---
sourceDocument: Australia IT Operations Management
sourceDocumentLink: https://www.servicenow.com/docs/r/australia/it-operations-management

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia IT Operations Management

ft:clusterId :

    - itom

bundleId :

    - itom

workflow :

    - Technology


---

# Set up the MID Web Server

# Set up the MID Web Server with a .pem file {#ariaid-title1}

Release version: Australia  
Updated March 12, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Install the .pem file into the MID unified keystore and set up the MID Web Server to enable configuring mTLS on your MID Web Server and agent.

## Before you begin

Copy the labmid/mid.pem file (created in the [Create keys and certificates](https://www.servicenow.com/docs/53EfcgTNuzxgoALSdxDyhg "Create keys and certificates in your root directory to enable Transport Layer Security (TLS) setup. TLS setup is required before you can configure mTLS on the MID Web Server and agent.") procedure) to your MID Web Server host directory.  
Note:  
This procedure includes commands for both CentOS 7/Linux and Windows Server environments. Select the commands relevant for your host operating system. If working with another Linux distribution, adapt the commands as needed for your specific OS.

Role required: agent_client_collector_admin

## Procedure

1. In a Linux environment:
   1. Access the agent subdirectory under the MID Server's host directory.
   2. Import the .pem file into the MID unified keystore.  

          bin/scripts/manage-certificates.sh -a midwss /<path>/mid.pem;
          bin/scripts/manage-certificates.sh -l;

      Replace `<path>` with the directory where you copied the mid.pem file.

      The relevant part of the output is: `"defaultsecuritypairhandle,midwss"`
   3. Validate your MID Server on the instance.
   4. Select the MID Server on the instance and select Setup ACC listener.  
      A new MID Web Server is created.
   5. Navigate to the newly created MID Web Server record (ecc_agent_ext_context_webserver) on the instance.
   6. Select the MID Web Server and set the Keystore certificate alias value to `midwss`.
   7. Select Save.
   8. Restart the MID Web Server.
   {#set-mid-web-server__substeps_linux_all}
2. In a Windows environment:
   1. Access the agent subdirectory under the MID Server's host directory.
   2. Import the .pem file into the MID unified keystore.  

          bin\scripts\manage-certificates.bat -a midwss <path>\mid.pem
          bin\scripts\manage-certificates.bat -l

      Replace `<path>` with the directory where you copied the mid.pem file.

      The relevant part of the output is: `"defaultsecuritypairhandle,midwss"`
   3. Validate your MID Server on the instance.
   4. Select the MID Server on the instance and select Setup ACC listener.  
      A new MID Web Server is created.
   5. Navigate to the newly created MID Web Server record (ecc_agent_ext_context_webserver) on the instance.
   6. Select the MID Web Server and set the Keystore certificate alias value to `midwss`.
   7. Select Save.
   8. Restart the MID Web Server's Windows service using one of the following methods:  
      * Use the Services app on the Windows host.
      * Use the command line with the MID Server's configured service name:

            net stop AgentClientCollector
            net start AgentClientCollector

      {#set-mid-web-server__ul_cfm_1n5_bkc}
   {#set-mid-web-server__substeps_windows_all}

## What to do next

[Connect the agent to the MID Web Server using TLS](https://www.servicenow.com/docs/RTcJEG9cNohM50RNrtJ2XQ "Connect the agent to the MID Web Server to enable configuring mTLS on your MID Web Server and agent.").