# Certificate Considerations

> Orchestrator requires two types of certificates:

## Certificate Types

Orchestrator requires two types of certificates:

* An Orchestrator [SSL certificate](https://docs.uipath.com/orchestrator/standalone/2023.10/installation-guide/orchestrator-prerequisites-for-installation#prerequisites-for-installation) for enabling the encrypted communication between Robots and Orchestrator. An SSL certificate [approved by a Certificate Authority](https://docs.uipath.com/orchestrator/standalone/2023.10/installation-guide/using-a-certificate-for-the-https-protocol#using-a-certificate-for-the-https-protocol) is recommended, but a [self-signed certificate](https://docs.uipath.com/orchestrator/standalone/2023.10/installation-guide/using-a-certificate-for-the-https-protocol#creating-a-self-signed-san-ssl-certificate) can also be used.
* An Identity Server token-signing certificate for user authentication, which holds the private key. In order to change these, you need to configure Identity Server.

## Changing Certificates

### Through the Platform Configuration Tool

In the context of certificates, the [Platform Configuration Tool](https://docs.uipath.com/orchestrator/standalone/2023.10/installation-guide/platform-configuration-tool#platform-configuration-tool) can be used:

* To [check](https://docs.uipath.com/orchestrator/standalone/2023.10/installation-guide/platform-configuration-tool#certificate-requirements) that all certificate requirements are met by Orchestrator after an upgrade.
* To [update](https://docs.uipath.com/orchestrator/standalone/2023.10/installation-guide/platform-configuration-tool#running-the-script) existing certificates using the `-UpdateUiPathCertificate` command.

### By Creating New Certificates

You can either [request](https://docs.uipath.com/orchestrator/standalone/2023.10/installation-guide/using-a-certificate-for-the-https-protocol#using-a-certificate-for-the-https-protocol) a new Orchestrator SSL certificate from a Certificate Authority or [create](https://docs.uipath.com/orchestrator/standalone/2023.10/installation-guide/using-a-certificate-for-the-https-protocol#creating-a-self-signed-san-ssl-certificate) a self-signed certificate on your own. However, the latter option is not recommended.