How to setup ACL REDIS on Orchestrator

News Knowledge Base
1

The end-user is experiencing issues with Redis security settings, specifically needing to set up Access Control Lists (ACLs) and disable the default user for a clustered database. Additionally, the user is unable to change ACL settings due to an expired license, and a vulnerability scanning tool has detected that the Redis server is accessible without authentication on port 10000 over TCP, which is a security violation.

To integrate the Access Control List (ACL) into the Redis connection, it is necessary to modify the connection string to include the new ACL format and SSL settings. Adhere to the following steps:

1. Stop the Orchestrator service by opening an elevated Command Prompt from the Windows Start Menu.

2. In the Command Prompt, enter the command `IISRESET /stop`, or stop the application pools using the Internet Information Services (IIS) Manager.

3. After the Orchestrator service has been halted, locate the installation folder of Orchestrator. Within this folder, find the files `Appsettings.Production.json` and `UiPath.Orchestrator.dll.config`.

4. Identify the line that contains the key `LoadBalancer.Redis.ConnectionString` in the `UiPath.Orchestrator.dll.config` file and the `RedisConnectionString` in the `Appsettings.Production.json` file.

5. It is advisable to create a backup of these files before making any changes.

6. Modify the connection string according to the following example:

``` redis0:6380,redis1:6380,ssl=true,user=myuser,password=mypassword ```

Make sure to substitute the placeholders (myuser, mypassword) with your actual Redis username and password.

7. Once the connection string has been updated, save the files and verify that the changes have been applied.

8. Restart the Orchestrator service.

Upon completing these modifications, one should be capable of establishing. a connection to Redis utilizing the newly incorporated ACL.

Should any issues arise, it is recommended to submit a support ticket for assistance.