Certificate Management ADCS Integration -Access Denied during Get-WmiObject execution via MID Server

charushilam
Giga Contributor

Hi Team,

We are implementing ServiceNow Certificate Management with Microsoft ADCS integration.

When a certificate request is approved, the certificate task fails with the following error:

Access denied
 
Stack Trace:
at System.Management.ThreadDispatch.Start()
at System.Management.ManagementScope.Initialize()
at System.Management.ManagementObjectSearcher.Initialize()
at System.Management.ManagementObjectSearcher.Get()
at Microsoft.PowerShell. Commands.GetWmiObjectCommand.BeginProcessing()

Environment:

  • ServiceNow Certificate Management
  • MID Server
  • Microsoft ADCS CA Server

What we have checked:

  • Certificate request and task are created successfully.
  • ECC Queue records are in Ready/Processed state; no ECC errors found.
  • MID Server is Up and Validated.
  • Error occurs after task approval during PowerShell execution.
  • The stack trace indicates failure while executing a WMI query (Get-WmiObject).

Questions:

  1. What permissions are required for the service account on the CA server?
  2. Does the service account require Local Administrator, Remote WMI, DCOM, and WinRM permissions?
  3. Has anyone encountered a similar "Access Denied" error during ADCS integration?
  4. Are there specific WMI namespaces or CA server permissions that must be configured?

Any guidance or troubleshooting suggestions would be appreciated.


Thanks,
Charushila Mahajan
2 REPLIES 2

Ehab Pilloor
Giga Sage

Hi @charushilam,

 

Please check this community thread with same issue: https://www.servicenow.com/community/itom-forum/certificate-management-mid-server-error/td-p/3522523

 

Please Accept this response as Solution if it assisted you with your question & Mark this response as Helpful.

 

Kind Regards,

Ehab Pilloor