---
sourceDocument: Australia IT Operations Management
sourceDocumentLink: https://www.servicenow.com/docs/r/australia/it-operations-management

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia IT Operations Management

ft:clusterId :

    - itom

bundleId :

    - itom

workflow :

    - Technology


---

# Configure trusted certificate authorities

# Configure trusted certificate authorities {#ariaid-title1}

Release version: Australia  
Updated July 23, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Configure certificate authorities (CAs) that your organization trusts and activate the certificate authority trust policy so that certificates from other authorities are flagged as untrusted.

## Before you begin

Role required: Cryptographic Asset admin (sn_itom_cac.admin){#add-trusted-certificate-authorities__add-trusted-ca-prereq-p-1}

## Procedure

1. Navigate to AllCryptographic Asset Compliance.
2. Select the Settings icon ![]().
3. In the Settings tab, select Policies if it is not already selected.
4. In the Policy form, select Certificate authority trust.
5. Add trusted CAs.
   1. Select the Policy builder tab.
   2. In the Data sources panel, select Add.
   3. In the Add API Variable dialog box, fill in the fields.  
      {#add-trusted-certificate-authorities__table_xmf_bw3_1kc__entry__2}

      | Field | Description |
      |-|-|
      | Label | Display name for the variable, for example<kbd class="ph userinput">Trusted CA List</kbd>. |
      | Name | Internal name that the policy uses to reference the variable. |
      | Type | Data type of the variable, which should be Data Array. |
      | Mandatory | Option that determines whether a value is required for the variable. |
      | Description | Optional notes about the variable. |
      | Default value | The CAs that your organization trusts, as a JSON array of quoted names. For example, <kbd class="ph userinput">["Test CA 1","Test CA 2"]</kbd>. |
      [ ]

      {#add-trusted-certificate-authorities__table_xmf_bw3_1kc}
   4. Select Save.
6. Publish the policy version.
   1. In the Policy builder tab, select Publish.
   2. Confirm the publication by selecting Publish without testing in the Publish without testing dialog box.
7. Activate the policy.
   1. In the Certificate authority trust form, select Activate.
   2. Confirm the activation by selecting Activate in the Activate Policy dialog box.

## Result

The Certificate authority trust policy is active with the list of CAs that your organization trusts. Certificates issued by an authority not in your trusted list are flagged with the trusted CA
risk indicator.{#add-trusted-certificate-authorities__add-trusted-ca-result-p-1}
**Related topics**   

* [Manage PaCE
  policies](https://www.servicenow.com/docs/access?context=pace-admin-manage-policies&version=australia&pubname=australia-servicenow-platform&ft:locale=en-US)

*[\>]: and then