- Organization Modeling in Orchestrator
- Automation Best Practices
- Optimizing Unattended Infrastructure Using Machine Templates
- Organizing Resources With Tags
- Orchestrator Read-only Replica
- Exporting grids in the background
- About the Tenant Context
- Searching for Resources in a Tenant
- Managing Robots
- Connecting Robots to Orchestrator
- Storing Robot Credentials in CyberArk
- Storing Unattended Robot Passwords in Azure Key Vault (read-only)
- Storing Unattended Robot Credentials in HashiCorp Vault (read-only)
- Storing Unattended Robot Credentials in AWS Secrets Manager (read Only)
- Deleting Disconnected and Unresponsive Unattended Sessions
- Robot Authentication
- Robot Authentication With Client Credentials
- Elastic Robot Orchestration
- Automation Cloud™ Robots - VM
- Automation Cloud™ Robots - Serverless
- Configuring VPN for Cloud Robots
- Bulk Uploading Queue Items Using a CSV File
- Managing Queues in Orchestrator
- Managing Queues in Studio
- Review Requests
- Test Automation
Auto Updating Client Components
This feature allows administrators to update Robot, Studio, and UiPath Assistant clients to newer versions from Orchestrator. This provides an easy way to deliver a version update to a large base of machines from a centralized location, helping remove user friction and streamlining the update process.
- Orchestrator, Studio and Robot 2021.10 or later.
- Studio and/or Robot 2021.10 or later installed on the client machine and connected to Orchestrator.
Components That Take Part in the Update Process
- Robot Service
- Update Agent - a Windows process responsible for the communication between the user and update service. (only present in the user mode and attended robot installation)
- Update Service - a Windows Service responsible for the communication between the client machine and the update server.
- Orchestrator: provides the user interface for administrators to set auto-update policies and see the version status for client apps.
- Update server: a centralized service responsible for managing the auto-update policies and maintaining the communication with the client machines through the update service.
How This Works
As an administrator, you can choose the specific version to be deployed on a specific machine.
For this to happen, when Studio and Robot are installed, two executables are also added to the machine:
Depending on the type of Studio/Robot installation, they are installed run in a different way:
- Unattended Robot:
UiPath.UpdateService.Worker.exeis installed as Windows Service and
UiPath.UpdateService.Agent.exeis not installed.
- Attended Robot:
UiPath.UpdateService.Worker.exeis installed as Windows Service;
UiPath.UpdateService.Agent.exeis installed as LogOn Task in Task Scheduler.
Quick Install (user mode):
UiPath.UpdateService.Agent.exeare installed as LogOn Tasks in Task Scheduler.Important: When installing UiPath Studio and Robot on the machine in attended - user mode, for the update service to connect to the update server, make sure to add the Orchestrator URL during setup. If the Orchestrator URL is not added during installation, a user with administrator rights on the machine has to log on to the machine and connect the robot to Orchestrator.
When a new policy is defined or changed, the update server sends a command to the update service on the client machine, which asks the client apps if they are ready to start the update process.
To be ready to receive an update, a product must be in a neutral state:
- Studio - no running processes or active sessions.
- Robot - no running jobs or processes.
- Assistant - no running processes or pending
activities (installing or downloading processes).
Note: During the update process, the Robot does not start any jobs until the update is completed.
In the attended scenario, an update prompt is displayed giving the user two options:
Update Now- stops all running jobs and closes all Studio instances on that machine then proceeds with the update.
Later- mutes the notification and the update process can be resumed by going to the UI icon in the system tray and clicking check for updates.
When the user accepts the prompt, the confirmation is sent to the update service and the update process starts. If no response is provided in 24 hours since the first notification, the update installed automatically.
In the unattended scenario, the update service confirms that the client app is in a neutral state (as described above) before sending the confirmation back to the update server.
If there are any processes running on the machine, the user is prompted to choose to either stop the process, or wait for it to finish and continue with the update. If a Studio session is open, the user is prompted to save the progress.
If the user doesn’t react, Studio closes and the process is saved as-is at that time and can be recovered after the update is completed, while the Robot waits for any process to complete and starts the update process afterwards.
Update Process Steps
The update process is split into seven stages:
- The update service is checking the update server every three hours for an update request. If the update request is received,
the update process starts the download process. If the download process has been started successfully, the update request
is added to the update server database with the status
- The update service is checking the update server every three hours for an update request. If the update request is received, the update process starts the download process. If the download process has been started successfully, the update request is added to the update server database with the status
Downloadedstate acts as a marker, so that the update service can start the post-processing phase. This state marks the fact that the update file has been downloaded successfully.
- This step handles the post-processing of the downloaded file. In this step, the file is checked and if no errors appear, the install process starts.
- Ready to Install
- The update agent informs the user that an update is awaiting install and asks for approval or checks if the client apps are ready to receive the update.
- Install Approved
- Once the approval is received by the update service, the actual installation starts.
- The new version is installed on the machine keeping the same settings as the previous version.
- Success / Error Based on the install result, the update status is reported back to the update server.Note: If the Chrome extension was already installed on the robot machine, the auto-update functionality updates it as well. Otherwise, the extension has to be installed manually.
During the update process, if the file cannot be retrieved in the first download, the update service retries three more times. The retry intervals are: one hour after the initial attempt, then two hours after the first retry, and four hours after the last retry. Before each retry, the user is informed through the notification system.
For each download attempt, the logs are added to the Orchestrator update logs and
locally on the machine in the
The process is similar for installing, meaning that if the first install fails, the update service tries again three times with the same frequency (one hour after the initial attempt, then two after the first retry, and four hours after the last retry).
The update server waits 72 hours for the update to complete since it started. If the new version is not installed after this interval expires, a detailed error is added to the logs. The update is retried the next time a request is received.
You are also able to manually retry the update using the button if the auto-update failed.
Service-mode Vs User-mode Robot Deployments
The technical aspects on the server side are identical for both service-mode and user-mode deployments, as they use the same connection type between the update server and update service. The difference consists in how the Robot service communicates with the update service on the client machine, as explained below.
In service-mode deployments, the robot service and update service both run in the local system account session.
In user-mode deployments, the robot service runs in the user session and the update service runs in the local system account session.
Policies can be set for users, groups of users (recommended for attended use cases), or machines (recommended for unattended use cases).
Configuring Policies for Users/user Groups
Configuring update policies for users or user groups allows administrators to control the Studio, Robot and Assistant version for a specific user or user group.
- Specific user - to granularly update components tied to a specific user.
Group of users - to update access to all group members without the need to set the access level for each user individually.Important: For users that have the Automation Express license assigned, the update policy cannot be edited and is set to deliver the latest enterprise version.
Policies are configured by editing a specific user or group from the Manage Access tab in Orchestrator.
- Navigate to Tenant > Manage access. The Users window is displayed.
- For the desired user/user group, click Edit. The Edit User window is displayed.
- In the Update policy settings section, change the auto-update policy to one of the following values:
If the policy applied to the user is set to
None, but they are also part of a group that has a specific policy set (e.g. Latest Patch), the group policy applies. If you want
the components for that specific user to not be updated, you must either remove them from the group that has the policy or
set the update policy to be at the current version that is installed.
If the user has a policy set to push a specific version and they are also part of a group that has a different policy, the user level policy takes precedence.
Per Machine Objects
Configuring an update policy for machine objects allows administrators to update the robot versions on all machines connected to Orchestrator using a specific machine key.
To configure the update policies for machine objects, follow the steps below:
- Navigate to Tenant > Machines. The Machines window is displayed
- For the desired machine object, click Edit. The Edit Machine window is displayed.
- Access the Maintenance tab. The Auto Update configuration menu is displayed.
- Configure the update policy.
From the Maintenance tab you are also able to schedule the update to start at a certain time and date to match other maintenance windows in your company. You can also set the duration of the maintenance window. If the time set for the maintenance window elapses and the update did not start, it is scheduled during the next available interval.
In the event a user-level policy, a group-level policy, and a machine-level policy apply to the same Robot, the user-level policy takes precedence.
- Machine_1 has a 2021.10 version of Robot and Studio installed.
- On machine_1, the robot is connected to Orchestrator through Interactive Sign In with the John.Doe@domain.com user.
- An update policy applies to firstname.lastname@example.org which is set to push the 2021.10.2 version.
- email@example.com is also part of group_1.
- An update policy applies to group_1 which is set to push the 2021.10.3 version.
An update policy applies to machine_1 which is set to push the 2022.4 version.
Result: when the update policies trigger, the components on that machine are updated to 2021.10.2 version.Note: When using Robot Accounts please note that the machine-level policy is used in order to handle the update.
Version availability in policies
When creating an update policy, you can choose one of the following options:
Latest major version
Installs the latest available version found on the update server.
Installs the latest patch available for each of the supported versions. (e.g. Latest 2021.10 patch, Latest 2022.4 patch).
Installs a specific patch from the list of the ones available in the Update Server.
In the Orchestrator user interface, the update logs are available for failed and successful updates. Complete logs for the
update are found on the machine in the
When robots are deployed on virtual environments where the machines are cloned, the machine name, guid, drive id, and mac address are the same. This can cause conflicts as Orchestrator receives different update statuses from multiple machines with the same identifiers.
In this scenario, the update status in Orchestrator is shown based on the last machine that connected.
This can also impact orchestrator logs, as multiple machines have the same identifiers, duplicate logs can appear.
The Version status column allows you to check the status of the Robot version for your machines against the associated policy.
The following values are available:
- No policy - no policy is defined
- Update in progress - this status is presented when the update process is ongoing on the machine
- Compliant – the robot version on the machine is matching to the update policy.
- Non-compliant - the robot version on the machine is different than what was setup in the policy. (e.g. robot version is 2021.10.3, the policy is set up as 2021.10.1)
- Update failed - this status shows when the update process failed. More details can be found in the update logs.
- N/A - this status shows up when the setting to exclude inactive machines is enabled and the robot hasn’t been connected for a while, or when the machine type is not compatible with the auto-update process.
Version Status for Machines
The Version status column on the Orchestrator Machines tab allows you to check the status of the Robot version for your machines against the associated policy.
N/Awith the "Auto-update is not applicable for this type of machine" tooltip.
Excluding inactive machines
If multiple machines are connected to Orchestrator using the same key and one of them is inactive, the version status of the
machine template becomes
Non compliant. This is happening as the machine template communicates with the update server using the same machine key, and if one of
the machines connected is unable to receive an update, the overall status of the machine template is impacted.
To avoid this, access the General section of the Settings menu at the tenant context, select the Client Binaries checkbox and set the preferred inactivity interval. This excludes inactive machines from the update process and no longer takes them into account when the update status is reported.
Version Status for Users
The Version Statuses column on the Robots tab in Orchestrator allows you to check the status of the client component version for your users against the associated policy.
For scenarios in which the robots are sitting behind a proxy, for the auto-update feature to work, additional configuration might be needed. Based on the installation type, proxy configurations can either be inherited from the user-level proxy settings, or set manually by editing the config file.
From the user level proxy settings.
1 when the robot is installed in unattended mode, the update agent is not added to the machine.
Collecting Error Logs
When an update fails, you can use the Diagnostic Tool to collect logs which can be sent to our Support Team which are used for further investigation on the specific error.
Diagnostic Tool Setup
- Components That Take Part in the Update Process
- How This Works
- Service-mode Vs User-mode Robot Deployments
- Configuring Policies
- Configuring Policies for Users/user Groups
- Per Machine Objects
- Policy Priority
- Update Logs
- Version Statuses
- Version Status for Machines
- Version Status for Users
- Proxy Configuration
- Collecting Error Logs
- Error Message
- Diagnostic Tool Setup