS server as well as on the Apace Tomcat or not?

"tomcat": {
"version": "9.0.48",
"tarball_path": "/opt/software/archives/apache-tomcat-9.0.48.tar.gz",
"install_path": "/opt/tomcat_arcgis_9.0.48",
"keystore_file": "/opt/tomcat_arcgis_9.0.48/conf/newssl_certificate_file.pfx",
"keystore_type": "pkcs12",
"keystore_password": "change.it"

"server": {
"install_dir": "/opt",
"private_url": "https://domain.com:6443/arcgis",
"web_context_url": "https://domain.com/server",
"admin_username": "siteadmin",
"admin_password": "change.it",
"authorization_file": "/opt/software/authorization_files/10.9/server.prvc",
"directories_root": "/net/FILESERVER/gisdata/arcgisserver",
"log_dir": "/opt/arcgis/server/usr/logs",
"log_level": "WARNING",
"config_store_type": "FILESYSTEM",
"config_store_connection_string": "/net/FILESERVER/gisdata/arcgisserver/config-store",
"install_system_requirements": true,
"wa_name": "server",
"keystore_file": "/net/FILESERVER/newssl_certificate_file.pfx",
"keystore_password": "change.it",
"system_properties": {
"WebContextURL": "https://domain.com/server"
}

"recipe[esri-tomcat::openjdk]",
"recipe[esri-tomcat]",
"recipe[arcgis-enterprise::server]",

Any help will be appreciated!

Thanks
Ayush

[cameronkroeker]

Hi @Ayushyadav19,

Yes, however the following conditions will need to be met.

• The certificate file name for the node['arcgis']['tomcat']['keystore_file'] attribute will need to be named differently than the original certificate file.
• Ensure to set the node['arcgis']['server']['cert_alias'] attribute to a unique certificate alias name that is different than the original. If this was not previously set then it defaults to using node['arcgis']['server']['domain_name'] as its value. This is the name that is given to the certificate when its imported into ArcGIS Server keystore. If the name matches then import is skipped.

Thanks,
Cameron K.