Configure P12 certificate

You can generate a new P12 certificate when the old certificate has expired. Generate the certificate and upload it in external key vault settings in the Control Room.

Prerequisites

Stop the following services:

  • Automation Anywhere Control Room Service
  • Automation Anywhere Bot Insight Service
Note: If you have a cluster-based setup, perform these steps on each node. However you can configure the database with CyberArk credentials on any of the nodes.

Procedure

  1. Go to the Control Room installation path.
    For example, C:\Program Files\Automation Anywhere\Enterprise\conf
  2. From the list of files in the config folder, open the boot.db file with an XML editor such as Notepad++.
  3. Define the boot.db.keyvault.enabled property in the boot.db.properties file.
    For example, boot.db.keyvault.enabled=true
  4. Change the value to false to enable the external key vault connection.
  5. Run the database utility and enter the password.
  6. Restart the following services:
    • Automation Anywhere Control Room Service
    • Automation Anywhere Bot Insight Service
  7. Log in to the Control Room.
  8. Go to Administration > Settings > External Key Vault.
  9. Click Browse and select the Certification file.
  10. Click Save changes.
  11. Reconfigure the database settings with the external key vault.
  12. Restart the following services:
    • Automation Anywhere Control Room Service
    • Automation Anywhere Bot Insight Service