Hello experts,
We are a facing a challenge regarding the management of custom plugin certificates for ACC
Starting with ACC agent version 3.0.1, ServiceNow requires that all custom plugin certificates be signed and added into the Trusted Root Certification Authorities on every Windows OS machine where ACC is installed.
This is mandatory for the custom plugins to function properly.
Our current challenge is as follows:
- The custom certificate in use is approaching expiration and must be renewed.
- We have over 9,000 agents deployed across our environment.
- It is not feasible to manually re‑install or re‑sign the certificate on each machine individually due to scale and operational impact.
I would like to check with the community if:
- Anyone faced the same challenge, how it was resolved?
- The recommended process for updating and re‑signing custom plugin certificates in compliance with the new requirement?
- Whether ServiceNow provides automation tools, scripts, or centralized methods to push updated certificates to all ACC agents?
Thanks,
Ivelin.
