Deployed a service fabric cluster not to able to access the explorer link

Hello @Rishabh Jain,

Troubleshooting Access to Service Fabric Explorer After Cluster Deployment

If you're unable to access the Service Fabric Explorer (SFX) link after deploying a Service Fabric cluster, please check the following:

Cluster Status: Ensure the Service Fabric cluster is up and running. You can verify this via the Azure portal or by using PowerShell commands.

Network Security Group (NSG) Rules: If the cluster is deployed in Azure, confirm that the NSG associated with the cluster allows inbound traffic on the required ports. By default, Service Fabric Explorer uses port 19080.

Firewall Settings: For on-premises clusters or those within a virtual network, ensure that local firewall rules permit traffic on the necessary ports.

Correct URL: Double-check that you're using the correct URL format to access Service Fabric Explorer.

If you need further assistance, feel free to reach out.

Rishabh Jain

Could you please provide an update on this post? Kindly let us know if the suggested steps suggested by helps or you need further assistance on this issue.

I need further asistance here ..

(Edit: PII removed)

Hello Rishabh Jain Please try the below steps and let us know if it helps:

1. Verify Cluster Health and Certificate Validity
   1. In Azure Portal, navigate to your Service Fabric cluster resource (subId=2757df02-998c-4f5c-9bc7-41cda3385154, RG testrishabh926) and confirm its Health Status is Healthy.
   2. Check the Cluster state if you see UpgradeServiceNotReachable, one or more seed nodes may be down, or your upgrade service cannot start. Validate that the cluster certificate is:

• Not expired
• Issued by a trusted authority (or if self-signed, installed in your machine’s Trusted Root store).
• Configured with the correct thumbprint in your ARM template or resource settings.

Understanding cluster certificates: https://learn.microsoft.com/en-us/azure/service-fabric/service-fabric-cluster-security

Open and Trust the Client Certificate Locally

1. On your client machine, open Certmgr.msc.
2. Import the cluster’s client .pfx, ensuring it lands under Certificates – Current User → Personal and Trusted Root Certification Authorities.
3. Right-click the certificate → All Tasks → Manage Private Keys → grant Network Service and your user account Read permissions.

Confirm Network Connectivity and Firewall Rules

1. Ensure TCP port 19080 (HTTP endpoint) and 19000 (TCP management endpoint) are allowed: In your Cluster’s NSG inbound rules On any corporate/proxy/firewall devices between you and the cluster
2. From your client, run:
   Test-NetConnection -ComputerName <clusterFQDN> -Port 19080
   A TcpTestSucceeded: True result confirms connectivity.

Clear Browser Cache and Retest

1. Clear your browser’s SSL state and cache, or use an Incognito/Private window.
2. Navigate to https://<clusterFQDN>:19080/Explorer.

When prompted, select the client certificate you installed.

• If you still see browser security warnings, click Proceed (for dev/test only; production clusters should use CA-issued certs).

Test via PowerShell

1. Open an elevated PowerShell session with the Service Fabric SDK installed.
2. Run: Successful connection indicates the Fabric Gateway service is healthy. Failure suggests a gateway or certificate ACL issue and collect traces from D:\SvcFab\Log\Traces on a node and open an Azure support ticket.

Inspect HTTP Gateway Logs

1. RDP to one of your cluster’s scale-set nodes.
2. Open Event Viewer → Applications and Services Logs → FabricHttpGateway.
3. Look for 403 or WRP stream errors indicating certificate or TLS protocol mismatches.

Microsoft Documentation References

1. Visualizing your cluster using Service Fabric Explorer: https://learn.microsoft.com/azure/service-fabric/service-fabric-visualizing-your-cluster
2. System health reports troubleshooting https://learn.microsoft.com/en-us/azure/service-fabric/service-fabric-understand-and-troubleshoot-with-system-health-reports
3. Service Fabric support options https://learn.microsoft.com/en-us/azure/service-fabric/service-fabric-support