Creating a Certificate Signing Request (CSR) to integrate with another application

derekifdsgroup
Giga Contributor

My understanding is when creating a CSR, it will have to be created on the server that the certificate will be used on.
I looked at ServiceNow's documentation on creating a CSR and it says to do so in a command line interface.
I'm unable to find the command line interface on my ServiceNow instance.

Where on my ServiceNow instance can I create the CSR? Or can the CSR be created on my local machine?

1 ACCEPTED SOLUTION

derekifdsgroup
Giga Contributor

I have spoken to a representative on the HI Portal.


The keystore should be generated on your local, along with the CSR.


Once the certificate is received and imported into the keystore, the keystore can then be uploaded into your ServiceNow instance with the option Certificates on the side menu. The type of record to be created would be Java Key Store, if you used the keytool that the ServiceNow document site mentioned.



Edit: After being provided the certificate, It also has to be uploaded as a trusted certificate on ServiceNow to be used as a mutual authentication.


View solution in original post

7 REPLIES 7

Dave Smith1
ServiceNow Employee
ServiceNow Employee

I looked at ServiceNow's documentation on creating a CSR and it says to do so in a command line interface.
I'm unable to find the command line interface on my ServiceNow instance.


Got a link to this doc?


Okay, that looks like using a java tool called "keytool" - and it seems to be performing similar actions to Linux's "ssh-keygen" command.



Do you have access to a Linux admin there? They could generate the same pair and cert from their command line.



Do you have the CA cert also? Or are you making a self-signed one?


Does ServiceNow provide its clients Linux admin to their instances? I couldn't find anything regarding access to ServiceNow's Linux or any kind of command line system. I believe we don't have access to this... That is why I'm not sure if the CRT has to be requested through the HI portal or I'm able to generate it myself on my local and upload it to my ServiceNow instance.



I do not have the CA cert. Is that not provided after submitting the CRT to the server that I want my ServiceNow instance to connect to?