Certificate and Inventory mgmt question

[Hanumant Madan1]

Hello All,

I am going to enable the Certificate Management plugin in ServiceNow prod soon.

We did the same on Test environment and saw that post discovery of the certificates, ServiceNow has created many P1 Tasks which I belive is part of the Plugin config, I mean may be some BR or scheduled job that runs and creates Tasks for expired certificates.

We do not want this P1 Tasks to be created on Production when we enable Plugin.

Any idea what is the exact config which can be disabled in order to avoid these P1 Tasks from creating?

Appreciate advise!

Regards,

HM

[Rishi20 · Accepted solution]

This questions has already been answered in the community. Checkout the thread Deactivate Incident Creation for Certificate Management.

[Hanumant Madan1]

Thank you Rishi for the propt Answer. This was helpful.

Can you confirm if this is the same property which is responsible for createing "Open Renewal Tasks" and creates Tasks/INC.

Regards,

HM

[Rishi20]

No, there is a separate property to enable/disable renewal task creation. See Discovery properties docs for reference. Before you disable these properties think about how you or the team responsible for maintaining certificates knows what's expiring and when to initiate the renewal process.

You can set the below properties through Discovery Properties at https://yourinstance.service-now.com/nav_to.do?uri=%2Fsystem_properties_ui.do%3Fsysparm_title%3DDiscovery%2520Properties%26sysparm_category%3DDiscovery

To disable INC creation for expired certificates set value to false or uncheck Yes | No
glide.discovery.certs.enable_incident_creation_for_expired_certificates (Default value: true)

To disable renewal task creation for expiring certificates set value to false or uncheck Yes | No
glide.discovery.certs.enable_renewal_task_creation_for_discovered_certificates (Default value: true)

If you decide to keep the renewal task creation enabled, also look into "Certificate Management: Number of days before which renewal task should be created for expiring certificates."
glide.discovery.certs.days_before_expiration_to_create_renewal_task (Default value: 60)

[Hanumant Madan1]

Hi Rishi,

We need to disable INC creation and enable Task creation.

We see below challenges:

1 > There is no owned by, Assigned To, supported by group fields are empty and there's no values currently to any of the discovered certificate, how can we make sure to have these values populated here

2> Once the owned by, supported by groups, Assigned To fields has values, to which of the above the Task will be assigned when task will be created automatically for expiring certificate.

3> we do not want certificates for all the device types like printers we do not want, how can we filter these types of certifcate discovery?

4> there are two tasks flows (certificate tasks(Manual flows) and certificate tasks(Automated flows), what  is the purpose of both and which one is recommended

Look forward for your support.

Regards,

HM