Email from ServiceNow - 'SSL certificate notification: Be informed'

Suggy
Giga Sage

Hi geeks,

Most of you would have seen this email from ServiceNow with the subject "SSL certificate notification: Be informed"

Anyhow pasting the content of the email below.

SSL certificate notification
Be informed • No downtime • March 2024

We like to keep things secure. So, twice a year we update the SSL certificate supporting your ServiceNow instances in our data centers. The last update was performed in September 2023.

Here's what you can expect

  • This is a change to the *.service-now.com SSL certificate only. It will not affect the Entrust Root Certificate Authority, which does not expire until 2030.
  • If your organization does not hard-code SSL certificates, this update will not affect your ability to connect to your instance, and no action is needed from you.
  • If you have hard-coded our leaf certificate into your infrastructure, you will need to manually update the certificate. Here are some common cases where hard-coded SSL certificates may be found:
    • You use a proxy server to access your ServiceNow instance. The proxy may have the current SSL leaf certificate hard-coded into the proxy software.
    • You have inbound integrations that connect to your ServiceNow instance. Some examples of these can be found here: ServiceNow Product Documentation: List of Available Integrations
 

 

My Question is - I just want to know which kind of inbound integrations are those where one would hardcode the TLS/leaf certificate?  Why would one do it, whats the purpose of it? Is it alternate to credentials? Do people still use it today? 

2 REPLIES 2

Sohail Khilji
Kilo Patron
Kilo Patron

Hi @Suggy ,

 

a leaf cert is nothing but a domain cert here ex. servicenow.com certification. To find which of your integrations are using certificaite you can go to X509 module in servicenow search navigator and see how many certificates are configured in prod for integartion, Usually the cert are named after the integrations example. Azure Cert, AD cert etc...

 

I hope this helps..

 


☑️ Please mark responses as HELPFUL or ACCEPT SOLUTION to assist future users in finding the right solution....

LinkedIn - Lets Connect

Hi Sohail, Your response did not anwer my question. I have updated my question with more clarity.