Update Security Configuration

URL:
https://<securityconfig-url>/update
Methods:
POST
Required Capability:
Administrator
Version Introduced:
10.8

Description

This operation updates the security configuration, including TLS protocols and cipher suites, for your ArcGIS Mission Server site.

This operation causes the SOAP and REST service endpoints to be redeployed (with the new configuration) on every server machine in the site. If the authentication tier is GIS_SERVER , the ArcGIS token service is started on all server machines.

When the authentication occurs at the Web Adaptor, the server does not participate in authenticating the user.

If you updated the communication protocol as part of this operation, it takes the ArcGIS Web Adaptor 1 minute to recognize changes to the communication protocol of your site.

Request parameters

ParameterDetails

securityConfig

The JSON object representing the security configuration .

httpsProtocols

The TLS protocols ArcGIS Mission Server will use. TLSv1.2 is enabled by default. You can also enable TLSv1 and TLSv1.1 . Values must be separated by commas.

Example

Use dark colors for code blocksCopy
1
httpsProtocols=TLSv1,TLSv1.1,TLSv1.2

cipherSuites

The cipher suites ArcGIS Mission Server will use. By default, all of the below options are enabled. Values must be separated by commas. The following are valid options:

  • TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
  • TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
  • TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
  • TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA
  • TLS_RSA_WITH_AES_128_GCM_SHA256
  • TLS_RSA_WITH_AES_128_CBC_SHA256
  • TLS_RSA_WITH_AES_128_CBC_SHA
  • TLS_RSA_WITH_3DES_EDE_CBC_SHA

Example

Use dark colors for code blocksCopy
1
cipherSuites=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA

f

The response format. The default response format is html .

Values: html | json | pjson

Example usage

Below is a sample POST request for update , formatted for readability:

Use dark colors for code blocksCopy
1
2
3
4
5
6
7
8
9
10
11
12
13
POST /webadaptor/admin/security/config/update HTTP/1.1
Host: machine.domain.com
Content-Type: application/x-www-form-urlencoded
Content-Length: []

securityConfig={
  "Protocol": "HTTP_AND_HTTPS",
  "authenticationTier": "GIS_SERVER",
  "allowDirectAccess": "true",
  "HSTSEnabled": "false",
  "virtualDirsSecurityEnabled": "false",
  "allowedAdminAccessIPs": ""
}&httpsProtocols=TLSv1,TLSv1.1,TLSv1.2&cipherSuites=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA&f=json

JSON Response example

Use dark colors for code blocksCopy
1
{"status": "success"}

Your browser is no longer supported. Please upgrade your browser for the best experience. See our browser deprecation post for more details.