Welcome
Deploying and Administrating
All the information you need to deploy and administrate HCL Universal Orchestrator.
Managing multitenant security
Tenant security
The multitenant architecture uses strict isolation to protect tenant data, configurations, and user permissions.

What's new
HCL Universal Orchestrator is constantly evolving to offer you the most comprehensive orchestration capabilities. For known limitations, workarounds, and contact information of HCL Customer Support, see Release notes.
What is HCL Universal Orchestrator
HCL Universal Orchestrator is a cloud-native workload orchestration and scheduling platform built on Kubernetes. Its microservices-based architecture enables the centralized orchestration of multi-cloud and hybrid environments from a single point of control.
Deploying and Administrating
All the information you need to deploy and administrate HCL Universal Orchestrator.
- Deploying HCL Universal Orchestrator
  Deploying HCL Universal Orchestrator requires the deployment of all its microservices, the UI, the cloud agent, and optionally, the Orchestration CLI.
- Installing and connecting HCL Workload Automation dynamic agent at version 10.2.3
  You can install agents at HCL Workload Automation to be able to manage all task integrations.
- File integrity and safety with SHA checksum
  Validate the authenticity and integrity of files downloaded from the Download Center ¹ in the UI by verifying their SHA checksums. SHA checksum validation ensures file integrity by comparing the hash value generated for a file, against a unique, pre-generated checksum. Each file in the Download Center is accompanied by its own unique SHA checksum.
- Installing HCL UnO agent
  HCL UnO agent is a versatile on-premises agent that can run all types of tasks with efficiency and reliability. You can configure the properties of the agent to connect it to the agent manager of HCL Universal Orchestrator.
- Installing and authenticating the Orchestration CLI
  Install, authenticate and configure the Orchestration CLI.
- Managing HCL UnO agent in Windows operating systems
  You can manage the agent by using scripts that are generated while configuring the agent or by daemon script. It is recommended to use any method for ideal cohesion and efficient administration.
- Managing HCL UnO agent in Unix operating systems
  You can manage the agent by using scripts that are generated while configuring the agent or by daemon script. It is recommended to use any method for ideal cohesion and efficient administration.
- Managing the AI agent
- Managing Workload Security
  You can manage security settings in your environment from the Orchestration CLI and from the UI.
- Configuring a user registry
  In this topic you can find information about how to configure a user registry.
- Keeping track of changes in your environment
  Administrators can request to specify a justification when saving or editing items to keep track of the changes in your environment.
- Managing multitenant security
  - Tenant access management
    Tenant administrators manage user authentication, authorization, and domain restrictions within their dedicated tenant environment.
  - Access control lists
    Use the HCL Universal Orchestrator UI to grant permissions to users and groups by configuring access control lists (ACLs).
  - Tenant security
    The multitenant architecture uses strict isolation to protect tenant data, configurations, and user permissions.
  - Finding tenant details
    Locate specific details about your tenant environment to configure API clients, verify domains, or manage the tenant lifecycle.
- Policy-driven plan
  The new HCL Universal Orchestrator policy-driven adaptive plan makes your workload more autonomous, dynamic and scalable.
- Managing time zones
  In this topic you can find information about managing time zones.
- Observability
  Using third-party tools to monitor HCL Universal Orchestrator
Using the UI
The UI is the HCL Universal Orchestrator interface, from which you can design your scheduling environment and monitor every process.
Orchestrating
Orchestrate anything with HCL Universal Orchestrator.
Orchestrating from Mobile
You can use your mobile devices to manage quickly and easily your whole HCL Universal Orchestrator environment.
Monitoring
Take your environment under control.
Using REST API
Use REST APIs to easily integrate workload scheduling capabilities with external products and solutions.
Administering multitenancy for service providers
Configure and administer a HCL Universal Orchestrator multitenant environment.
Uno AI Pilot
Welcome to the HCL Universal Orchestrator AI Pilot documentation. This resource is designed to guide you through everything you need to know about using UnO AI Pilot effectively. You will find detailed instructions, feature overviews, and helpful tips to ensure you get the best experience with UnO AI Pilot.
UnO Agentic AI Builder
Troubleshooting
Recover your environment if any issue occurs.
Notices

Understanding tenant security

The multitenant architecture uses strict isolation to protect tenant data, configurations, and user permissions.

Your tenant's data, configurations, and user permissions are private and protected from access by any other tenant on the platform.

Data isolation

Your tenant data is stored in a dedicated database that is logically and cryptographically isolated from all other tenants. This isolation is achieved through two primary mechanisms:

Database per tenant: Each tenant is allocated its own database. This ensures a foundational level of data separation at the storage layer.
Unique encryption keys: The data at rest in your dedicated database is encrypted with a unique encryption key. This cryptographic control prevents any other tenant, or the platform administrators, from reading your data directly.

Authorization and access control

All security configurations and items are scoped exclusively to your tenant. Permissions defined within the context of a single tenant do not extend to any other.

The following security items are specific to your tenant:

Roles
Access Control Lists (ACLs)
Permissions
API keys

For example, an API key generated in your tenant can only be used to access your tenant resources.

Security of shared services

Some backend services, such as the messaging system (Kafka), are shared across the platform for operational efficiency. Data from your tenant is protected in these shared services by a dual-layer security model:

Logical separation: A unique tenant ID is attached to every message to ensure it is processed only within the context of your tenant.
Cryptographic separation: Messages are encrypted with a key specific to your tenant. If a message is routed to the wrong tenant, that tenant cannot decrypt or read the message content.