Certificate Management ADCS Integration -Access Denied during Get-WmiObject execution via MID Server

charushilam
Giga Contributor

3 weeks ago

Hi Team,

We are implementing ServiceNow Certificate Management with Microsoft ADCS integration.

When a certificate request is approved, the certificate task fails with the following error:

Access denied
 
Stack Trace:
at System.Management.ThreadDispatch.Start()
at System.Management.ManagementScope.Initialize()
at System.Management.ManagementObjectSearcher.Initialize()
at System.Management.ManagementObjectSearcher.Get()
at Microsoft.PowerShell. Commands.GetWmiObjectCommand.BeginProcessing()

Environment:

  • ServiceNow Certificate Management
  • MID Server
  • Microsoft ADCS CA Server

What we have checked:

  • Certificate request and task are created successfully.
  • ECC Queue records are in Ready/Processed state; no ECC errors found.
  • MID Server is Up and Validated.
  • Error occurs after task approval during PowerShell execution.
  • The stack trace indicates failure while executing a WMI query (Get-WmiObject).

Questions:

  1. What permissions are required for the service account on the CA server?
  2. Does the service account require Local Administrator, Remote WMI, DCOM, and WinRM permissions?
  3. Has anyone encountered a similar "Access Denied" error during ADCS integration?
  4. Are there specific WMI namespaces or CA server permissions that must be configured?

Any guidance or troubleshooting suggestions would be appreciated.


Thanks,
Charushila Mahajan
0 Helpfuls
  • 349 Views
2 REPLIES 2

Tanushree Maiti
Tera Patron

3 weeks ago

Hi @charushilam 

 

Check if these KB helps:

KB0829224 Microsoft AD spoke – Permissions required to execute actions 

KB0830548 Microsoft AD Spoke – Common Issues & their workarounds 

KB0744261 Troubleshooting MID server SSL issues 

KB0726923 Orchestration Query AD Error - Unable to find any validated MID Server based on status (de... 

 

 

 

Please Accept the solution if it assisted you with your question & Mark this response as Helpful.
Regards
Tanushree Maiti
ServiceNow Technical Architect
LinkedIn: https://www.linkedin.com/in/tanushreemaiti
0 Helpfuls

Ehab Pilloor
Giga Sage

3 weeks ago

Hi @charushilam,

 

Please check this community thread with same issue: https://www.servicenow.com/community/itom-forum/certificate-management-mid-server-error/td-p/3522523

 

Please Accept this response as Solution if it assisted you with your question & Mark this response as Helpful.

 

Kind Regards,

Ehab Pilloor

0 Helpfuls