Certificate Creation Flow in ServiceNow (IP-Based Discovery)

[sairamkoruk]

Certificate Creation Flow in ServiceNow (IP-Based Discovery)

1. Discovery Execution
   • Shazzam scans IPs and detects TLS ports
   • tls_ssl_certs probe performs SSL handshake and captures the certificate chain.
2. Payload Storage
   • Certificate data (XML payload) is stored in
     sn_disco_certmgmt_certificate_history.
3. Business Rule Trigger
   • Discovery - Certificate Captured” runs on After insert.
   • Fires event: sn_disco_certmgmt.certificate.captured.
4. Script Action Execution
   • Calls:
     1. PopulateCmdbCiCertificate → creates certificates
     2.  PopulateCmdbInstalledCertificate → maps certificates to CI & port
5. Certificate Processing (Script Include)
   • Parses XML payload
   • Uses fingerprint/serial for deduplication
   • Inserts/updates records in cmdb_ci_certificate via IRE
   • Populates fields like issuer, validity, SANs
6. Mapping & Relationships
   • sn_disco_certmgmt_cmdb_installed_certificate → Cert ↔ CI ↔ Port
   • cmdb_rel_ci → relationships created
7. Final Update
   • History table updated with certificate reference

Final Flow

Discovery → Payload → Business Rule → Event → Script Action → Script Include → CMDB (cmdb_ci_certificate).