---
sourceDocument: Yokohama Data and Automation
sourceDocumentLink: https://www.servicenow.com/docs/r/yokohama/integrate-applications

 Release :

    - yokohama

ft:locale :

    - en-US

ft:publication_title :

    - Yokohama Data and Automation

ft:clusterId :

    - crint

bundleId :

    - crint

workflow :

    - Creator


---

# Set up Visa Spoke

# Set up Visa Spoke {#ariaid-title1}

Release version: Yokohama  
Updated January 30, 2025  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 4 minutes to read  
Integrate the ServiceNow instance and Visa Spoke using basic authentication to authenticate ServiceNow requests.

## Before you begin

* Request an Integration Hub subscription.
* Activate the Visa Spoke.
* Role required: admin.
{#set-up-visa-spoke__ul_agy_qxd_rlb}

## Upload client certificate to your instance {#ariaid-title2}

Upload the client certificate to your ServiceNow instance to enable the creation of connections and credentials.

### Before you begin

Role required: admin.

### Procedure

1. Navigate to AllSystem LDAPCertificates.
2. Click New.
3. Complete the form.  
   {#upload-client-certificate-to-your-instance__table_hvh_4tt_xgb__entry__2}

   | Field | Description |
   |-|-|
   | Name | Enter a name to uniquely identify the record. For example, <kbd class="ph userinput">Visa Client Certificate</kbd>. |
   | Type | Select PKCS12 Key Store. |
   | Notify on expiration | Define users to be notified when the certificate expires. |
   | Warn in days to expire | Enter the number of days to send a notification before the certificate expires. |
   | Active | Enable |
   | Expires in days | Enter the number of days until the certificate expires. |
   | Key store password | Enter a password associated with the certificate. |
   | Short description | Enter a summary about the certificate. |
   [Table 1. X.509 Certificate form fields]

   {#upload-client-certificate-to-your-instance__table_hvh_4tt_xgb}
4. Click the attachments icon and attach a client certificate(.p12) file.
5. Click Validate Stores/Certificates to check if the certificate is correct.  
   If the instance encounters any errors with the certificate or keystore, it displays an error message.
{#upload-client-certificate-to-your-instance__steps_emj_c1w_yzb}

## Upload a trusted server certificate {#ariaid-title3}

Generate a certificate for the Visa Resolve Online (VROL) endpoint and upload it to your ServiceNow instance as a TrustCertificate. By uploading the trusted server certificate, you ensure that your instance is connecting to a valid and secure service.

### Before you begin

Role required: admin

### About this task

The instance validates outbound Web Service calls by using the certificate provided by the service provider.

### Procedure

1. Create a new Certificate record with the format PEM and type Trust Store Cert.
2. Do one of the following actions:
   * Attach the service provider's DER formatted certificate.

   {#upload-a-trusted-server-certificate__choices_lf1_t4t_lq}
   <!-- -->

   * Copy and paste the service provider's PEM format certificate into the PEM Certificate field.
   {#upload-a-trusted-server-certificate__choices_xpc_v4t_lq}
{#upload-a-trusted-server-certificate__steps_vqd_wfw_yzb}

## Create a protocol profile {#ariaid-title4}

You can create a custom HTTPS protocol profile to specify the credentials and certificates used for outbound web services. For example, you can create a custom HTTPS protocol profile to enable mutual
authentication.

### Before you begin

* Role required: admin
* [Upload client certificate to your instance](https://www.servicenow.com/docs/mlwTpJzjQV7HEVmBULZmtA#upload-client-certificate-to-your-instance "Upload the client certificate to your ServiceNow instance to enable the creation of connections and credentials.") to authenticate the client certificate of the instance.
* [Upload a trusted server certificate](https://www.servicenow.com/docs/mlwTpJzjQV7HEVmBULZmtA#upload-a-trusted-server-certificate "Generate a certificate for the Visa Resolve Online (VROL) endpoint and upload it to your ServiceNow instance as a TrustCertificate. By uploading the trusted server certificate, you ensure that your instance is connecting to a valid and secure service.") to authenticate the server certificate of the web service provider.
{#create-a-protocol-profile__ul_ift_ck1_3jb}

### Procedure

1. Navigate to AllSystem SecurityProtocol Profiles.
2. Click New.
3. Fill in the fields on the form, as appropriate.  
   {#create-a-protocol-profile__table_jxy_gsm_yq__entry__2}

   | Field | Description |
   |-|-|
   | Protocol | Enter a unique name to identify this HTTPS protocol, such as <kbd class="ph userinput">visahttps</kbd>. The protocol name allows you to differentiate between normal HTTPS connections and HTTPS connections that use this protocol profile. The name you enter becomes the protocol name in the URL. For example, visahttps://endpoint.service.com Note: You cannot create a custom protocol whose name matches as an existing protocol name such as HTTPS. |
   | Keystore | Select the Keystore certificate that you had created when uploading a client certificate. For example <kbd class="ph userinput">Visa Client Certificate</kbd> |
   | Default port | Enter the port number for connections that use this protocol. |
   [Table 2. Name of form]

   {#create-a-protocol-profile__table_jxy_gsm_yq}
{#create-a-protocol-profile__steps_ncc_dmw_yzb}

## Create basic auth server credentials {#ariaid-title5}

Create credentials to access a ServiceNow instance for both VROL and VSPS spoke actions.

### Before you begin

Role required: admin

### Procedure

1. Navigate to AllConnections \& CredentialsCredentials.
2. Select New.
3. Select Basic Auth Credential.
4. On the form, fill in the fields.  
   {#create-basic-auth-server-credentials__table_j35_mmp_ydb__entry__2}

   | Field | Description |
   |-|-|
   | Name | Enter a unique and descriptive name for this credential. |
   | User name | Name to identify the user. |
   | Password | Password to use this credential. |
   | Active | Option to enable the use of this credential. |
   | Order | The order (sequence) in which the platform tries this credential while it attempts to log in to devices. The smaller the number, the higher in the list this credential appears. Establish credential order when using large numbers of credentials or when security locks out users after three failed login attempts. If all the credentials have the same order number (or none), the instance tries the credentials in a random order. Default value: <kbd class="ph userinput">100</kbd> |
   [Table 3. Basic Auth Credentials form]

   {#create-basic-auth-server-credentials__table_j35_mmp_ydb}
5. Select Submit.
{#create-basic-auth-server-credentials__steps_ihg_hpx_yzb}

## Create a Connection \& Credential alias for Visa {#ariaid-title6}

Create a custom credential record for the Visa Spoke account. The Visa Spoke connection and credential alias uses these credentials to authorize actions.

### Before you begin

Role required: admin.

### Procedure

1. Navigate to AllCredentials \& ConnectionsConnections, click New, and select HTTP(s) Connection.
2. Add the following connection information and click Submit:  
   {#create-a-connection-credential-alias-for-visa__table_cpw_z5c_zpb__entry__2}

   | Field | Description |
   |-|-|
   | Name | Unique name of this HTTP(s) connection. |
   | Credential | Select the credential record used to authorize the connection. |
   | Connection Alias | Select the alias record to associate with this connection. Using an alias enables you to update the connection record without having to reconfigure any actions or activities that use the alias. |
   | URL builder | Either manually enter the connection URL or use system to build the URL based on the inputs. Default is unchecked. If checked, the connection URL is calculated from the following fields: * Mutual authentication --- Check box if mutual authentication is used. * Protocol profile --- Select the protocol created. For example, <kbd class="ph userinput">visahttps</kbd>. * Host - Enter the Visa Endpoint. For example, <kbd class="ph userinput">xxx.visa.com</kbd> * Base path --- Path of the connection string. {#create-a-connection-credential-alias-for-visa__ul_fwz_2vc_zpb} Note: If mutual authentication is checked, connection URL is built: Protocol + :// + host:port +URL. If mutual authentication is unchecked, connection URL is built: Protocol profile + :// + host:port +URL |
   | Connection URL | If URL builder is unchecked, enter the connection URL into this field. Note: If mutual authentication is checked, connection URL is built: Protocol + :// + host:port +URL. If mutual authentication is unchecked, connection URL is built: Protocol profile + :// + host:port +URL |
   | Active | Check the box to make this connection active. |
   | Domain | Determine the domain the action or activity runs in. |
   [ ]

   {#create-a-connection-credential-alias-for-visa__table_cpw_z5c_zpb}
3. Click Submit.  
   You are ready to create a custom HTTP(s) action or activity.
{#create-a-connection-credential-alias-for-visa__steps_sj2_jzx_yzb}

*[\>]: and then