Configure the Agent for Private SSL on Windows

Overview

This page guides you through configuring the agent to work with an RPA Console that uses a private SSL certificate. Before you begin, ensure the following conditions are met:

• Your site is already set up with a custom domain and a matching private SSL certificate.
• You have a copy of the SSL certificate (without the private key) named certificate.cer.
• You have access to a Windows command shell, such as NT Batch or PowerShell.
• A JDK is installed, and the Java keytool utility is available in your path.

This process consists of these three steps: creating the custom keystore for your agent, creating the .l4j.ini configuration file, and starting the agent. These tasks are typically performed by system administrators or engineers who are responsible for maintaining a secure and reliable IT infrastructure.

Configuring the agent on your host machine

1. Create the custom keystore for the agent

1. Export the certificate from your browser:
   Tip: These instructions are for Chrome. Steps may vary in other browsers.
   1. Click the Not Secure chip next to the URL in the browser.
   2. Click the pop-out icon and go to Details > Export.
2. Generate the keystore:
   1. Set the file path and hostname. In the following command, replace your-custom-domain.com with your actual custom domain name.

      1
      2
      set CERT_FILEPATH=path\to\certificate.cer
      set HOSTNAME="your-custom-domain.com"
      

   2. Run the keytool command to import the certificate. In the following command, replace password with the actual password for your keystore.

      1
      keytool -importcert -file %CERT_FILEPATH% -keystore KeyStore.jks -alias %HOSTNAME% -storepass password -noprompt
      

3. Place the KeyStore.jks file in the same directory as your RPA agent executable.

2. Create the .l4j.ini configuration file

1. In the same directory as your RPA agent executable, create a file named AppianRPAagent.l4j.ini.
2. Add the following lines to the file. Again, replace password with the actual password of your keystore.

   1
   2
   -Djavax.net.ssl.trustStore=full/path/to/KeyStore.jks
   -Djavax.net.ssl.trustStorePassword=password
   

3. Start the agent

Start the agent by double-clicking the executable file.

Feedback