Upgrading the Proxy

As a system administrator, you upgrade the Proxy Client and Server. These upgrade instructions apply to Windows and UNIX.

Before upgrading make sure you check for possible incompatibilities. For more information, see Checking for Incompatibilities. To check other compatibility issues, see Compatibility Information or access the compatibility matrix directly.

(missing or bad snippet)

Upgrading the Proxy Client to TLS/SSL

As of this version, the communication between the Automation Engine, the Automic Web Interface, the Java API, and the Proxy Client as well as between the Automation Engine, the Java, Windows and UNIX Agents and the TLS Gateway uses TLS/SSL through a secure WebSocket (WSS).

The Java communication process (JCP) uses trusted certificates to prove its identity to other communication partners and requires a keystore to work with these certificates. Therefore, you have to install and configure the new Java communication process (JCP) and make sure you have the required certificates.

Make sure that you define the properties that are required to connect to the Java communication process (JCP) and to handle the relevant certificates in the respective INI file.

These following properties are relevant:

TCP/IP
connection =jcphost:8443
Default value for the JCP connection.
[AUTHORIZATION]
trustedCertFolder =./certificates
Path to the folder in which the trusted certificates are stored.

To start after the upgrade, the Proxy Client also requires the JCP certificate (jcp.cer) to connect to the Automation Engine. Make sure the certificate is available in the folder defined in the trustedCertFolder = parameter. For more information, see Proxy Client INI file

Converting the Keystore to PKCS#12

As of this version, the communication between the Proxy Client and Server require TLS/SSL encryption and authentication in pkcs12 format.

If your previous version of the Proxy uses jks format you can use the following command to convert the .jks keystore to pkcs12.

keytool -importkeystore
        -srckeystore KEYSTORE.jks
        -destkeystore KEYSTORE.p12
        -srcstoretype JKS
        -deststoretype PKCS12
        -srcstorepass mysecret
        -deststorepass mysecret
        -srcalias myalias
        -destalias jetty
        -srckeypass mykeypass
        -destkeypass mykeypass
        -noprompt

Upgrading the Proxy Client and Server

The upgrade process does not differ from a new installation. For detailed information on how to install the Proxy, see Installing the Proxy.