CIM Manual Renewal Task - How is a new Unique Certificate created after task completion?

Dinh Nguyen
Kilo Sage

‎09-24-2026 02:58 AM

Hi everyone,

I am investigating the renewal process in Certificate Inventory and Management (CIM) and would like to better understand the behavior of the Manual Renewal Task
Based on my investigation:
  • For the Auto Renew Task (sn_disco_certmgmt_renew_task), after the renewal request is successfully processed, a new record is created in Unique Certificates (cmdb_ci_certificate)
  • The Auto Renew Task is then automatically updated to the Complete state
However, I am unclear about the behavior of the Manual Renewal Task (sn_disco_certmgmt_certificate_task):
  1. After a Manual Renewal Task is created, what process is responsible for creating the new Unique Certificate (cmdb_ci_certificate) record? Which OOTB component (Flow, Workflow, Business Rule, Scheduled Job, Discovery, etc.) is responsible for creating the new certificate record and completing the task?
  2. What actions are expected from the end user when working on a Manual Renewal Task?
I reviewed the documentation for the Manual Renewal Flow and understand that renewal tasks can be automatically generated for expiring certificates, but I could not find documentation explaining how the replacement certificate is created and how the Manual Renewal Task lifecycle is completed afterward.
Please someone help me!
Thankyou so much
0 Helpfuls
  • 717 Views
2 REPLIES 2

abbasshaik4
Tera Sage

‎09-24-2026 11:23 PM

Hello @Dinh Nguyen,

 

Please refer to the link's below:
https://www.servicenow.com/docs/r/it-operations-management/discovery/renew-cert-automated-flow.htmlhttps://www.servicenow.com/docs/r/it-operations-management/discovery/manual-cert-requests.html

 

If it is helpful, please mark it as helpful and accept the correct solution by referring to this solution in the future it will be helpful to them.

 

Thanks & Regards,

Abbas Shaik

0 Helpfuls

sagieratzon
Tera Contributor

3 weeks ago - last edited 3 weeks ago

Hi  @Dinh Nguyen ,

 

In the manual flow, ServiceNow doesn’t issue or create the renewed certificate. The task only tracks work done outside the platform.

1. What creates the new Unique Certificate?
Discovery, not the task. cmdb_ci_certificate is keyed by fingerprint, so the renewed certificate becomes a new record the next time it’s discovered: TLS/IP scan, URL discovery, CA-based discovery, or bulk upload. The auto renew task is different because the platform requests and retrieves the certificate from a supported CA itself.

2. What the user does:

  1. Renew the certificate with the CA outside ServiceNow.
  2. Install it on all endpoints listed in the Installed Certificates related list.
  3. Make sure discovery picks up the new certificate.
  4. Mark the old certificate as Retired.
  5. Close the task.

 

Ref: Manual flow for certificate requests

If this helps, please mark it as helpful or accept it as the solution.

0 Helpfuls