This Earthdata tutorial is intended to supplement the Esri installation instruction. Note that the setup program is located at /arcgis/portal if you install it from AWS Marketplace, and the shell script argument is -lf, not -la for listadministratorusertypes.sh.

Step-by-Step Guide

1. cd /arcgis/portal/tools/createportal
2. Edit createportal.properties and fill in the property values such as PORTAL_ADMIN_USERNAME, PORTAL_ADMIN_PASSWORD, and PORTAL_LICENSE_FILE.
3. POTAL_CONTENT_DIRECTORY cannot be empty. Enter /arcgis/portal/usr/arcgisportal/.
4. PORTAL_USER_TYPE_ID is mysterious. Use creatorUT based on the license json file.
5. Run /arcgis/portal/startportal.sh
6. Run ./createportal.sh -f createportal.properties
7. The above command will encrypt password in creatportal.properties. It takes a long time so please be patient. At the end, it will show the following output:
8. Run./listadministratorusertypes.sh -lf /home/arcgis/ArcGIS_Enterprise_Portal_107_283791_20190814.json. You'll get the following output.
9. Open a web browser and connect to the server URL using public IP. The portal redirects to an internal IP address, which is not accessible from outside.
10. Install firefox from super user. #apt install firefox.
11. sudo apt-get install dbus-x11
12. ssh -Y to the server to establish an Xwindow session.
13. Run Firefox with the internal URL.
14. Login with the username and password that you specified in createportal.properties.
15. Open the (arcgis portal URL) in Firefox.
16. Click System > Properties to allow the portal access using public DNS entry.
17. Update Properties using JSON after entering the DNS information (WebContextURL is required):
18. Open a web browser from your machine and enter (arcgis portal URL). You should be able to access the portal.
19. You can put the portal behind load balancer with AWS certificate manager. The target group should use HTTP1. In that case, change WebContextURL to a load balancer listener name like (arcgis portal URL). A path based forwarding rule (e.g., /portal/ forwards to 7443) will not work since both server and portal uses /arcgis as context.
20. If you don't want to specify port 7443, one possibility is to create another load balancer with a different DNS entry like arcgis-p.gisdemo.net.
21. It is OK to use a load balancer URL for System Properties in Step 14.
22. Check /arcgis/portal/usr/arcgisportal/logs for any error log.
23. Federate with ArcGIS Server.
24. If you federate Portal with Server, accessing server admin page redirects to Portal. Use Portal username and password to login server manager page.
25. Become root and run # systemctl enable arcgisportal.service
26. If you run the portal on a different machine from the datastore server, become root and disable datastore service. This will lower system load.
    1. systemctl disable arcgisdatastore.service

Running Multiple Portals

It's OK to run multiple portals with the same license.