Which account should I designate as the ArcGIS Mission Server account?

The ArcGIS Mission Server account defaults to the name arcgis. Accepting this default is sufficient for most nonproduction deployments; however, for production systems, Esri recommends that you create a domain or Active Directory account prior to installing ArcGIS Mission Server.

You are allowed to specify a local account or a domain account. You can export the setup configuration file when you install ArcGIS Mission Server on the first machine in your site and use the configuration file when you install ArcGIS Mission Server on the other machines in your site. That way, you guarantee that the ArcGIS Mission Server account is configured exactly the same on all the machines in your site.

configureserviceaccount.bat --username mydomain\enterprise-gmsa$ --writeconfig c:\temp\domainaccountconfig.xml

Import an existing server certificate

To import an existing server certificate, click Home > Machines > MachineName > sslCertificates > importExistingServerCertificate

This operation imports an existing server certificate into the keystore. If the certificate is a Certificate Authority (CA) signed certificate, you must first import the CA root or intermediate certificate using the importRootOrIntermediate operation.

Import a root certificate

To import a root certificate, click Home > Machines > MachineName > sslCertificates > importRootOrIntermediate

This operation imports a CA's root and intermediate certificates into the keystore. To create a production quality CA-signed certificate, add the CA's certificates to the keystore that enables the SSL mechanism to trust the CA (and the certificates it has signed). While most of the popular CA's certificates are already available in the keystore, you can use this operation if you have a custom CA or specific intermediate certificates.

Update the security configuration

To update the security configuration, click Home > Security > SecurityConfig > UpdateSecurityConfig

This operation updates the security configuration, including TLS protocols and cipher suites, for your ArcGIS Mission Server site. This operation causes the REST service endpoints to be redeployed on every server machine in the site. If you updated the communication protocol as part of this operation, it takes ArcGIS Web Adaptor one minute to recognize changes to the communication protocol of your site.

Delete a site

To delete a site, click Home > Delete Site

This operation deletes the site configuration and releases all server resources. It is suited for development or test servers that need to be cleaned up regularly and can also be performed before uninstallation. Use caution with this option because it deletes all settings, and other configurations and is an unrecoverable operation.

This operation performs the following tasks:

• All server machines participating in the site are stopped.
• All server machines are unregistered from the site.
• The configuration store is deleted.

Editing System Properties

Administrators may edit ArcGIS Mission Server's properties to fit their organization. Custom property values may be set at https://machine.domain.com:20443/arcgis/admin/system/properties/update. Administrators can find system properties that may be set by using the API Reference hyperlink provided in the top right corner of the screen. When setting a custom system property, the property must be set as a valid JSON object. Multiple system properties may be set at a time, as long as they are strung together as valid JSON, for example:

{
"WebSocketContextURL":"wss://machine.domain.com/<webadaptor>",
"AuthTokenTimeInSeconds":"180"
}

Define a WebSocketContextURL

A WebSocketContextURL is a System Property that allows clients to make WebSocket connections to ArcGIS Mission Server. WebSocket connections are unique in that they are the heart of ArcGIS Mission Server's real-time communication. If client applications are having difficulty making WebSocket connections to ArcGIS Mission Server, setting a WebSocketContextURL could resolve any connectivity issues. WebSocket connections to mission server always begin with wss://.

Example:

{"WebSocketContextURL":"wss://machine.domain.com/<context>"}

Define the length of time a JWT is valid

The JWT (JSON Web Token) is used for user authentication. The length of time that the JWT is valid may be altered.

If this is not set, the default is 180.

Example:{"AuthTokenTimeInSeconds":"180"}

Configure ArcGIS Web Adaptor

To configure ArcGIS Web Adaptor, click Home > System > Web Adaptors > WebAdaptorConfig

The Web Adaptor configuration is a resource for all the configuration parameters shared across the Web Adaptors in the site. This resource identifies the shared key used by all the Web Adaptors to encrypt key data bits in the incoming requests to the server.

Backing up your site

In the event of a disaster, it is highly suggested to frequently export your site settings via the admin API. This can be achieved by navigating to Home > Export Site. It is highly recommended that when defining a destination for the exported site that the location be a network drive, or a location other than the Mission Server machine itself. Destination must be a location that is accessible to the Mission Server machine. In the event of a site failure, the site can be recovered by creating a new server site and navigating to Home > Import Site.

Edit the log settings

To edit the log settings, click Home > Logs > LogSettings > EditLogSettings

This operation updates the log settings for the entire server site, such as log output location, level, and format, as well as log file age.