How to Discover Certificate using Import Certificate Discovery?
Solution:
There are two types of Import Certificate discovery.
1.Server Folder Certificate discovery, that is certificates are present in different Servers.
2.Local Folder Certificate discovery, that is certificates are present in the same server.
How to configure Server And Local Folder certificate discovery in the Import Certificate Pattern Parameter?
Server Folder Certificate discovery
Input Params for the Import Certificate Pattern:
Server: IP address (Exp: 10.0.0.0)
IP server path: Folder path from the server where the IP address mentioned in the server parameter.(Example: D:\ServiceNow\Cert\VendorCertificates)
Target Folder: MID server Folder path(Example: /opt/app/Cert/app/)
Local Folder Certificate discovery
Server: localhost
IP server path: Not Required
Target Folder: MID server Folder path(/opt/app/Cert/app/)
How to discover Root and Intermediate Certificate during import certificate discovery?
Solution:
Note: If a customer needs to discover certs chain(root and intermediate) then certs should be added in the folder as a .txt file.
Here is the cert chain order needs to be placed in the .txt file:
if cert length is 1, the certificate is self-signed that is Server Certificate
if cert length is 2, Server and Root
if cert length is 3+, Server, (Intermediate Certs...) and Root cert. That is first is Server Cert, Middle is intermediate cert and last is root cert
For further details, please check the below doc link.
https://docs.servicenow.com/bundle/paris-it-operations-management/page/product/discovery/concept/run-cert-discovery.html
