Thycotic Secret Server Configuration In Automation Suite

News Knowledge Base
1

How to configure Thycotic secret server in the Automation Suite?

Prerequisites:

  1. To configure app settings inside the orchestrator deployment in the Automation suite, we require the Orchestrator Configurator Tool script.
    • The Path to the script orchestrator_configurator.sh is below,
      • cd /opt/UiPathAutomationSuite/{Installer-version}/installer/Tools/
  2. The environment where you use the Orchestrator Configurator Tool must be able to run a bash script and have the following tools:
    • Kubectl
      • run the following command to enable kubectl, 
        • sudo su - 
export KUBECONFIG="/etc/rancher/rke2/rke2.yaml" \ && export PATH="$PATH:/usr/local/bin:/var/lib/rancher/rke2/bin"

    • s3cmd
      • wget https://sourceforge.net/projects/s3tools/files/s3cmd/2.2.0/s3cmd-2.2.0.tar.gz
      • tar xzf s3cmd-2.2.0.tar.gz
      • cd s3cmd-2.2.0
      • sudo python setup.py install
    • jq 1.6
      • Make sure that the jq --version utility version is 1.6. If it's not, update it through one of these options
        • How to install: 
          • curl https://download-ib01.fedoraproject.org/pub/epel/7/x86_64/Packages/j/jq-1.6-2.el7.x86_64.rpm --output /tmp/jq-1.6-2.el7.x86_64.rpm
yum localinstall /tmp/jq-1.6-2.el7.x86_64.rpm
jq --version
    • argocd cli
      • Should be available under bin directory in the installation directory, If not can be installed following below command, 
        • curl -sSL -o argocd-linux-amd64 https://github.com/argoproj/argo
cd/releases/latest/download/argocd-linux-amd64
sudo install -m 555 argocd-linux-amd64 /usr/local/bin/argocd
rm argocd-linux-amd64
    • rclone
      • Follow these steps to install rclone, (check linux installation section)
  3. Download sercret server dll file by running the below command 
    • wget https://downloads.marketplace.delinea.com/integrations/Downloads/UiPath/2.3.0/UiPathSecretServer2.3.0.zip --no-check-certificate
    • Unzip the downloaded directory and move the dll file to the following path,
      • mv SecretServer.SecureStore.dll /var/orchestrator/plugins/securestore
  4. If above directories do not exist create these on all the nodes (if multi node) following below steps
    • mkdir -p /var/orchestrator/plugins/securestore
    • chmod -R 777 /var/orchestrator
    • Upload the SecretServer.SecureStore.dll file to the /var/orchestrator/plugins/securestore on all machines.
      • mv SecretServer.SecureStore.dll /var/orchestrator/plugins/securestore
    • Change the permissions and owner on all machines
    • chmod -R 755 /var/orchestrator
    • chown -R root:root /var/orchestrator


Configuration:

  1. Create the json file securestore.custom.config using vi editor
    • vi securestore.custom.config
    • copy paste the below content, 
      • {
    "Plugins.SecureStores": "SecretServer.SecureStore.dll"
}
    • Save the file and exit
  2. By following below steps configure the secret server in Automation suite
    • cd /opt/UiPathAutomationSuite/{Installer-version}/installer/Tools/
    • run the below command 
      • ./orchestrator_configurator.sh -c securestore.custom.config
        Note : the following error can be ignored 
        • ​​​​​FATA[0063] 6 resources require pruning

  3. Sync the Orchestrator application in argocd and check if the Secret Server credential store available in Orchestrator.