Certificates for MIDServer

[Nisha30]

Hello ITOM Experts,

We have MidServer up and running. Firewall ports are opened.

Need to clarify do we need to import certificates (SSL/ TLS) to communicate from Midserver to devices.

1. Can the certificates be uploaded in ServiceNow instance in certificate module instead of using keytool to import certs mentioned in document. SSL Certificate 

My confusion is do we need to do both ways or either way (uploading the certificates in servicenow) and then restart midserver works ?

Please assist.

Thanks

[VivekSattanatha · Accepted solution]

Among the devices you listed, vCenter is the only one that uses API-based discovery. If you encounter a certificate missing error, you can resolve it by either opening the vCenter URL from the MID Server’s browser and installing the certificate into Windows’ trusted root store, or by manually adding the certificate to the MID Server itself. You do not need to add this certificate to the ServiceNow instance.

[Nisha30]

Thanks @VivekSattanatha 

so to import the cert is keytool command mentioned in servicenow doc link mentioned in post to be done ? OR we can upload the PEM certificate in ServicenOw instance ?

which to be preferred?

Thanks

[VivekSattanatha]

We don't need to do upload any certificates to ServiceNow instance as the instance not making connection to the vCenter, the MID Server does. We need to import the certificate to the mid server only. 

[Nisha30]

Thanks @VivekSattanatha  for assisting.

I tried importing the cert in MidServer , the document says Keystore password . but 1)who will provide this password ? is it the team who provided the certs ? was trying to import the certs when it asked password.

2) I was going through Midserver installation document, while it has included Java installation , do we need to separately install Java /JRE ?

[VivekSattanatha]

Trust the vCenter certificate via the MID Server's web browser—it will automatically fetch and you can trust it through the browser prompt.
For API-based vCenter discovery, import certificates ONLY on the MID Server itself, NOT to the ServiceNow instance, as the instance doesn't directly connect to vCenter.