---
sourceDocument: Xanadu Platform security
sourceDocumentLink: https://www.servicenow.com/docs/r/xanadu/platform-security

 Release :

    - xanadu

ft:locale :

    - en-US

ft:publication_title :

    - Xanadu Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Uploading a certificate to an instance

# Uploading a certificate to an instance {#ariaid-title1}

* Release version: Xanadu
* 
* Updated August 1, 2024
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

Add a certificate to the instance from the Certificates module.

## Upload a certificate to an instance {#t_UploadACertificateToAnInstance__section_knj_m25_m1c}

<br />

## Before you begin

Role required: admin

## About this task

When a certificate is updated on the ADFS server, you must also upload an updated certificate to the instance.

## Procedure

1. Navigate to AllSystem DefinitionCertificates.
2. Select New.
3. On the form, fill in the fields.

   | Field | Description |
   | Name | Specify a unique name for the certificate. |
   | Expiration notification | \[Optional\] Select whether you want to send a notification when the certificate is about to expire. |
   | Active | Select whether the instance should use this certificate for secure communications and signing requests. |
   | Short Description | \[Optional\] Enter a text description of the certificate such as the requester or server name. |
   | Format | Select the certificate format. The instance supports the PEM and DER formats. |
   | Type | Select the certificate container. The instance recognizes certificates from trust stores, Java keystore, and PKCS#12 keystores. |
   | PEM Certificate | Enter the base-64 encoded PEM-formatted text containing the DER certificate. The instance decodes the certificate to populate the Valid from, Expires, Expires in days, Issuer, and Subject fields. |
   |-|-|

   {#t_UploadACertificateToAnInstance__choicetable_fmn_4q2_zx}
4. Select Submit.  
   During the upload, the module extracts and displays the certificate's read-only properties in these fields:
   * Valid from date
   * Expiration date
   * Issuer
   * Subject of the certificate
   {#t_UploadACertificateToAnInstance__ul_cbw_hkt_lq}
5. Select Validate Stores/Certificates to check if the certificate is correct.  
   If the instance encounters any errors with the certificate or keystore, it displays an error message.
* **[Uploading a trusted server certificate](https://www.servicenow.com/docs/X3ek0H3VxU3A7Lx8lvEs5A)**   
  By uploading the service provider's trusted server certificate, the instance ensures it is connecting to a valid and secure service.

**Related concepts**   

* [Exploring Certificates](https://www.servicenow.com/docs/xe3CYkps8qyDm6GUxxSy0A "Your instance requires certificates to establish secure connections and validate signatures.")  
**Related tasks**   

* [Generating an LDAP client certificate](https://www.servicenow.com/docs/hykR22FD8vAGD7bw9YsWdQ "Generate an LDAP client certificate for mutual authentication using OpenSSL. The final output is a PKCS#12 certificate stored within a Java keystore.")

*[\>]: and then