2017 Esr i

PETROLEUMGIS CONFERENCE

Portal AdministrationDavid Jacob

Portal Administration: Agenda

• Role of Portal in ArcGIS Enterprise

• Configure Portal to Support ArcGIS Enterprise

• Upgrade Process

• Automation and Scripting

Role of Portal in ArcGIS Enterprise

Supporting Individuals, Organizations and Communities

Services Based

Deployable On-Premises,

Online and Hybrid

Desktop Apps

A System for Managing and

Applying Geographic Information

Server

ArcGIS A Complete GIS Platform

Desktop

Server

Portal & Apps

System of

Systems

A Distributed Platform of Open Geospatial Services

ArcGIS Supports Multiple Implementation Patterns

An Interconnected Network Is Emerging

ArcGIS Enterprise | Anatomy of Web GIS in Your Infrastructure

ArcGIS

Server

Set up as a GIS Server

and configured as the

hosting server, ArcGIS

Server provides the

layers, services, and

horsepower required to

power your Web GIS.

ArcGIS Enterprise | Anatomy of Web GIS in Your Infrastructure

Portal

for

ArcGIS

The web frontend and

infrastructure backend that

supports a user’s interaction

and overall experience with

your Web GIS.

ArcGIS Enterprise | Anatomy of Web GIS in Your Infrastructure

ArcGIS

Data

Store

The Esri managed data

repository that stores the

spatial content that has

been shared to Portal.

ArcGIS Enterprise | Anatomy of Web GIS in Your Infrastructure

ArcGIS

Web

Adaptor

An Esri built software

load balancer that

appropriately directs

network traffic and

serves as a reverse

proxy for Web GIS

access.

ArcGIS Enterprise | Anatomy of Web GIS in Your Infrastructure

Portal

for

ArcGIS

ArcGIS ArcGIS In Your Own Infrastructure

Portal Abstracts and Organizes Any Data Type

Portal

Web Maps, Layers,

and Scenes

Any Data

Source

REST Based Access

Any Client

Distributed

Configuring Portal to be the Hub

of ArcGIS Enterprise

Custom Basemaps in Portal for ArcGISWhere will your Basemaps come from?

• Add a cached map service to Portal map viewer

• Save Web Map as a new item and share with custom group and Everyone

• Specify custom group for Basemap gallery, and select a default Basemap

Basemaps

Enable Utility Services in Portal

• Printing – enable the Print Service of an ArcGIS Server and use the Export

Web Map Task.

• Geocoding

- World Geocoding Service On-Premises

- Esri Streetmap Premium Geocode Services published on-premises

- Custom Geocoding Service

• Geometry – utilize the Geometry Services of an on-premises ArcGIS Server

• Routing

- Utilize Esri Streetmap Premium Routing Services published on-premises

- Custom Routing Service

Authorizing ArcGIS Pro with Portal for ArcGISSimilar to ArcGIS Online, but different…

• Similar end user and

provisioning process to ArcGIS

Online

• Different back end to enable

that experience

Authorizing ArcGIS Pro with Portal for ArcGISRequired Components

1. ArcGIS License Server

Administrator

2. Named Users License File

(.lic)

3. Portal Configuration File

(.json)

4. Portal for ArcGIS

ArcGIS 10.5 Administrative Enhancements

Define Default Level & Role for New Named User Accounts

• New security option

Option to unfederate ArcGIS Server site using the portal app removedLimiting unintended consequences

• Unfederating a site will break

connections between items in the

Portal and the ArcGIS Server site,

and Portal members will no longer

be able to use that content.

Security Enhancements

• Administrators can choose to allow

members to edit biographical

information and configure who can

see their profiles.

• Two new general privileges have

been added to control edits on

hosted feature layers: Edit and Edit

with full control.

Enable Portal members to use new appsImport entitlements and disseminate licenses

• AppStudio for ArcGIS

• Drone2Map for ArcGIS

• Esri Business Analyst web app

• Roadway Reporter for Esri Roads

and Highways

• GeoPlanner for ArcGIS

• Insights for ArcGIS

Enable Portal members to use new appsApps exposed to user on Portal home page

Insights for ArcGISAnalytic Projects – Workbook, Pages, and Cards

• App for exploratory analysis

• Combine Analysis and Visualization on cards

• Record, share and collaborate

Insights for ArcGISDeployment

• Requires ArcGIS Enterprise 10.5

• Install on Portal for ArcGIS machine

- *if working in a distributed environment run on hosting server as well

• Configure Portal and Server for Insights

- Provision license

- Add relational data store type(s)

- Publish boundary layers

- Download boundary files (*.sd) from My Esri

- <Portal installation directory>\tools\publishboundarylayers --folder

c:\temp\boundaryfiles --url https://webadaptor.domain.com/arcgis --username portaladmin

Demo

Configure Portal

for Insights

Living AtlasContent in Portal for ArcGIS

• Only Esri published content is delivered at 10.5

• Customers are able to easily populate their portal with ready-to-use maps and

layers from Esri that support visualization and analysis.

visualization

Visualization Analysis

Living Atlas of the World

Esri curated set of ready-to-use content

It includes both Esri published and user published content

Living AtlasTypes of Content

• Live Content: Hosted in ArcGIS Online

- Items are installed in Portal but item URLs reference Online

- Internet connection is required for access

- Read-only content

- Data types (web maps, apps, scenes and layers)

• Local Content: Hosted in Portal for ArcGIS

- Boundary layers service definition files (by country)

- Download from MyEsri or request DVD

- Publish to Portal as hosted feature services

- Run analysis in Insights for ArcGIS or Portal

Living AtlasLive content that is hosted in ArcGIS Online

• Levels of content

- Default content

- No configuration is needed

- All Portal users can access the content out of box

- Subscriber content

- Admin enables the content with a single Online subscription account

- All Portal users can consume the content without credits

- Premium content

- Admin enables the content with a single Online subscription account

- All Portal users can consume the content with small amount of credits

- Disconnected users: Admin disables the default content in Portal

Under My Organization > Edit Settings > ArcGIS Online

GeoAnalytics

ArcGIS has a new way of processing

spatiotemporal data that is designed for big

data by leveraging distributed analytics and

storage

• Delivered as tools in ArcGIS GeoAnalytics

Server and ArcGIS Pro

• Familiar workflows and UX in the Portal for

ArcGIS map viewer and ArcGIS Pro

• Works with your existing GIS data and

tabular data- not just big data

• Designed to perform both spatial and

temporal analysis

Raster Analytics

A new way to create and execute spatial analysis models and raster

processing chains which leverages distributed storage and analytics

• Works with your existing imagery, rasters and GIS data

- Register your local data, use mosaic datasets or image services

- Optionally import data into distributed storage

- Process single massive rasters or large collections

• Enable massive distributed processing and analysis

- Persist dynamic imagery products

- Run spatial analysis as predefined models

• Integrate Analytics into your workflows

- Use ArcGIS Pro to Author models

- Outputs are rasters or features layers on your portal

Portal to Portal Collaboration

• Implemented as a feature within ArcGIS Enterprise 10.5 through the Portal for ArcGIS

software component

• Extends the group-based sharing model to allow for sharing of apps, maps, layers and data

between trusted portals within an organization

• Maps and apps are replicated (physical copy)

• Layers (service URLs) are referenced

• Full metadata and resources are replicated

• Synchronization can happen immediately or at a scheduled interval

• Secure

Upgrading Portal for ArcGIS

Upgrades

1. Upgrade Portal for ArcGIS

2. Upgrade your Portal’s ArcGIS Web Adaptor

3. Upgrade ArcGIS Server

1. In a multi-node site, it is recommended to upgrade one server at a time

4. Upgrade your Server’s ArcGIS Web Adaptor

5. Upgrade ArcGIS Data Store

1. First upgrade the Primary Data Store

2. Second upgrade the Standby Data Store

Recommended Order of Upgrade

You do not need to upgrade through all releases

• Ensure you have a 10.5 license

• Ensure your 10.5 license contains at least one Level 2 named user license

• All current users will be a Level 2 once upgraded

Licensing

• Clearer direction on where to go next

Option

10.4.X

10.5

• Run a full reindex

- This is required to ensure all new and existing content is searchable

- This also ensures the Portal knows where to find content

Reindexing Portal is Required

Reindexing Portal is Required

SSL Certificates and Trusts

Setting up SSL Certificates and TrustsServer Certificates and Trust Stores

• Most organizations have strict Secure Socket Layer (SSL) requirements

• Portal for ArcGIS installs self-signed certificate for HTTPS port 7443

- Consuming services directly from self-signed certificates is highly discouraged.

• To overcome this, install separate Web Adaptors for Portal and ArcGIS Server and

SSL-enable your web server; users only communicate with Web Server over 443.

• Web Server should be configured with a properly signed certificate, e.g. Verisign

ArcGIS

Server

Portal for

ArcGIS

CA Signed

SSL Certificate

https://webserver.com

6443

7443

/arcgis

/server

Setting up SSL Certificates and TrustsUpdating Server Certificates

• Some organizations mandate no HTTP(S) ports without using a properly signed

server certificate.

• Users must update the self-signed certificates with CA signed certificates.

• Portal Administrator Directory provides tools to facilitate this process

- Generate a new Certificate Signing Request, have CA sign, and import response

- Import an existing server certificate and private key (e.g. PFX file)

- Will need to import Trust chain if not part of the PFX

But, there is a whole lot more to this story…Example SSL Touch Points in on-premises WebGIS

Web ServerPortal for ArcGIS

Federated

ArcGIS Server

External SSL

ArcGIS Server

Client Web

Browser

Secure LDAP

** Client browser must

trust CA chain

** Client browser must

trust CA chain

** Web Server must

trust CA chain

** Portal must trust CA

chain of sLDAP

** Portal must trust CA chain

of ArcGIS Server

** Portal must trust CA chain

of ArcGIS Server

** Web Server must trust CA chain

If :7443 is using CA signed

** Print Task

ArcGIS Server and OS must trust

CA chain to Portal, Web Server, and

External ArcGIS Servers

Setting up SSL Certificates and TrustsEstablishing Trust with other Servers

• For external trust, import Root and Intermediate certificates using Portal

Administrator API

• Portal will automatically restart after this process

• Help topic: Configuring the portal to trust certificates from a certifying authority

Scripting and Automation

ArcGIS Python API

Your Web GIS

Script and automate your Web GIS

Content PublishersAdministrators

Users, Roles & Group management

Data ScientistsDevelopers

Power UsersAnalysts

Imagery

. . . Programmatic Access to ArcGIS

ArcGIS Can Be Scripted with the ArcGIS API for Python

Command Line

Scripting

Python Notebook

Command

LineScripts

Python

Notebooks

Python API

Automation

• Workflows

• System Administration

• Content Management

• Analysis

• GeoProcessing Portal

for ArcGIS

ArcGIS GeoInformation Model

Portal Abstracts and

Organizes Any Data Type

Portal

Web Maps, Layers,

and Scenes

REST Based Access

… provides functionality to manage (create, read,

update and delete) GIS users, groups and content

Architecture of the gis module in the ArcGIS API for Python

ArcGIS API for PythonDemo

ArcGIS Enterprise in the Cloud

ArcGIS Enterprise in the Cloud

ArcGIS Enterprise in the Cloud

ArcGIS Enterprise: High Availability Enhancements

• Amazon S3: low-cost cloud storage

- Store Portal’s Content

- Store ArcGIS Server’s Config Store

- Serve ArcGIS Server Cache

- Store Raster Analytics results

S3

ALB

Portal for

ArcGIS

Demo

Amazon Web Services (AWS)

Cloud Formation Template

Chef cookbooks and recipes

{

"arcgis":{

"run_as_user":"arcgis",

"run_as_password":"ChangeMe12345",

"version":"10.5",

"python":{

"install_dir":"C:\\Python27"

},

"iis":{

"keystore_file":"C:\\software\\105_Final\\machine_esri_com.pfx",

"keystore_password":"ChangeMe12345",

"domain_name":"machine.esri.com",

"replace_https_binding":false

},

"web_adaptor":{

"setup":"C:\\software\\105_Final\\WebAdaptorIIS\\Setup.exe",

"admin_access":true

},

"data_store":{

"setup":"C:\\software\\105_Final\\ArcGISDataStore\\Setup.exe",

"data_dir":"C:\\arcgisdatastore",

"backup_dir":"C:\\arcgisdatastore\\backup",

"install_dir":"C:\\Program Files\\ArcGIS\\DataStore"

},

"server":{

"wa_name":"server",

"wa_url":"https://machine.esri.com/server",

"domain_name":"machine.esri.com",

"url":"https://machine.esri.com:6443/arcgis",

"web_context_url":"https://machine.esri.com/server",

"admin_username":"arcgis",

"admin_password":"ChangeMe12345",

"directories_root":"C:\\arcgisserver",

"install_dir":"C:\\Program Files\\ArcGIS\\Server",

"setup":"C:\\software\\105_Final\\ArcGISServer\\Setup.exe",

"authorization_file":"C:\\software\\105_Final\\Server_Ent_Adv.ecp",

"keystore_file":"C:\\software\\105_Final\\machine_esri_com.pfx",

"keystore_password":"ChangeMe12345"

},

"portal":{

Questions???

Thank you for your time!

Select the session

you attended

Scroll down to

find the survey

Complete Answers

and Select “Submit”

Download the Esri Events

app and find your event

Please Take Our Survey on the Esri Events App!