For security purposes, the Workato OPA (On-Prem Agent) certificates are set to renew on an annual basis. To ensure that customers are well informed and have ample time to take action before their certificate expires, Unimarket has implemented a notification system within each customer's Workato workspace. This system is designed to automatically notify customers and generate a support ticket with the Unimarket support team exactly 30 days prior to the certificate's expiration date. The goal of this proactive approach is to provide both the customers and the Unimarket team with sufficient notice, allowing them to renew the certificate in a timely manner by following the outlined procedures below.
Unimarket offers flexibility in managing the renewal process. Customer IT staff can be granted access to the relevant Workato workspace, enabling them to independently perform all necessary tasks related to certificate renewal. Alternatively, Unimarket can handle the entire process within Workato on behalf of the customer. In this scenario, Unimarket will generate the new certificate and securely provide it to the customer's IT staff, who can then update the certificate on the OPA host server as required.
If you would like to gain access to your organization's Workato workspace, you will first need to create a free Workato account. To do this, visit https://app.workato.com/users/sign_up and complete the sign-up process. Once your account is set up, you should request the Collaborator Role by submitting a support ticket to Unimarket. This can be done by sending an email to support@unimarket.com. After your request is processed, you will be granted the necessary permissions to access and manage the workspace as a collaborator.
For comprehensive guidance and additional technical details, please refer to the official Workato documentation available at https://docs.workato.com/en/on-prem/agents/key.html#renew-agent-keys. Additionally, the step-by-step instructions for renewing your certificate are provided below for your convenience.
The certificate renewal process can be completed either by the customer independently or in collaboration with the Unimarket team. Together, you can follow the outlined steps to generate a new key and certificate. Importantly, this process can be performed without the need to upgrade your existing setup, ensuring a smooth and efficient renewal experience.
- Create a new on-prem agent in the same on-prem group as the original agent. You don't need to download the installer during the setup unless you plan to upgrade the original agent. Refer to the Add an agent or Upgrade an agent page for more information.
- When creating the new OPA, name the agent like "{customer} PROD OPA 2026"
- Save the Activation code for the new agent during setup.
- Go to the
conffolder inside your existing OPA installation folder (C:\Program Files\Workato Agentby default if using Windows). - Move the
cert.pemandcert.keyfiles to a backup location. - Open a command-line interface and set the working directory to the
binfolder inside your existing OPA installation folder. -
Run the
activatescript and pass the activation code as an input parameter to create newcert.keyandcert.pemfiles. For example:activate.cmd --code=ACTIVATION_CODE
- Return to Workato and click Test
- Esure your new agent appears as Active, then click Done. The existing on-prem agent installation becomes the new agent. The new certificate remains valid for 1 year after the generation date.
- Go to the old agent's Version column, click ... (ellipsis), and then select Delete agent.