Using the Unique Certificate (cmdb_ci_certificate) CI Class manually?

[mikkojuola]

Hi all,

I hope this question is addressed to the right forum.

Many ServiceNow customers would like to manage their (TLS) Certificates in the CMDB. I noticed that the CMDB CI Class Models plugin now (since version 1.4.0) includes a CI class called "Unique Certificate" (cmdb_ci_certificate) with a description "a public key certificate in X.509 standard format".

What the release notes also say about this class is that: "The list view for that class does not have a New button and you can no longer add new records to the table".

So, the question is: can this OOB Unique Certificate CI Class be used for manually maintaining Certificates? Or should we create a custom CI class for this purpose and leave this one for the Discovery product?

Also, regardless of using this or a custom alternative, what is the recommended data model around these certificates? 

Cheers,
--Mikko

[Sree32]

ServiceNow released TLS certificate management application via store. This store application is part of ITOM Visibility capability which can discovery TLS certs and provide workflows to proactively manage the expiry using TASKs.

https://store.servicenow.com/sn_appstore_store.do#!/store/application/5644310553c63300704dddeeff7b12...

https://docs.servicenow.com/bundle/orlando-it-operations-management/page/product/discovery/concept/c...

https://community.servicenow.com/community?id=community_blog&sys_id=9733b4481b0acc10a59033f2cd4bcb05

[mikkojuola]

Thanks Sree,

My question was more about using this new Unique Certificate class manually, without the related applications (from ITOM suite). So, do you know if this is possible?

[Fred Jean]

Hello, I have the same question.  So there is this "Certificate Inventory and Management" application now, so does this mean we cannot use the Certificate CI class without an ITOM subscription ?

If so would it be OK create a custom Certificate class ? (without an ITOM subscription)

[Vladimir3]

Hi, I wonder what did you do at the end? I have the same need, to store certificate informaton in CMDB manually, and not using ITOM Visibility module. Preferably in OOTB class "Unique Certificate" (cmdb_ci_certificate)" but not mandatory, it can be also new custom created class.
So, could you share please in short what was your final solution? If you have created new class, where in the CMDB hierarchy did you put it?
Thanks a lot!