---
sourceDocument: Australia Employee Service Management
sourceDocumentLink: https://www.servicenow.com/docs/r/employee-service-management

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Employee Service Management

ft:clusterId :

    - emplsm

bundleId :

    - emplsm

workflow :

    - Employee


---

# Upload JKS certificate

# Upload Java KeyStore certificate {#ariaid-title1}

* Release version: Australia
* 
* Updated March 12, 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

Upload a Java KeyStore certificate and specify the password that's sent in Moveworks encrypted email.

## Before you begin

Ensure you have the encrypted email from Moveworks to set up secure connection.  
You can generate a self-signed JWT certificate (valid for 2 years) for use with Moveworks for Web. For more information, see [JWT Certificate Generation Guide (Mac and Windows)](https://docs.moveworks.com/ai-assistant/ai-assistant-web-surfaces/moveworks-for-web/moveworks-for-web-installation-servicenow#jwt-certificate-generation-guide-mac--windows)  
Note:  
You must have purchased Moveworks and implemented it for the self-signing to work.

Role required: admin or OAuth admin

## About this task

Certificate authentication creates encrypted communication between your ServiceNow instance and the Moveworks platform. You must upload the JKS certificate file and configure the keystore password in both the certificate record and JWT key provider.

## Procedure

1. Navigate to AllSystem DefinitionCertificates.
2. Search for moveworks JKS in the certificate list.
3. Open the certificate record and upload the certificate file.  
   1. Select the Manage Attachments (![]()) icon.
   2. Upload your moveworks JKS file.
4. Enter the password in the Key Store Password field.  
   Figure 1. JKS password  
   Note:  
   This password you receive from Moveworks team.
5. Select Validate Stores and Certificates.  
   The system validates the certificate with no errors and displays Valid key_store message.  
   Note:  
   [Contact Moveworks support](https://help.moveworks.com/docs/support#how-to-contact-moveworks-support) for troubleshooting.
6. Navigate to System DefinitionJWT Providers.
   1. In the Signing configuration field, verify if `Moveworks JWT Provider` is selected.
   2. Select the info icon (![preview icon]()), select Open Record in the pop-up, and select Global scope.  
      Figure 2. JKS signing keys
   3. In the Moveworks JWT key window, enter the same Key Store Password in the Signing Key field.
   {#mw-upload-jks-cert__substeps_vxf_rvs_yhc}
7. Select Save or Update.  
   For more information, see [Partner-Specific ServiceNow Updates](https://docs.moveworks.com/ai-assistant/getting-started/labs/partner-demo-guide/employeeworks-installation-guide-errata#partner-specific-servicenow-updates).

## Result

Certificate authentication is configured. JWT tokens can now be generated for secure communication between ServiceNow and Moveworks services.

## What to do next

Proceed to add bot ID to complete the Moveworks AI assistant setup.
**Related reference**   

* [Moveworks for Employee Center reference](https://www.servicenow.com/docs/RTKtDxU3N3falnPZ741y0w "The reference topics for the application provide additional information about the Moveworks for Employee Center settings, observations, and troubleshooting.")

*[\>]: and then