Important update
Esri is planning to enforce “HTTPS Only” for ArcGIS Online and later HSTS. This important security update is likely to affect some ArcGIS software and custom solutions. Esri customers will need to act now to be ready for this change now coming December 8th, 2020.
This shift from the original date of September 15th, 2020 is to ensure that all our customers have a six month period for remediation and preparation before the change is enforced.
The ArcGIS Platform uses the HTTPS protocol as a key component of its security for web and service API connections. This includes connections between our software, such as ArcGIS Desktop and ArcGIS Enterprise, with ArcGIS Online.
“HTTPS Only” has been a default configuration setting in ArcGIS Online since September 2018, so all new subscriptions since this time do not have the option to disable HTTPS. For ArcGIS Enterprise since version 10.4, while HTTPS ENABLED has been the default, HTTPS ONLY has been the default since version 10.7. With ArcGIS Enterprise, users have the option of turning this capability off if desired.
Below you will find the most important questions and answers
Esri will increase the security of its ArcGIS Platform and enforce only HTTPS or ‘HTTPS only’ and later HSTS. This is an important security update that can affect various ArcGIS components. More info can be found in following support document : https://support.esri.com/en/https_only
The change applies to our customers using ArcGIS Online and ArcGIS Enterprise. We especially ask customers with ArcGIS Enterprise 10.3 to be extra attentive and to perform the necessary checks.
From 10.4 Https Only is the default, but that can be changed by the Administrator. Here too we ask to be attentive and to carry out the necessary checks. More info can be found in following support document : https://support.esri.com/en/https_only
Check if ‘HTTPS Only’ is activated in ArcGIS Online> Settings. Check all items in your organisation for ‘HTTP Only’ and make the necessary changes. Additional tools are provided for support. More info can be found in following support document : https://support.esri.com/en/https_only
From December 8, 2020. Esri Belux recommends to perform the necessary checks in time.
More info can be found in following support document : https://support.esri.com/en/https_only
