> For the complete documentation index, see [llms.txt](https://docs.unimarket.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.unimarket.com/documentation/unimarket-integration-middleware/workato-agent-cert-renew-linux.md).

# Step By Step of the Workato Agent Cert Renew using Linux Host Server OS

These steps cover renewing the Workato On-Premise Agent (OPA) certificate on a Linux host. See [Renew the Workato OPA Certificate](/documentation/unimarket-integration-middleware/renew-workato-opa-certificate.md) for the general renewal overview.

## Step 1: Create a new agent in Workato

In the Workato UI, add a new on-prem agent to the **same on-prem group** as the existing agent. You don't need to download a new installer. Save the **Activation Code** shown during setup — you'll need it later.

{% hint style="info" %}
Unimarket will perform this task unless you have set up a Workspace Collaborator with access to your Workato Test and Prod environments via the Unimarket team.
{% endhint %}

## Step 2: Stop the agent service

```bash
sudo systemctl stop workato-agent
```

Confirm the service name with `systemctl list-units | grep workato` if you're unsure.

## Step 3: Switch to the `workato` user

```bash
sudo su - workato
```

If your system uses a different method:

```bash
sudo -i -u workato
```

{% hint style="info" %}
All commands in Steps 4 and 5 that interact with the `workato-agent` directory must be run as the `workato` user. The directory and its contents are owned by this user, and running these commands as any other user will result in permission errors.
{% endhint %}

## Step 4: Navigate to the `conf` directory and remove the expired certificates

```bash
cd /opt/workato-agent/conf
```

Adjust the path if your install location differs — common alternatives are `/usr/local/workato-agent` or `/home/workato/workato-agent`.

```bash
rm cert.pem cert.key
```

## Step 5: Navigate to the `bin` directory and run the activation script

```bash
cd /opt/workato-agent/bin
```

```bash
./activate --code=YOUR_ACTIVATION_CODE
```

Replace `YOUR_ACTIVATION_CODE` with the code saved in Step 1. This generates new `cert.key` and `cert.pem` files in the `conf` folder.

{% hint style="info" %}
If you're behind a proxy, run `./activate --help` first to see the additional proxy parameters required. Unimarket will provide the new cert activation script from Workato unless you have set up a Workspace Collaborator with access to your Workato Test and Prod environments via the Unimarket team.
{% endhint %}

## Step 6: Restart the agent service

```bash
# Exit back to your admin user first
exit

# Restart the service
sudo systemctl restart workato-agent
```

## Step 7: Verify in Workato

1. Go back to the Workato UI and click **Test** on the new agent.
2. Confirm the agent shows as **Active**, then click **Done**.
3. Optionally, go to the old agent's **Version** column → **...** → **Delete agent** to clean it up.

{% hint style="info" %}
Unimarket will perform this task unless you have set up a Workspace Collaborator with access to your Workato Test and Prod environments via the Unimarket team.
{% endhint %}

## A few things to double-check on your specific install

* Confirm your actual install path with `find /opt /usr/local /home -name "activate" 2>/dev/null` if you're unsure.
* The new certificate is valid for **1 year** from the generation date.
* Unimarket has an OPA certificate monitoring job in Workato that triggers a support ticket to alert both the customer and Unimarket support 30 and 15 days prior to the certificate needing renewal.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.unimarket.com/documentation/unimarket-integration-middleware/workato-agent-cert-renew-linux.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.