Updating Orchestrator and Identity Server certificates

1. Export Orchestrator certificates

Background information

To update Orchestrator certificates, you first need to export the certificate using browser.

Procedure

1. Open the certificate, go to the Certification Path tab and select the first certificate. Click on View certificate. In case there is only one certificate just select it.
   
   

   

   
   
2. Once the root certificate is displayed, go to the Details tab and click Copy to file.
   
   

   

   
   
   Note: Make sure that the certificate is base64 and cer format.
3. Save it with the name of your choice and then send it to AI Center machine.

   The resulting file should be similar to the example below.

   -----BEGIN CERTIFICATE----- 
   certificate
   base64
   encoded
   -----END CERTIFICATE-----

4. Encode the certificate content to base64. To do so, run the following commands for either Linux Bash shell or Windows PowerShell:

   Linux Bash:
   [root@server0 UiPath_Installer]# ORCHESTRATOR_CERT_FILE_CONTENT=$(base64 -i /full/path/to/full_orch.cer )
   [root@server0 UiPath_Installer]# ORCHESTRATOR_CERT_FILE_CONTENT=$(echo ${ORCHESTRATOR_CERT_FILE_CONTENT} | sed -e 's/[[:space:]]//g')
   
   Windows PowerShell:
   [root@server0 UiPath_Installer]# echo $ORCHESTRATOR_CERT_FILE_CONTENT[convert]::ToBase64String((Get-Content -path "\full\path\)    o\full_orch.cer" -Encoding byte))[convert]::ToBase64String((Get-Content -path "\full\path\    o\full_orch.cer" -Encoding byte))

2. Update the certificate

Background information

After you have prepared the certificate file, you can update the certificates. To update the certificates you need to access the ArgoCD application.

Procedure

1. Go to the ArgoCD application
2. Click on the uipath application.
   
   

   

   
   
3. Click on APP DETAILS and go to the Parameters menu.
   
   

   

   
   
4. Click on EDIT and update the global.userInputs.aicenter.orchestratorCert parameter with the new certificate resulted from the Export Orchestrator certificate procedure. If needed, update the global.userInputs.aicenter.identityCert parameter as well.
5. Go back to the applications menu and choose the aicenter application.
   
   

   

   
   
6. Delete aicenter-external-certs in the aicenter application by clicking on ⁝ and then Delete.
   
   

   

   
   
7. Click on the Sync button in the aicenter application. After a few minutes, aicenter-external-certs is recreated and the certificate is updated.