2017 Esr i
PETROLEUMGIS CONFERENCE
Portal AdministrationDavid Jacob
Portal Administration: Agenda
• Role of Portal in ArcGIS Enterprise
• Configure Portal to Support ArcGIS Enterprise
• Upgrade Process
• Automation and Scripting
Role of Portal in ArcGIS Enterprise
Supporting Individuals, Organizations and Communities
Services Based
Deployable On-Premises,
Online and Hybrid
Desktop Apps
A System for Managing and
Applying Geographic Information
Server
ArcGIS A Complete GIS Platform
Desktop
Server
Portal & Apps
System of
Systems
A Distributed Platform of Open Geospatial Services
ArcGIS Supports Multiple Implementation Patterns
An Interconnected Network Is Emerging
ArcGIS Enterprise | Anatomy of Web GIS in Your Infrastructure
ArcGIS
Server
Set up as a GIS Server
and configured as the
hosting server, ArcGIS
Server provides the
layers, services, and
horsepower required to
power your Web GIS.
ArcGIS Enterprise | Anatomy of Web GIS in Your Infrastructure
Portal
for
ArcGIS
The web frontend and
infrastructure backend that
supports a user’s interaction
and overall experience with
your Web GIS.
ArcGIS Enterprise | Anatomy of Web GIS in Your Infrastructure
ArcGIS
Data
Store
The Esri managed data
repository that stores the
spatial content that has
been shared to Portal.
ArcGIS Enterprise | Anatomy of Web GIS in Your Infrastructure
ArcGIS
Web
Adaptor
An Esri built software
load balancer that
appropriately directs
network traffic and
serves as a reverse
proxy for Web GIS
access.
ArcGIS Enterprise | Anatomy of Web GIS in Your Infrastructure
Portal
for
ArcGIS
ArcGIS ArcGIS In Your Own Infrastructure
Portal Abstracts and Organizes Any Data Type
Portal
Web Maps, Layers,
and Scenes
Any Data
Source
REST Based Access
Any Client
Distributed
Configuring Portal to be the Hub
of ArcGIS Enterprise
Custom Basemaps in Portal for ArcGISWhere will your Basemaps come from?
• Add a cached map service to Portal map viewer
• Save Web Map as a new item and share with custom group and Everyone
• Specify custom group for Basemap gallery, and select a default Basemap
Basemaps
Enable Utility Services in Portal
• Printing – enable the Print Service of an ArcGIS Server and use the Export
Web Map Task.
• Geocoding
- World Geocoding Service On-Premises
- Esri Streetmap Premium Geocode Services published on-premises
- Custom Geocoding Service
• Geometry – utilize the Geometry Services of an on-premises ArcGIS Server
• Routing
- Utilize Esri Streetmap Premium Routing Services published on-premises
- Custom Routing Service
Authorizing ArcGIS Pro with Portal for ArcGISSimilar to ArcGIS Online, but different…
• Similar end user and
provisioning process to ArcGIS
Online
• Different back end to enable
that experience
Authorizing ArcGIS Pro with Portal for ArcGISRequired Components
1. ArcGIS License Server
Administrator
2. Named Users License File
(.lic)
3. Portal Configuration File
(.json)
4. Portal for ArcGIS
ArcGIS 10.5 Administrative Enhancements
Define Default Level & Role for New Named User Accounts
• New security option
Option to unfederate ArcGIS Server site using the portal app removedLimiting unintended consequences
• Unfederating a site will break
connections between items in the
Portal and the ArcGIS Server site,
and Portal members will no longer
be able to use that content.
Security Enhancements
• Administrators can choose to allow
members to edit biographical
information and configure who can
see their profiles.
• Two new general privileges have
been added to control edits on
hosted feature layers: Edit and Edit
with full control.
Enable Portal members to use new appsImport entitlements and disseminate licenses
• AppStudio for ArcGIS
• Drone2Map for ArcGIS
• Esri Business Analyst web app
• Roadway Reporter for Esri Roads
and Highways
• GeoPlanner for ArcGIS
• Insights for ArcGIS
Enable Portal members to use new appsApps exposed to user on Portal home page
Insights for ArcGISAnalytic Projects – Workbook, Pages, and Cards
• App for exploratory analysis
• Combine Analysis and Visualization on cards
• Record, share and collaborate
Insights for ArcGISDeployment
• Requires ArcGIS Enterprise 10.5
• Install on Portal for ArcGIS machine
- *if working in a distributed environment run on hosting server as well
• Configure Portal and Server for Insights
- Provision license
- Add relational data store type(s)
- Publish boundary layers
- Download boundary files (*.sd) from My Esri
- <Portal installation directory>\tools\publishboundarylayers --folder
c:\temp\boundaryfiles --url https://webadaptor.domain.com/arcgis --username portaladmin
Demo
Configure Portal
for Insights
Living AtlasContent in Portal for ArcGIS
• Only Esri published content is delivered at 10.5
• Customers are able to easily populate their portal with ready-to-use maps and
layers from Esri that support visualization and analysis.
visualization
Visualization Analysis
Living Atlas of the World
Esri curated set of ready-to-use content
It includes both Esri published and user published content
Living AtlasTypes of Content
• Live Content: Hosted in ArcGIS Online
- Items are installed in Portal but item URLs reference Online
- Internet connection is required for access
- Read-only content
- Data types (web maps, apps, scenes and layers)
• Local Content: Hosted in Portal for ArcGIS
- Boundary layers service definition files (by country)
- Download from MyEsri or request DVD
- Publish to Portal as hosted feature services
- Run analysis in Insights for ArcGIS or Portal
Living AtlasLive content that is hosted in ArcGIS Online
• Levels of content
- Default content
- No configuration is needed
- All Portal users can access the content out of box
- Subscriber content
- Admin enables the content with a single Online subscription account
- All Portal users can consume the content without credits
- Premium content
- Admin enables the content with a single Online subscription account
- All Portal users can consume the content with small amount of credits
- Disconnected users: Admin disables the default content in Portal
Under My Organization > Edit Settings > ArcGIS Online
GeoAnalytics
ArcGIS has a new way of processing
spatiotemporal data that is designed for big
data by leveraging distributed analytics and
storage
• Delivered as tools in ArcGIS GeoAnalytics
Server and ArcGIS Pro
• Familiar workflows and UX in the Portal for
ArcGIS map viewer and ArcGIS Pro
• Works with your existing GIS data and
tabular data- not just big data
• Designed to perform both spatial and
temporal analysis
Raster Analytics
A new way to create and execute spatial analysis models and raster
processing chains which leverages distributed storage and analytics
• Works with your existing imagery, rasters and GIS data
- Register your local data, use mosaic datasets or image services
- Optionally import data into distributed storage
- Process single massive rasters or large collections
• Enable massive distributed processing and analysis
- Persist dynamic imagery products
- Run spatial analysis as predefined models
• Integrate Analytics into your workflows
- Use ArcGIS Pro to Author models
- Outputs are rasters or features layers on your portal
Portal to Portal Collaboration
• Implemented as a feature within ArcGIS Enterprise 10.5 through the Portal for ArcGIS
software component
• Extends the group-based sharing model to allow for sharing of apps, maps, layers and data
between trusted portals within an organization
• Maps and apps are replicated (physical copy)
• Layers (service URLs) are referenced
• Full metadata and resources are replicated
• Synchronization can happen immediately or at a scheduled interval
• Secure
Upgrading Portal for ArcGIS
Upgrades
1. Upgrade Portal for ArcGIS
2. Upgrade your Portal’s ArcGIS Web Adaptor
3. Upgrade ArcGIS Server
1. In a multi-node site, it is recommended to upgrade one server at a time
4. Upgrade your Server’s ArcGIS Web Adaptor
5. Upgrade ArcGIS Data Store
1. First upgrade the Primary Data Store
2. Second upgrade the Standby Data Store
Recommended Order of Upgrade
You do not need to upgrade through all releases
• Ensure you have a 10.5 license
• Ensure your 10.5 license contains at least one Level 2 named user license
• All current users will be a Level 2 once upgraded
Licensing
• Clearer direction on where to go next
Option
10.4.X
10.5
• Run a full reindex
- This is required to ensure all new and existing content is searchable
- This also ensures the Portal knows where to find content
Reindexing Portal is Required
Reindexing Portal is Required
SSL Certificates and Trusts
Setting up SSL Certificates and TrustsServer Certificates and Trust Stores
• Most organizations have strict Secure Socket Layer (SSL) requirements
• Portal for ArcGIS installs self-signed certificate for HTTPS port 7443
- Consuming services directly from self-signed certificates is highly discouraged.
• To overcome this, install separate Web Adaptors for Portal and ArcGIS Server and
SSL-enable your web server; users only communicate with Web Server over 443.
• Web Server should be configured with a properly signed certificate, e.g. Verisign
ArcGIS
Server
Portal for
ArcGIS
CA Signed
SSL Certificate
https://webserver.com
6443
7443
/arcgis
/server
Setting up SSL Certificates and TrustsUpdating Server Certificates
• Some organizations mandate no HTTP(S) ports without using a properly signed
server certificate.
• Users must update the self-signed certificates with CA signed certificates.
• Portal Administrator Directory provides tools to facilitate this process
- Generate a new Certificate Signing Request, have CA sign, and import response
- Import an existing server certificate and private key (e.g. PFX file)
- Will need to import Trust chain if not part of the PFX
But, there is a whole lot more to this story…Example SSL Touch Points in on-premises WebGIS
Web ServerPortal for ArcGIS
Federated
ArcGIS Server
External SSL
ArcGIS Server
Client Web
Browser
Secure LDAP
** Client browser must
trust CA chain
** Client browser must
trust CA chain
** Web Server must
trust CA chain
** Portal must trust CA
chain of sLDAP
** Portal must trust CA chain
of ArcGIS Server
** Portal must trust CA chain
of ArcGIS Server
** Web Server must trust CA chain
If :7443 is using CA signed
** Print Task
ArcGIS Server and OS must trust
CA chain to Portal, Web Server, and
External ArcGIS Servers
Setting up SSL Certificates and TrustsEstablishing Trust with other Servers
• For external trust, import Root and Intermediate certificates using Portal
Administrator API
• Portal will automatically restart after this process
• Help topic: Configuring the portal to trust certificates from a certifying authority
Scripting and Automation
ArcGIS Python API
Your Web GIS
Script and automate your Web GIS
Content PublishersAdministrators
Users, Roles & Group management
Data ScientistsDevelopers
Power UsersAnalysts
Imagery
. . . Programmatic Access to ArcGIS
ArcGIS Can Be Scripted with the ArcGIS API for Python
Command Line
Scripting
Python Notebook
Command
LineScripts
Python
Notebooks
Python API
Automation
• Workflows
• System Administration
• Content Management
• Analysis
• GeoProcessing Portal
for ArcGIS
ArcGIS GeoInformation Model
Portal Abstracts and
Organizes Any Data Type
Portal
Web Maps, Layers,
and Scenes
REST Based Access
… provides functionality to manage (create, read,
update and delete) GIS users, groups and content
Architecture of the gis module in the ArcGIS API for Python
ArcGIS API for PythonDemo
ArcGIS Enterprise in the Cloud
ArcGIS Enterprise in the Cloud
ArcGIS Enterprise in the Cloud
ArcGIS Enterprise: High Availability Enhancements
• Amazon S3: low-cost cloud storage
- Store Portal’s Content
- Store ArcGIS Server’s Config Store
- Serve ArcGIS Server Cache
- Store Raster Analytics results
S3
ALB
Portal for
ArcGIS
Demo
Amazon Web Services (AWS)
Cloud Formation Template
Chef cookbooks and recipes
{
"arcgis":{
"run_as_user":"arcgis",
"run_as_password":"ChangeMe12345",
"version":"10.5",
"python":{
"install_dir":"C:\\Python27"
},
"iis":{
"keystore_file":"C:\\software\\105_Final\\machine_esri_com.pfx",
"keystore_password":"ChangeMe12345",
"domain_name":"machine.esri.com",
"replace_https_binding":false
},
"web_adaptor":{
"setup":"C:\\software\\105_Final\\WebAdaptorIIS\\Setup.exe",
"admin_access":true
},
"data_store":{
"setup":"C:\\software\\105_Final\\ArcGISDataStore\\Setup.exe",
"data_dir":"C:\\arcgisdatastore",
"backup_dir":"C:\\arcgisdatastore\\backup",
"install_dir":"C:\\Program Files\\ArcGIS\\DataStore"
},
"server":{
"wa_name":"server",
"wa_url":"https://machine.esri.com/server",
"domain_name":"machine.esri.com",
"url":"https://machine.esri.com:6443/arcgis",
"web_context_url":"https://machine.esri.com/server",
"admin_username":"arcgis",
"admin_password":"ChangeMe12345",
"directories_root":"C:\\arcgisserver",
"install_dir":"C:\\Program Files\\ArcGIS\\Server",
"setup":"C:\\software\\105_Final\\ArcGISServer\\Setup.exe",
"authorization_file":"C:\\software\\105_Final\\Server_Ent_Adv.ecp",
"keystore_file":"C:\\software\\105_Final\\machine_esri_com.pfx",
"keystore_password":"ChangeMe12345"
},
"portal":{
Questions???
Thank you for your time!
Select the session
you attended
Scroll down to
find the survey
Complete Answers
and Select “Submit”
Download the Esri Events
app and find your event
Please Take Our Survey on the Esri Events App!