Skip to main content

On-prem clients system requirements

This reference catalog outlines the hardware, software, and network architecture specifications required to deploy Celonis on-premise clients, including the Automation Agent and SAP Extractor. Correctly provisioning these local resources ensures secure, uninterrupted data pipelines between your local source architecture and the Celonis cloud environment, sustaining high-frequency data refreshes for downstream process analytics.

For system requirements for uplink-based SAP Extractor, see SAP extraction client for PI/PO and SAP 4.6C.

Hardware

Note

Configure server hardware based on your peak concurrent data extraction volume. For example, an Order-to-Cash implementation extracting 12 large transactional tables (~150 columns each) simultaneously requires the baseline specified below to prevent pipeline throttling and data latency.

Automation Agent

SAP Extractor

  • 4GB memory

  • CPU 2 cores

  • 10GB free disk space

  • Virtual machine or physical server

  • CPU: Min. Intel Xeon processor with 4 Cores

  • RAM: min. 16 GB

  • Disk space: min. 110 GB on the tmp directory

  • Location of the server needs to be in the same network as the source system(s) that should be connected

Software

Important

Any references to third-party products or services do not constitute Celonis Product Documentation nor do they create any contractual obligations. This material is for informational purposes only and is subject to change without notice.

Celonis does not warrant the availability, accuracy, reliability, completeness, or usefulness of any information regarding the subject of third-party services or systems.

  • On-prem clients run on the following 64-bit operating systems:

    • Windows 2022 Server or later

      Windows Server 2012, 2012 R2, 2016, and 2019 are architecturally compatible but are not formally validated or supported.

    • Linux

      • Distributions: Ubuntu 20.04 or later.

        Other major 64-bit distributions (including but not limited to RHEL 9+, CentOS 9+, and Debian 10+) are expected to function correctly but have not been formally tested and are not formally supported.

      • Interface: Fully supports both CLI and GUI environments.

  • Runtime dependencies:

    Note

    Most servers have these dependencies installed by default and don't require manual installation.

    • Windows: Microsoft Edge WebView2

      Microsoft Edge WebView2 is automatically downloaded and installed as part of the on-prem clients installation. However, if you're using a server that doesn't allow for automatic downloads, you must manually download and install Microsoft Edge WebView2.

    • Linux: libgtk-3 and libwebkit

      Note: This dependency is only required if UI is needed. There are no extra dependencies for the CLI tool.

    • MacOS: Xcode command line tools

    • GUI-less servers (using CLI tool): No dependencies

  • Java 25 or later; OpenJDK is also supported, and we recommend AdoptiumOpenJDK

  • For Windows, install the following redistributable package available from Microsoft Download Center:

    • Microsoft Visual C++ 2013 Redistributable Package (x64)

  • SAP Java Connector (SAP JCo) 3.1 or later - this library is necessary for establishing a connection between Celonis Platform and your SAP instance.

  • RFC module - this module is necessary for extracting data from the SAP database based on information received from the SAP extraction client. See Installing the RFC module.

    Note

    The on-prem client is compatible with RFC module version 3.6.0 or later.

Network connectivity and access for SAP Extractor

SAP Extractor Operational Connections

Table 1. SAP Extractor Operational Connections

Source system

Target system

Port

Protocol

Description

On-premise extractor server

SAP ECC system

33XX (where xx is the system number)

TCP

RFC connection from on-premise extractor server to the SAP system. The system number can be retrieved from the SAP basis team.

On-premise extractor server

Celonis cloud endpoint

443

TCP

HTTPS connection from on-premise extractor server to Celonis cloud endpoint. The IPs of the endpoint depend on the cloud realm (which can be seen in the URL) and they can be found the section below.



Cloud IP addresses depending on the realm

Allowlist the specific IP address of the Celonis cloud realm hosting your team to establish communication with the on-premise extractor.

Using proxies (optional)

See: Proxy settings for on-premise clients.

Ensuring certificate trust for OPC agents

Firewalls utilizing SSL interception cause connection failures because OPC agents cannot validate Celonis server certificates by default. This issue occurs when the firewall intercepts the SSL connection, establishes a new connection with the client, and presents a custom or self-signed internal Certificate Authority (CA) certificate.

To resolve validation failures, import MITM certificates into the Java keystore used by the OPC agent. This allows the agent to trust the intercepted SSL connection and successfully validate the Celonis server certificates.

For more information on adding your certificates to the OPC agent keystore, see "Unable to find valid certification path" errors.

Related topics