> For the complete documentation index, see [llms.txt](https://docs.unimarket.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.unimarket.com/documentation/unimarket-integration-middleware/renew-workato-opa-certificate.md).

# Renew the Workato OPA Certificate

For security purposes, the Workato OPA (On-Prem Agent) certificates are set to renew on an annual basis. To ensure that customers are well informed and have ample time to take action before their certificate expires, Unimarket has implemented a notification system within each customer's Workato workspace. This system automatically notifies customers and generates a support ticket with the Unimarket support team exactly 30 days prior to the certificate's expiration date. The goal of this proactive approach is to give both customers and the Unimarket team sufficient notice to renew the certificate in a timely manner by following the procedures below.

Unimarket offers flexibility in managing the renewal process. Customer IT staff can be granted access to the relevant Workato workspace, enabling them to independently perform all tasks related to certificate renewal. Alternatively, Unimarket can handle the entire process within Workato on behalf of the customer — in this case, Unimarket generates the new certificate and securely provides it to the customer's IT staff, who then update the certificate on the OPA host server.

## Requesting Workspace Access

If you would like access to your organization's Workato workspace, first create a free Workato account at <https://app.workato.com/users/sign_up>. Once your account is set up, request the Collaborator Role by submitting a support ticket to Unimarket — send an email to <support@unimarket.com>. After your request is processed, you will be granted the necessary permissions to access and manage the workspace as a collaborator.

For comprehensive guidance and additional technical details, refer to the official Workato documentation on [renewing agent keys](https://docs.workato.com/en/on-prem/agents/key.html#renew-agent-keys).

{% hint style="info" %}
For step-by-step instructions using Linux commands, see [Step By Step of the Workato Agent Cert Renew using Linux Host Server OS](/documentation/unimarket-integration-middleware/workato-agent-cert-renew-linux.md).
{% endhint %}

## Renewal Steps

The certificate renewal process can be completed either by the customer independently or in collaboration with the Unimarket team. This process can be performed without needing to upgrade your existing setup.

1. Create a new on-prem agent in the same on-prem group as the original agent. You don't need to download the installer during setup unless you plan to upgrade the original agent. Refer to Workato's [Add an agent](https://docs.workato.com/on-prem/groups/add-agent.html) or [Upgrade an agent](https://docs.workato.com/on-prem/agents/upgrade.html) pages for more information.
   * When creating the new OPA, name the agent something like `{customer} PROD OPA 2026`.
2. Save the **Activation code** shown for the new agent during setup.
3. Go to the `conf` folder inside your existing OPA installation folder (`C:\Program Files\Workato Agent` by default on Windows).
4. Move the `cert.pem` and `cert.key` files to a backup location.
5. Open a command-line interface and set the working directory to the `bin` folder inside your existing OPA installation folder.
6. Run the `activate` script, passing the activation code as an input parameter, to create new `cert.key` and `cert.pem` files. For example:

   ```
   activate.cmd --code=ACTIVATION_CODE
   ```
7. Return to Workato and click **Test**.
8. Ensure the new agent appears as **Active**, then click **Done**. The existing on-prem agent installation becomes the new agent. The new certificate remains valid for 1 year after the generation date.
9. Go to the old agent's **Version** column, click the ellipsis (**...**), and select **Delete agent**.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.unimarket.com/documentation/unimarket-integration-middleware/renew-workato-opa-certificate.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.