---
sourceDocument: Zurich IT Operations Management
sourceDocumentLink: https://www.servicenow.com/docs/r/zurich/it-operations-management

 Release :

    - zurich

ft:locale :

    - en-US

ft:publication_title :

    - Zurich IT Operations Management

ft:clusterId :

    - itom

bundleId :

    - itom

workflow :

    - Technology


---

# Run certificate discovery via certificate file import

# Run certificate discovery via certificate file import {#ariaid-title1}

* Release version: Zurich
* 
* Updated September 17, 2025
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

In Certificate Inventory and Management, you can discover certificates by importing
certificate files into the system using pattern-based Discovery.

## Before you begin

Ensure that TLS_keepOriginalCertificate is set to False.

Ensure the certificate is in one of the following formats: .cert, .pem, .txt, .der.

Role required: discovery_admin or admin

## About this task

The import certificates are discovered using the Import SSL Certificate pattern, which relies on the following parameters:

* Server: The host name or IP address where the certificates are hosted. If importing from the MID Server, specify localhost and leave temp_certificate_folder empty.
* server_certificates_folder: The folder path on the server containing the certificates.
* TLS_keepOriginalCertificate parameter: Set to false to avoid potential out-of-memory issues due to increased payload size.
* temp_certificates_folder: Temporary folder on the MID Server where the files are copied.
{#run-cert-inventory-mgmt-import__ul_dv1_zng_j1c}

## Procedure

1. Create a Discovery schedule with the following fields.  
   For more information on setting up your Discovery schedules, see [Schedule a horizontal discovery](https://www.servicenow.com/docs/vg_tjjTTOcl2~Xl7Iri~Rw#t_CreateADiscoverySchedule "A discovery schedule determines what horizontal discovery searches for, when it runs, and which MID Servers are used. Create a discovery schedule for your local environment or a schedule for discovering the resources in your cloud service account.").
   1. Select Discovery: Import Certificates
   2. Select Certificate Discovery Type: Import Certificates.
   3. Select MID Server selection method: Specific MID Server.
   4. Select MID Server: Select the preferred MID Server.
   5. Add the credentials for the Windows or Linux host machine where the certificates are located.
   6. Fill out any other necessary fields.
   7. Select Save.
   {#run-cert-inventory-mgmt-import__substeps_f4w_gtt_kjb}
2. To add the Import SSL Certificate pattern, from the Serverless Execution pattern tab, select New.

## Result

When your Discovery schedule runs, it then automatically scans your files.