Security aspects
Access to the <ARIS Process Mining installation>/data directory should be restricted. This folder is used to temporarily save the extracted data in parquet files. These files are deleted when they are successfully uploaded to ARIS Process Mining or when the upload is canceled, that is, by errors or when user cancels the data extraction.
The first time when credentials are configured using the configureExtractor.bat command line tool a key.secret file is created in the <ARIS Process Mining installation>/conf directory. This file is used to encrypt and decrypt passwords in the configuration files. For this reason, this file should be backed up. If this file is lost, all credentials must be configured again using the configureExtractor.bat tool.
Any communication between the extractor and ARIS Process Mining Cloud is initiated by the extractor, that is, the communication is never started from outside of customers network.
Each communication between the extractor and ARIS Process Mining Cloud should be done via HTTPS.