Administering Your ArcGIS Enterprise Portal Bill Major Craig Cleveland

Transcription

1 Administering Your ArcGIS Enterprise Portal Bill Major Craig Cleveland

2 Agenda Welcome & Introduction to ArcGIS Enterprise Portal for ArcGIS Administration - Basic Configuration - Advanced Configuration - Deploying Apps - Portal Administrator Directory - Backup & Recovery - Sharing API - SSL Certificates & Trusts - What s New at 10.6

3 = ArcGIS Enterprise ArcGIS Web Adaptor Portal for ArcGIS ArcGIS Server ArcGIS Data Store

4 = ArcGIS Enterprise ArcGIS Web Adaptor Portal for ArcGIS ArcGIS Server ArcGIS Data Store

5 Basic Configuration

6 Basic Configuration of Portal for ArcGIS Getting your Portal ready for use General logo, name, description Home Page banner, featured content Gallery Map basemaps, default extent, web app templates Utility Services Servers Security

7 Disconnected Environments Not everyone has internet access How many of you run disconnected today? Many customers run ArcGIS with no access to internet resources - No access to ArcGIS Online Basemaps - No access to World Geocoding Service - No access to other resources such as core utility services (printing, geometry), routing services, elevation services, etc. - Disconnected environments create unique challenges that need to be addressed in order to take full advantage of an on-premises ArcGIS Enterprise deployment

8 Basemaps in Portal for ArcGIS Where will your basemaps come from? ArcGIS Online Data Appliance for ArcGIS offers ArcGIS Online basemap capabilities Custom basemaps

9 Enabling On-Premises Utility Services in Portal Printing enable the Print Service of an ArcGIS Server and use the Export Web Map Task. Geometry utilize the Geometry Services of an on-premises ArcGIS Server Geocoding - World Geocoding Service On-Premises - Esri Streetmap Premium Geocode Services published on-premises - Custom Geocoding Service Routing - Utilize Esri Streetmap Premium Routing Services published on-premises - Custom Routing Service Analysis Utility Services e.g. Hydrology, Elevation, and Network

10 Additional Configurations ArcGIS Online Introduced at 10.5

11 Additional Configurations ArcGIS Online Living Atlas Introduced at 10.5

12 Additional Configurations ArcGIS Online Living Atlas Distributed Collaborations Introduced at 10.5

13 Advanced Configuration

14 config.js What is this? Located at <Portal Install Directory>\customizations\10.6.0\webapps\arcgis#home\js\arcgisonline Detailed in the Portal Administrator Help Provides additional configuration of the Portal for ArcGIS UI You may want to do this if you're configuring a disconnected deployment or modifying the portal's behavior to match the requirements of your organization Warnings: - Use extreme caution when editing; always make a backup! - Not maintained during upgrade!

15 config.js Additional Settings for Consideration Set the extentservice Add Security Classification Banners Add Footer Links Restrict My Organization page to Portal Admins only Enable/Disable Show Social Media Links Enable/Disable Searching ArcGIS Online

16 Advanced Configuration Demonstration

17 Deploying Apps

18 Insights for ArcGIS Analytic Projects Workbook, Pages, and Cards App for exploratory analysis Combine Analysis and Visualization on cards Record, share and collaborate

19 Insights for ArcGIS Deployment Requires ArcGIS Enterprise 10.5 or later Deployed on Portal and hosting server Configure Insights for ArcGIS license (.json) via Organization Manage Licenses (or Portal Admin) Provision licenses to users via Portal for ArcGIS

20 Insights for ArcGIS Additional Deployment Details Insights for ArcGIS requires ArcGIS Data Store 10.6 Spatial Reference Patch - Insights for ArcGIS compatibility with ArcGIS Enterprise - matrix -

21 Operations Dashboard for ArcGIS App for monitoring, tracking, and reporting real-time data feeds and assets Use charts, gauges, maps, and other visual elements to reflect the status and performance of people, services, assets, and events in real time

22 Operations Dashboard for ArcGIS Deployment Version 1.0 released in January 2018 Requires ArcGIS Enterprise 10.6 Run installer, and then is available to all users in your ArcGIS Enterprise portal

23 ArcGIS Maps for Office Make dynamic maps of your spreadsheet data in Excel. Create color-coded, point, clustered point, or heat maps. Share your maps with Portal, or insert them into your PowerPoint

24 ArcGIS Maps for Office Portal Resources for ArcGIS Maps for Office Install Portal Resources for ArcGIS Maps for Office - Host the JavaScript files required by ArcGIS Maps for Office on your network. Set your ArcGIS Maps for Office ArcGIS connection to point to your Portal for ArcGIS instance.

25 Portal Administrator Directory

26 Portal Administrator Directory The Portal Administrator Directory allows you to perform certain administrative functions not available in the ArcGIS Enterprise portal website Accessed via adaptor]/portaladmin

27 Portal Administrator Directory Logs - Query, view, configure, and delete portal logs

28 Portal Administrator Directory System - Properties - Configure properties like your portal s WebContextURL, PrivatePortalURL - Languages - When you or members of your portal search for content, results may be returned that do not apply to your specific language. Limit those results by changing this setting.

29 Portal Administrator Directory System - Web Adaptors - Unregister ArcGIS Web Adaptor with your portal - Directories - change the location of the portal content directory - Licenses - Authorize apps such as Insights, Drone2Map, ArcGIS Pro, and more

30 Portal Administrator Directory Security - Config - Configure user and group identity stores, configure default user level and role, enable/disable automatic account creation - SSL Certificates - Import root and intermediate certificates to establish trust chains, as well as import existing server certifcates to replace internal self-signed certs

31 Portal Administrator Directory Federation - Federate new ArcGIS Servers - Unfederate existing ArcGIS Servers - Update federation information

32 Backup & Recovery

33 Backups are. Simple Highly Effective Not Disruptive Under appreciated

34 ArcGIS Enterprise Backups WebGIS DR Tool What the tool backs up Settings (Portal, Server, Data Store) Portal Content Services ArcGIS Data Store Data (relational, scene tiles)

35 ArcGIS Enterprise Backups WebGIS DR Tool What the tool doesn t backup EGDB or file based data Traditional cache tiles

36 How to Backup Web GIS Location Portal URL Credentials Scene Cache? Web GIS DR Tool Property File Automate

37 New at Reduced requirements for running the tool - Different machine names - Different internal URLs Incremental backups - To an S3 bucket (10.6) Cloud specific - Different regions for primary and standby data centers - Ability to save a WebGIS DR backup to an S3 bucket - Storying backups to Azure BLOB storage (10.6)

38 WebGIS DR Properties Backup Restore Mode

39 WebGIS DR Properties Amazon S3 Information for the backup portal content S3 bucket

40 WebGIS DR Properties Amazon S3 Storing the WebGIS DR backup in an S3 bucket

41 WebGIS DR Properties Azure Credentials for the backup portal content container

42 WebGIS DR Tool Usage Backup - Runs concurrently - No downtime while exporting - Sample syntax Restore - Runs sequentially - Data Store Server Portal - Downtime while restoring - Sample syntax

43 ArcGIS Portal Directory Sharing API

44 Portal Self The Portal Self resource is used to return the view of the portal as seen by the current user, anonymous or logged in.

45 Item JSON

46 Federation URLs Update Federation URLs servers/<serverid>

47 Collaboration Workspace Status View Workspace Collaboration Status (Portal Admin also) collaborations/<collaborationid>/workspaces/<workspaceid>/syncstatus

48 SSL Certificates & Trusts

49 SSL Touch Points in ArcGIS Enterprise Example External SSL ArcGIS Server ** Client browser must trust CA chain Web Server ** Web Server must trust CA chain Portal for ArcGIS ** Portal must trust CA chain of ArcGIS Server if :7443 is using CA signed ** Client browser must Client Web Browser trust CA chain ** Web Server must ** Portal must trust CA chain of ArcGIS Server trust CA chain ** Portal must trust CA chain of LDAP ** Print Task ArcGIS Server and OS must trust CA chain to Portal, Web Server, and Secure LDAP Federated ArcGIS Server External ArcGIS Servers

50 Setting up SSL Certificates and Trusts Portal for ArcGIS - Server Certificates and Trust Stores Portal for ArcGIS installs self-signed certificates to support communication on port This self-signed certificates can be replaced with CA signed certificates to have completely secure communication Consuming services from self-signed certificates is untrustworthy and easily compromised. - Certificate Authorities establish trust! Additionally disable HTTP communication in Portal

51 Setting up SSL Certificates and Trusts Secure Communication Via Web Adaptor The first step to implementing secure communication is installing and configuring the Web Adaptor - Moves traffic from 7443 to 443 CA Signed SSL Certificate /portal 7443 Portal for ArcGIS Moving traffic to default ports allows ArcGIS to take advantage of signed server certificates at the web tier

52 Setting up SSL Certificates and Trusts Disable HTTP Additionally disable HTTP communication in Portal to use only HTTPS communication From the My Organization settings disable all HTTP communication

53 Updating internal ArcGIS Enterprise Certificates Portal for ArcGIS The Portal Administrator directory provides tools to Import Intermediate or Root certificates and Existing Server Certificates, as well as the ability to generate a new Certificate Signing Request. - Used for updating internal ArcGIS Enterprise certificates, as well as establishing trust chains with external servers Accessed via Portaladmin Security SSLCertificates. Import appropriate certificates and then Update.

54 Updating internal ArcGIS Enterprise Certificates Portal for ArcGIS When working in closed environments you must import root and intermediate certificates in addition to the existing server certificate! - Hybrid environments using signed certificates from known CA s may not need this step (e.g. CA is DigiCert) New at 10.6 option to *not* restart Portal service after importing certificates - At 10.5/1.5.1 Portal service restarted automatically - At and prior Portal service needed to be restarted manually

55 Establishing Trust to external resources Importing Root and Intermediate Certificates In order to consume services from other SSL enabled web servers, proper trust must be created in ArcGIS Server and Portal. Importing Root and Intermediate certificates for external server certificates allows ArcGIS Server and Portal to trust the server SSL certificate being presented - This trust establishes proper encryption channel Example scenarios: - Adding an HTTPS Map Service to Portal from an external organization. - Using ArcGIS Server Print Service to generate thumbnails for Portal for ArcGIS, using HTTPS Map Services.

56 Establishing Trust to external resources Portal for ArcGIS In Portal for ArcGIS use the Portal Administrator directory to import Root and Intermediate certificates

57 Additional Considerations Restrict SSL protocols and cipher suites Within the respective ArcGIS Enterprise components you can specify which SSL protocols and encryption algorithms to use to secure communication.

58 Importing Certificates & Establishing Trust Demonstration

59 What s New at 10.6? Administrative Enhancements

60 Announcing No-Cost Level 1 Named Users Announced December 2017 Effective January 1, 2018 *note this change does not apply to ArcGIS Online or to ArcGIS Enterprise Level 2 Named Users

61 Announcing No-Cost Level 1 Named Users

62 ArcGIS Enterprise Builder - Command-line tools now available - Upgrading workflow for deployments created using ArcGIS Enterprise Builder ArcGIS Enterprise Builder Chef Machine Images

63 App Launcher - Bookmark apps that are relevant to your organization in your Enterprise portal - Allows for simple access to apps for your users - Request for permissions not required

64 New Publishing Privileges Two new privileges: - Publish custom web tools - Publish server-based layers

65 Distributed Collaboration Feature layers shared as copies between ArcGIS Enterprise Content deletion policy

66 Distributed Collaboration Sync status reporting When was my last completed sync? When is my next sync scheduled?

67 Disabling External Content This resource allows an administrator to enable or disable external content discovery from portal. Administrators may choose to disable the content to prevent requests to ArcGIS Online resources. When disabling the content, a select group of items will be disabled: - All basemaps owned by "esri_[lang]" - All content owned by "esri_nav" - All content owned by "esri"

68 Questions??? Thank you for your time!

69 Print Your Certificate of Attendance Print stations located in the 140 Concourse Tuesday 12:30 pm 6:30 pm GIS Solutions Expo Hall B Wednesday 10:30 am 5:15 pm GIS Solutions Expo Hall B 5:00 pm 6:30 pm GIS Solutions Expo Social Hall B 6:30 pm 9:00 pm Networking Reception Smithsonian National Portrait Gallery

70 Download the Esri Events app and find your event Please Take Our Survey in the Esri Events App Select the session you attended Scroll down to find the feedback section Complete answers and select Submit

71