Robot admin guide

Last updated Feb 9, 2026

Implementing authentication with credential providers

Starting with v2020.10 UiPath integrates nShield Key Storage Provider, making it possible for Unattended Robots to log into Windows by using the nShield Key Storage Provider. nShield is a key storage which provider which allows enterprises, and not only, to provide an extra layer of security when logging into Windows by using the keys stored in the HSM.

Activating this type of login requires a few configuration steps in Orchestrator and on the machine on which the Unattended Robots connect to.

Orchestrator Configuration

Create an Unattended Robot as described in the Managing Users document with the user specifications for which you want to activate nShield login.
1. From the Credential Type drop-down, select nShield Key Storage Provider.
2. Provide the PIN required to access the HSM in the Password field.
Create a Machine in Orchestrator. Please note that the machine on which the Unattended Robot runs needs to have access to the HSM, which means they should be in the same network.

As of v2020.4.1, UiPath integrates Thales (previously SafeNet) Luna HSMs, making it possible for Unattended Robots to log into Windows by using the HSM (Hardware Security Module). Thales HSM is a hardware cryptographic key storage that allows enterprises, and not only, to provide an extra layer of security when logging into Windows by using the keys stored in the corresponding HSM.

Activating this type of login requires a few configuration steps in Orchestrator and on the machine on which the Unattended Robots connect to.

Orchestrator Configuration

Create an Unattended Robot as described in the Managing Users document with the user specifications for which you want to activate Thales login.
1. From the Credential Type drop-down, select Luna Credential System.
2. Provide the PIN required to access the HSM in the Password field.
Create a Machine in Orchestrator. Please note that the machine on which the Unattended Robot runs needs to have access to the HSM, which means they should be in the same network.