When installing Automation 360, add OpenSearch credentials for enhanced security.

OpenSearch credentials is supported for these On-Premises installations:
  • Windows
  • Linux
Note: For Linux installations, Automation 360 requires a new installation to use this feature. This capability is not supported in updates of existing installations.
Note: Starting from Automation 360 v.28 release (Build 17593), the Elasticsearch service is replaced with OpenSearch service as the underlying technology for core product capabilities such as audit, Bot Insight, and so on.

Based on whether you are performing a new installation, running the setup for the first time to update to a later version, or a subsequent re-installation, the options to add the OpenSearch credentials or select a backup OpenSearch server are enabled.

Procedure

  1. In the Provide OpenSearch Credentials window, enter the credentials for OpenSearch in the OpenSearch password field.
    Important: Ensure the following for your OpenSearch authentication password:
    • Minimum length: Is alphanumeric that contains a minimum of 8 characters.
    • Complexity: The password cannot include a space, semicolon (;), percent (%), or backslash (\). The first character cannot be a minus sign (-) or forward slash (\). Ensure that the password contains:
      • At least one uppercase letter
      • At least one lowercase letter
      • At least one number
      • At least one special character
    • Guessability check: Use a unique and strong password as the system checks for commonly used passwords and flags easily guessable ones, such as predictable sequences or patterns like "Admin@123" or "Password1”. A weak password is rejected by the OpenSearch library and the Control Room installation will fail.
    This option is enabled only for the primary node of the cluster when you run the setup for the first time for an update or a new installation of the Control Room. When you enter the password, self-signed certificates are generated for encrypting the data traffic for inter-node and client communication.
    You can also upload custom certificates for client communication. Uploading custom certificates with trusted CA certificates, enhancing security by encrypting and authenticating communications. For more information, see OpenSearch custom certificate.
    The option is disabled for subsequent installations because the password and certificates are retrieved and reused from the second node onwards.
    OpenSearch custom certificate
  2. Repeat the credentials in the Confirm OpenSearch password field.
  3. Select the Check only if installing on the first node of the backup OpenSearch cluster check box when you want to install the Control Room on the primary node that will be used as a backup for the OpenSearch cluster.
    This option is available only if you have provided the OpenSearch credentials for the primary node during a previous installation. The option enables you to use the database backup that is created from the OpenSearch settings table after the primary node of the cluster is installed.
    The option is disabled for subsequent installations.
  4. Click Next to configure the IP cluster.
If you encounter errors when performing this task, see these resources:

Next steps

Configure IP cluster.