Hi Community,
I am trying to identify the best approach to retrieve information about Certificate Templates from a Microsoft Active Directory Certificate Services (AD CS) environment and bring those attributes into ServiceNow.
Specifically, I would like to collect the properties of Certificate Templates (such as template name, display name, intended purpose, validity period, enrollment settings, EKUs, security permissions, etc.) and populate them into a custom CMDB class for inventory and governance purposes.
The Certificate Templates are visible in the Certification Authority console under:
Certification Authority > Certificate Templates
(My environment is similar to the screenshot below.)
I am exploring different options and would like to know if anyone has implemented something similar.
Some of my questions are:
- Has anyone used Discovery, Service Graph Connectors, or a custom integration to retrieve Certificate Template information from Microsoft AD CS?
- Is there a supported method to query Certificate Templates through LDAP, PowerShell, Microsoft Graph, or another API?
- Would the Microsoft Active Directory V2 Spoke be capable of retrieving Certificate Template attributes, or would a custom PowerShell/MID Server solution be required?
- What would be the recommended approach to keep a custom CMDB class synchronized with Certificate Template data?
My goal is not to discover issued certificates, but rather to inventory and manage the Certificate Templates themselves as configuration items within ServiceNow.
Any guidance, best practices, or implementation examples would be greatly appreciated.
Thank you!
