Pega Robotics provides the Credential Store component to securely store credentials on the machine. It uses DPAPI encryption in addition to an additional layer. Just remember when you call GetCredentials, to right-click on the blue lines coming out and mark them as Sensitive so the contents do not get added to the RuntimeLog when enabled. That would essentially be storing them in the clear. You can also use the ASO component which has the same security. It won't log anything, however it does have the possibility of showing a UI where a user would need to intervene if the credentials were bad. For RPA projects, this is not a great idea since there really isn't a user present.

For logging in to a machine automatically there really isn't another way than to use the registry option you mentioned.  Using VMs allows you to lock the host machine so that only those with access to the host can access the VMs.  That is the line of defense that is normally employed.

Thanks Jeff /Sasnt;  locking the vm is real challenge, my it/infosec thinks he's found a way via controling access to the vm via A/D Groups..  hopefully this will fly with the rest of his team..

rob