---
title: "COP 8.7: Security enhancement for Monitor / SOP communication"
slug: "cop-security-enhancement-for-monitorsop-communication"
description: "Copy the JSON which includes Solve Keys from the SOP server to the COP Server and add them during the installation of the COP server or after the installation. "
updated: 2025-08-20T08:15:39Z
published: 2025-08-20T08:15:39Z
canonical: "support.controlup.com/cop-security-enhancement-for-monitorsop-communication"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://support.controlup.com/llms.txt
> Use this file to discover all available pages before exploring further.

# COP Security enhancement for Monitor/SOP communication

For ControlUp On-Premises (COP) version 8.7 and all higher versions, you must use a JSON Web Token (JWT) to connect any ControlUp Monitor to Solve On-Premises (SOP). The following article walks you through the steps required to implement this security feature.

- Several private keys are created when you create a new SOP appliance. Each SOP appliance generates dedicated unique keys that are only valid for the appliance they are generated on.
- The keys are stored in a file on the SOP server machine and must be imported to the COP server.
- The keys are used to create dedicated JWT tokens to apply when connecting to Solve.
- Without a valid import, you can't access Solve.

## How to import JWT to COP

### Step 1. Download the JWT from the SOP Server

<editor360-custom-block data-preprocessing="true" data-sanitizationtags="b"><p>Connect to the SOP server with the <strong>cuadmin</strong> user via SSH, switch to the <strong>root</strong> user with <code data-tomark-pass=""><b data-tomark-pass="">sudo -i</b></code>, and navigate to <code data-tomark-pass=""><b data-tomark-pass="">/opt/sib_volumes/sop-cert</b></code>.<br> You can copy the JSON file to the COP server using WinSCP or any other file transfer software.<br><img src="https://cdn.document360.io/098100b7-b9da-4bea-b4b9-017140ab863e/Images/Documentation/image-JRW0W0PO.png" alt="image.png"></p></editor360-custom-block>

Alternatively, if you have PuTTY installed on your computer, open the file with the following command and mark the content to automatically copy the content to your clipboard.

```bash
cat /opt/sib_volumes/sop-cert/sop_YYYMMDDhhmm.json
```

### Step 2. Apply the JWT keys on the ControlUp Server

Once you copied the JSON file to your COP server, open the COP server configuration by right-clicking ControlUp Server > **Change**. Select SOP server and browse the JSON file you copied from your SOP server. ![SOP configuration screen](https://cdn.document360.io/098100b7-b9da-4bea-b4b9-017140ab863e/Images/Documentation/image-YVV4OEBN.png)

The file will be validated, in case of any issue an explicit error will display. After importing the JSON file, you can use Solve On-Premises as usual.

## How Can I Generate a New JWT?

<editor360-custom-block data-preprocessing="true" data-sanitizationtags="strong"><p>On the SOP server, run the script <code data-tomark-pass=""><strong>/opt/scripts/sop-cert-generate.sh</strong></code><br><img src="https://cdn.document360.io/098100b7-b9da-4bea-b4b9-017140ab863e/Images/Documentation/image-KO1RP9QV.png" alt="image.png"></p></editor360-custom-block>

Copy the newly generated JWT to the COP server and import the json file, as explained above.

## Where Is The JWT Stored?

<editor360-custom-block data-preprocessing="true" data-sanitizationtags="strong"><p>The encrypted private key is stored on the COP server in the registry key <code data-tomark-pass=""><strong>HKLM\SOFTWARE\Smart-X\ControlUpServer\SOLVE</strong></code></p></editor360-custom-block>

![registry key HKLM\SOFTWARE\Smart-X\ControlUpServer\SOLVE](https://cdn.document360.io/098100b7-b9da-4bea-b4b9-017140ab863e/Images/Documentation/image-BKHHAR7N.png)

- ServerName
- Port
- JwtTokenKey
- JwtKeyString
- JwtIVString

The JWT keys will be stored after encryption with the SHA256 algorithm.