ITOM Import Certificate - Discovery

[Nisha30]

Hello Experts,

Can anyone please suggest what is the pre-requisites for certificate discovery via 'Import Certificate'

We are discovering certificates via horizontal but there are certain certs which needs to be sorted out hence, 

Customer is suggesting that they keep all certificates in a local store in a Server.

I have created The schedule for " Import Certificate" BUT not aware 

1. where should our team should keep the certificates in a local server ? Any specific Path the certs to be kept?

2. Any specific extensions for those files mandatory?

3. Do we need to create the schedule under scope= Certificate Inventory Management ??

Discovery Pattern-Import certificate  - is ACTIVE in our instance.

Please if anyone knows 

Thanks

[Nisha30]

HI @BharatC 

so is there any step by guide or any document which shows how to do that.

tried looking in multiple threads as well hoe to set it up but not useful.

Any such images or link or document where it shows exactly how to set up as such please.

Thanks

[Nisha30]

Tried this pattern and now need to give values to it. 

1. server_certificates_folder   - This i guess is the path where all certificates are kept in a server

2. server - IP address of that server machine

What other two parameters for?? what do we need to fill here?

Thanks

[Teja R · Accepted solution]

Hi @Nisha30 ,
temp_certificates_folder : this is the temporary folder we need to create inside "C:\MIDServerInstall\agent" create the "temp" folder in the given path.And add the complete path there like "C:\MIDServerInstall\agent\temp".
This will copy the certificate to this folder.And that path is used in the pattern.If it is remote.

TLS Keep Original Certificate is the true/false.
Setting "TLS Keep Original Certificate" to False allows your server to dynamically update, replace, or present a new, valid certificate during the TLS handshake.

As shown Below:

If my response helped, mark it as helpful and accept the solution.
Regards,
Teja.

[Nisha30]

@Teja R Thankyou all for guidance.

Just one last question.

Self -signed certificate -  which method fulfil the same out of all.

Thanks