# Installation

> Identity Server and Orchestrator are installed together on the same IIS server. Please read [here](https://docs.uipath.com/orchestrator/standalone/2024.10/installation-guide/orchestrator-about-installation#about-installation) how to proceed with Orchestrator installation.

Identity Server and Orchestrator are installed together on the same IIS server. Please read [here](https://docs.uipath.com/orchestrator/standalone/2024.10/installation-guide/orchestrator-about-installation#about-installation) how to proceed with Orchestrator installation.

By default, the installer uses the same database for Orchestrator and Identity Server, but you can specify a different database during installation. The installed Identity Server address is `https://OrchestratorURL/identity`.

:::important
* For large deployments, we recommend using a separate database for Identity
Server.
* Double-check the selected installation path. Moving an installation from one
location to another post-install is not supported.
:::

## Performing a Clean Installation

The results of performing an Orchestrator installation are the following:

* Orchestrator's `UiPath.Orchestrator.dll.config` file is updated with [Identity Server specific keys](https://docs.uipath.com/orchestrator/standalone/2024.10/installation-guide/uipath-orchestrator-dll-config#identity-server-settings).
* Identity Server's `appsettings.json` file is updated with Orchestrator specific settings ([encryption keys](https://docs.uipath.com/orchestrator/standalone/2024.10/installation-guide/orchestrator-is-appsettings-json#encryption), caching, [Redis settings](https://docs.uipath.com/orchestrator/standalone/2024.10/installation-guide/orchestrator-is-appsettings-json#load-balancer), etc.).

## Performing an Update

The results of performing an Orchestrator [update](https://docs.uipath.com/orchestrator/standalone/2024.10/installation-guide/about-updating-and-migrating#about-updating-and-migrating) are the following:

* Pre-existent Orchestrator data such as users, tenants, host or default settings are propagated to Identity Server.
* Orchestrator's `UiPath.Orchestrator.dll.config` file is updated with [Identity Server specific keys](https://docs.uipath.com/orchestrator/standalone/2024.10/installation-guide/uipath-orchestrator-dll-config#identity-server-settings).
* Identity Server's `appsettings.json` file is updated with Orchestrator specific settings ([encryption keys](https://docs.uipath.com/orchestrator/standalone/2024.10/installation-guide/orchestrator-is-appsettings-json#encryption), caching, [Redis settings](https://docs.uipath.com/orchestrator/standalone/2024.10/installation-guide/orchestrator-is-appsettings-json#load-balancer), etc.).
  :::important
  During [Orchestrator update](https://docs.uipath.com/orchestrator/standalone/2024.10/installation-guide/about-updating-and-migrating#about-updating-and-migrating), the installer cannot read an encrypted [SecureAppSettings section](https://docs.uipath.com/orchestrator/standalone/2024.10/installation-guide/uipath-orchestrator-dll-config#uipathorchestratordllconfig) . In order to read the `EncryptionKey` from Orchestrator's config file and then migrate it into Identity Server's `appsettings.Production.json` file, the key must be plain text. You need to [manually decrypt](https://docs.uipath.com/orchestrator/standalone/2024.10/installation-guide/orchestrator-encrypting-uipathorchestratordllconfig#encrypting-uipathorchestratordllconfig-sections) the section before updating Orchestrator. After the Orchestrator update process was finalized, remember to re-encrypt the `SecureAppSettings` section in `UiPath.Orchestrator.dll.config`. If you have any external providers enabled in `UiPath.Orchestrator.dll.config`, you are prompted about the manual changes you need to perform in the external providers' location. For security reasons, for the certificate used to sign the access tokens generated by the Identity Server, make sure to use a public key on 2048 bits. The certificate's location has to be set within `appsettings.Production.json`'s [Signing Credential](https://docs.uipath.com/orchestrator/standalone/2024.10/installation-guide/orchestrator-is-appsettings-json#signing-credential) section. After [updating](https://docs.uipath.com/orchestrator/standalone/2024.10/installation-guide/about-updating-and-migrating#about-updating-and-migrating) your Orchestrator to v2020.4+, the **Profile** page won't display login attempts previous to that update, but all the details are still accessible from Orchestrator's database.
  :::