Join the #BuildWithBuildAgent Challenge! Get recognized, earn exclusive swag, and inspire the ServiceNow Community with what you can build using Build Agent.  Join the Challenge.

Cannot upload .pem to certificate based authentication

alamb
Tera Contributor

with Mutual authentication plugin added, I have been trying to upload CA Certificate Chain to enable Mid server Mutual Authentication. (Enable MID Server mutual authentication | ServiceNow Docs)

I receive the certificate files in .p12 format from the identity provider for midserver.app1938.com I have then tried to use openssl to convert the .p12 to .pem file (multiple times in multiple ways) when I upload the attachment .pem file, and validate I get the following errors:
(error)Unable to upload the certificate.Please check system logs for more information.
(error)invalid insert
(notification) Valid trust_store_ca

when I look at the system logs, I find the following:
WARNING *** Empty tomcat truststore
WARNING *** MutualAUth: certificate chain is not end with a CA cert.
ERROR *** AuthorityInfoAccess cannot be found
Failed to find matching sys_user_certificate with fingerprint: 09234083409283092038502935209384028304
Certificate Store certifiate of type pkcs12)key_store is NOT supported in cache!
loading trust store certificate (My root CA)

Is there something extra that I need to do for the server to accept the cert? I am really lost as to what the issue could be.

 

Thanks in advance

Andrew

1 ACCEPTED SOLUTION

ServiceNow Tec2
Mega Sage
This has been resolved by ServiceNow Technical Support. Please refer to KB0743854 (HI login required) for more information.

View solution in original post

3 REPLIES 3

ServiceNow Tec2
Mega Sage
This has been resolved by ServiceNow Technical Support. Please refer to KB0743854 (HI login required) for more information.

I can't see any relation to the question in the KB you provided.

 

J.Moral

There is nothing in that KB that has anything to do with MTLS or even certificates.