UiPath Orchestrator installation on Premises (Windows Server 2019)

Help Orchestrator
,
1

Hi everyone,

I have installed UiPath orchestrator(v 23.4.0) on windows server 2019. Below are the steps i took:

Install .Net 4.3
Install IIS
ASP.Net Core IIS module 3.1.x, hosting bundle
ASP.Net Core IIS module 5.0.x, hosting bundle
Add roles and feature → run script in powershell
Install SQL Server on same machine
Create Self Signed Certificate
Install UiPath Orchestrator

But the problem is that when i access orchestrator in browser https://, the below screen appears

The image shows a browser error page indicating that the webpage at "https://win-6309hnc8md3/" can't be reached due to an SSL key usage incompatibility. (Captioned by AI)
The image shows a browser error page indicating that the webpage at "https://win-6309hnc8md3/" can't be reached due to an SSL key usage incompatibility. (Captioned by AI)1046×488 11.6 KB

Has anyone faced the same issue? Looking forward to answers.
Thanks in Advance.

2

@Muhammad_Taeyyab

As per error first the server site itself is not reachable …try using ip or server and ping usign cmd to check if you are able to reach server first

Cheers

3

Hi @Muhammad_Taeyyab

Check if the firewall ports are opened for accessing the Orchestrator URL.

Thanks

4

Hi Anil,

I am using the same machine for accessing orchestrator upon which orchestrator is installed . Plus i am able to ping and telnet localhost port 443.

When i access orchestrator by https://localhost:443 , i am getting below screen:

The browser window displays a "Your connection is not private" error page indicating an invalid security certificate for a localhost connection. (Captioned by AI)
The browser window displays a "Your connection is not private" error page indicating an invalid security certificate for a localhost connection. (Captioned by AI)1344×797 29 KB

Upon clicking process below screen appears:

A browser window displays an error message indicating that "https://localhost/" cannot be reached due to an "ERR_SSL_KEY_USAGE_INCOMPATIBLE" error. (Captioned by AI)
A browser window displays an error message indicating that "https://localhost/" cannot be reached due to an "ERR_SSL_KEY_USAGE_INCOMPATIBLE" error. (Captioned by AI)1409×458 13.1 KB
m

Wondering if the issue is of Self Signed Certificate?

The image shows the Server Certificates section of the Internet Information Services (IIS) Manager, displaying details of a certificate issued to and by the computer named "WIN-6309HNC8MD3" with an expiration date of 9/16/2025. (Captioned by AI)
The image shows the Server Certificates section of the Internet Information Services (IIS) Manager, displaying details of a certificate issued to and by the computer named "WIN-6309HNC8MD3" with an expiration date of 9/16/2025. (Captioned by AI)880×254 32.2 KB

Firewall Settings:

This image shows the "Windows Defender Firewall with Advanced Security" interface, highlighting specific inbound rules with the "Orchestrator" rule selected. (Captioned by AI)
This image shows the "Windows Defender Firewall with Advanced Security" interface, highlighting specific inbound rules with the "Orchestrator" rule selected. (Captioned by AI)1021×222 19.5 KB

Looking forward for your response.

5

Hi Venkat,

Please find firewall configuration in below snapshot.

The image shows the Inbound Rules section of Windows Defender Firewall with Advanced Security, highlighting an inbound rule named "Orchestrator" that is set to allow connections on all profiles. (Captioned by AI)
The image shows the Inbound Rules section of Windows Defender Firewall with Advanced Security, highlighting an inbound rule named "Orchestrator" that is set to allow connections on all profiles. (Captioned by AI)1021×222 19.5 KB

6

@Muhammad_Taeyyab

Did you hopen to configyure iis? After installation

Also if you are an enterprise customer …better to raise a siupport ticket

Cheers

7

No, i haven’t configured iis after installation. Plus i am installing UiPath orchestrator for learning purpose.

IIS Configuration can be seen in below snapshot.

This image shows the "Edit Site Binding" window in IIS (Internet Information Services) where HTTPS settings, including IP address, port number, host name, and SSL certificate, are being configured. (Captioned by AI)
This image shows the "Edit Site Binding" window in IIS (Internet Information Services) where HTTPS settings, including IP address, port number, host name, and SSL certificate, are being configured. (Captioned by AI)590×452 12.8 KB

8

Dear @Muhammad_Taeyyab,

The Ocheastrator is accessible via IP, means that there is no issue in connectivity.

Now, coming to your error about “Hmm…can’t reach this page” is because your DNS is not able to resolve the FQDN(win-6309hrn8md3). To resolve this error add the IP- URL entry in hosts file(path–> c:\Windows\System32\Drivers\etc\hosts).
Example: 1.1.11 win-6309hrn8md3

Once that done, you need to add the self signed certificate in IIS.
Search for “server certificate” in IIS, open it and import your self signed certificate.

For changes to take effect, you have to restart the server in ISS.

Once done, you can access the Orchestrator via secure URL in web browser. :slight_smile:

Br,
NikZ

9

Done the same but still getting the same error.

A Notepad window displaying the hosts file is open on a Windows desktop accessed via Remote Desktop Connection. (Captioned by AI)
A Notepad window displaying the hosts file is open on a Windows desktop accessed via Remote Desktop Connection. (Captioned by AI)1600×900 96.3 KB

A Remote Desktop Connection window displays the contents of the "Certificates - Current User" under "Trusted Root Certification Authorities," listing various certificates and their details. (Captioned by AI)
A Remote Desktop Connection window displays the contents of the "Certificates - Current User" under "Trusted Root Certification Authorities," listing various certificates and their details. (Captioned by AI)1600×900 82.5 KB

The image shows a "Your connection is not private" warning page in Google Chrome due to an SSL certificate error, indicating that the server's certificate is not trusted. (Captioned by AI)
The image shows a "Your connection is not private" warning page in Google Chrome due to an SSL certificate error, indicating that the server's certificate is not trusted. (Captioned by AI)1600×900 56 KB

10

Dear @Muhammad_Taeyyab,

Importing self signed certificate in mmc wont help.
You have to import it in IIS as follows:
how-to-install-an-ssl-certificate-on-iis

Br,
NikZ

11

Dear @Nikhil_Zambare1 ,

Self Signed Certificate already present in IIS and bind with Orchestrator as per below snaps.

The image shows the 'Server Certificates' section of the Internet Information Services (IIS) Manager, displaying a certificate issued to and by WIN-6309HNC8MD3 with an expiration date of September 16, 2025. (Captioned by AI)
The image shows the 'Server Certificates' section of the Internet Information Services (IIS) Manager, displaying a certificate issued to and by WIN-6309HNC8MD3 with an expiration date of September 16, 2025. (Captioned by AI)1600×386 81.6 KB

The image shows the "Edit Site Binding" settings window in IIS (Internet Information Services) with HTTPS selected as the type and port 443 specified. (Captioned by AI)
The image shows the "Edit Site Binding" settings window in IIS (Internet Information Services) with HTTPS selected as the type and port 443 specified. (Captioned by AI)1087×437 17.4 KB

12

Dear @muhammad,

I am available for quick session on Zoom/Google Meet for troubleshooting.
If feasible, you can DM me invitation link or email me.

Br,
NikZ

13

Hi Nikhil,

Sorry for the late reply, I was suffering from internet connectivity issues. What time suit you best to have a zoom session?

Looking forward to your response.