Skip to main content

Installing on-prem clients on Windows

Installing the On-Premise Client (OPC) on Windows establishes a secure, encrypted data pipeline between your local infrastructure and the Celonis Platform. This connection enables real-time data extraction and continuous process automation directly behind your corporate firewall, allowing Celonis to surface execution gaps from your on-premises ERP systems. Execute these steps to deploy the client package and establish your local data pipeline.

Ensure you have the following prerequisites before starting the installation:

  • An active SAP Service User (S-user) account with software download permissions (typically managed by your organization's SAP BASIS team).

  • The unique installation link provided in your Celonis Platform deployment invitation.

  • Make sure your system meets hardware and software requirements for clients. See System requirements.

  1. In your Celonis Platform instance, go to Admin & Settings > On-prem clients.

  2. In the upper-right corner, click Set up on-prem clients.

  3. Select Install the clients on a central server.

  4. Enter a unique installation package name.

  5. Select the operating system on which you want to install the clients.

  6. Enter your IT admin email address and click Send.

Your IT admin will receive a link where they can download the package prepared based on the settings you selected. They will also receive detailed instructions on how to install the package on the server. Once they completed the installation, you’ll receive a verification URL or code to verify the connection with the Celonis Platform. If you already received that, jump straight to Step 3: Verifying the installation.

  1. Click the download link in your Celonis invitation email to save the installation package to your local environment.

  2. Extract the ZIP package.

  3. Optional: Establish an SAP Connection.

    Download the SAP Java Connector (SAP JCo) library, version 3.1 or later, to your local directory. The Celonis Agent requires this library to execute Remote Function Calls (RFC) against your SAP instances.

    1. Download the respective package from the SAP Support Portal.

      The downloaded SAP Jco folder already contains two files: a Java part “sapjco3.jar”, and an operating system-specific part e.g. sapjco3.[.dll | .so | .sl ].

    2. Copy the content of the SAP Jco folder into the following Automation Agent and Extraction Agent folders:

      The Celonis Agent is configured to read the library from this directory.

      • For Automation Agent

        {installation_folder}/Automation Agent/libraries/external
      • For Extraction Agent

        {installation_folder}/Extraction Agent/libraries/external
  4. Install your clients using the installer or with the manual installation folder:

    Tip

    The installer supports a single client deployment per machine. To deploy multiple on-prem clients on a single host machine, use the manual installation directory path.

    • Using the installer

      1. Double-click Celonis_On_Prem_Clients_Installer.exe to run the installer.

      2. Complete the configuration prompts within the setup wizard to finalize the primary client deployment.

    • Using the manual installation folder

      1. Go to the Celonis On-prem Clients Manual Installation folder.

      2. Copy the Celonis On-prem Clients folder and paste it into your Program Files directory. Append a distinct business-process suffix to each folder name to isolate your data pipelines.

        For example, name your directories Celonis On-prem Clients AP for your Accounts Payable extraction pipeline and Celonis On-prem Clients O2C for your Order-to-Cash automation stream.

        Important

        When deploying multiple on-prem clients on a single host machine, ensure every target folder name retains the mandatory Celonis On-prem Clients prefix followed by your process-specific suffix to preserve management tool tracking integrity.

      3. Go to the Shared folder and open the On-prem Client Management Tool.

    Tip

    If you need to set up SNC for SAP, see Setting up the agents with SNC.

    The On-prem Client Management Tool opens automatically when the installation completes.

  5. In the Management Tool, select the clients you want to install.

  6. (optional) In the Management Tool, generate the encryption key to encrypt sensitive data in the installation package:

    1. Click Generate encryption key.

      Tip

      We use java.security and javax.crypto fameworks to store and encrypt sensitive data in the application.yml file.

    2. Define a passphrase which will be used to create the hash for the private encryption key.

    3. Click Save.

      This will automatically create the celonis-kms.yml file and encrypt all sensitive data like the application key and the proxy password.

  7. (optional) If necessary, define the proxy server between the on-prem client and the source system or between the on-prem client and the Celonis Platform:

    1. Click Use proxy for communication.

    2. Define the properties of your proxy connection:

      • protocol: HTTP or HTTPS

      • host: the IP address or hostname of the proxy server

      • port: the port at which the server can be reached

      • user (optional): the user name for basic authentication with the proxy

      • password (optional): password for basic authentication with the proxy

    3. Click Save.

      This will automatically ensure that your connection will use the proxy for communication.

  8. Click Connect to Celonis Platform to generate the Verification URL.

  9. Copy the Verification URL and share it with your Celonis Platform user.

  10. (Optional) Connect to SAP. This step is only required when automating in SAP.

If you’re a Celonis Platform user and you received a request to verify the on-prem client installation from your IT admin, follow these steps.

Important

To verify the on-prem clients' installation, you must be Celonis Platform admin or you must have "edit agent" permissions assigned to your role.

  1. Go to the Verification URL sent by the IT admin.

  2. Log in to Celonis Platform.

  3. Verify the request and click Authorize.

    On-prem clients can now connect to Celonis Platform and create their own OAuth client. Newly created clients will also now be visible in the On-prem clients overview page under Admin & Settings > On-prem clients.

    Note

    In July 2025, Celonis Platform replaced appkeys with OAuth 2.0 as a method of authentication for OPC. For details, see AUTOMATION OAuth for on-prem clients (2025-08-13).

    If you're having trouble connecting the on-prem clients to Celonis Platform, see Manual authentication.

Related topics