---
sourceDocument: Brazil Employee Service Management
sourceDocumentLink: https://www.servicenow.com/docs/r/employee-service-management

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil Employee Service Management

ft:clusterId :

    - emplsm

bundleId :

    - emplsm

workflow :

    - Employee


---

# Upload JKS certificate

# Upload Java KeyStore certificate {#ariaid-title1}

Release version: Brazil  
Updated March 12, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Upload a Java KeyStore certificate and specify the password that you set when you generate it.

## Before you begin

Generate a self-signed JWT certificate (valid for 2 years) to use with the Embedded AI Assistant. For more information, see [JWT Certificate Generation Guide (Mac and Windows)](https://docs.moveworks.com/ai-assistant/ai-assistant-web-surfaces/moveworks-for-web/moveworks-for-web-installation-servicenow#jwt-certificate-generation-guide-mac--windows). The guide creates a .jks file to upload to ServiceNow and a .crt file to upload to Moveworks  
Note:  
You must purchase Moveworks and implement it for the self-signing to work.

Role required: admin or OAuth admin

## About this task

Certificate authentication creates encrypted communication between your ServiceNow instance and the Moveworks platform. You must upload the JKS certificate file and configure the keystore password in both the certificate record and JWT key provider.

## Procedure

1. Navigate to AllSystem DefinitionCertificates.
2. Search for moveworks JKS in the certificate list.
3. Open the certificate record and upload the certificate file.  
   1. Select the Manage Attachments (![]()) icon.
   2. Upload the moveworks.jks file that you generated.
4. Enter the password in the Key Store Password field.  
   Figure 1. JKS password  
   Note:  
   This is the password that you set when you generated the certificate.
5. Select Validate Stores and Certificates.  
   The system validates the certificate with no errors and displays Valid key_store message.  
   Note:  
   [Contact Moveworks support](https://help.moveworks.com/docs/support#how-to-contact-moveworks-support) for troubleshooting.
6. Navigate to System DefinitionJWT Providers.
   1. In the Signing configuration field, verify if `Moveworks JWT Provider` is selected.
   2. Select the info icon (![preview icon]()), select Open Record in the pop-up, and select Global scope.  
      Figure 2. JKS signing keys
   3. In the Moveworks JWT key window, enter the same Key Store Password in the Signing Key field.
   {#mw-upload-jks-cert__substeps_vxf_rvs_yhc}
7. Select Save or Update.  
   For more information, see [Partner-Specific ServiceNow Updates](https://docs.moveworks.com/ai-assistant/getting-started/labs/partner-demo-guide/employeeworks-installation-guide-errata#partner-specific-servicenow-updates).

## Result

Certificate authentication is configured. JWT tokens can now be generated for secure communication between ServiceNow and Moveworks services.

## What to do next

Upload the .crt file to Moveworks in the Webchat Credentials field under Chat PlatformsWeb ChatbotAuthentication. Proceed to add bot ID to complete the Moveworks AI assistant setup.
**Related reference**   

* [ServiceNow Otto Chat Integration reference](https://www.servicenow.com/docs/ni2gR8E8FkKausqPv6CfYg "The reference topics for the application provide additional information about the settings, observations, and troubleshooting.")

*[\>]: and then