Orchestrator windows installer CERTIFICATE_SUBJECT command line parameter

[dzhang]

Hi,

UiPath online doc (Command Line Parameters) says the CERTIFICATE_SUBJECT command line parameter is the name of the ssl certificate or the “full computer name” by default. What does that mean exactly? Does it mean the certificate’s subject CN? What if I’m installing the certificate on “host1” and I have a SAN certificate whose subject CN is “host2”? Can I use the certificate’s thumbprint instead because that’d be unambiguous?

Thank you.

[Nithin_P (Nithin Prabhu)]

Hello @dzhang,

Yes ! CERTIFICATE_SUBJECT is the CN of the SSL as highlighted in the image below:

Hope that helps ! Kudos

Regards,
Nithin

[dzhang]

Thank you, Nithin, for the reply!
Just curious, however, as I alluded to before, with a SAN certificate this is rather awkward (i.e., specifying host2 for the installer when installing orchestrator on host1). Why does UiPath design its installer this way? Why not use the certificate’s thumbprint which is unambiguous and host/domain name neutral. Thanks.

[Nithin_P (Nithin Prabhu)]

Hello @dzhang,

I agree with you, they should have gone with the thumbprint. In fact I have a server with 4 SSL Certs all with the same subject (Different Expiration Dates). I can only guess which on the installer will pick.

Regards,
Nithin

[dzhang]

Thank you @Nithin_P for all the info!