---
sourceDocument: Brazil Financial Services Operations
sourceDocumentLink: https://www.servicenow.com/docs/r/financial-services-operations

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil Financial Services Operations

ft:clusterId :

    - finso

bundleId :

    - finso

workflow :

    - Customer and Industry


---

# Import the TLS Certificate

# Import the TLS Certificate {#ariaid-title1}

Release version: Brazil  
Updated September 10, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
The Verifi API endpoint is HTTPS-only. ServiceNow® must trust the Verifi/Visa CA certificate chain to establish a secure connection. This section covers importing the certificate into the ServiceNow® certificate store.

## Before you begin

Role required: admin

## Procedure

1. Obtain the certificate by performing the following steps:
   1. Request the Verifi CA root certificate and any required intermediates from the Verifi Integration Team.  
      The certificates will be provided in PEM format (.pem or .cer extension).
   2. Confirm the certificate covers both verifiapi.visa.com (Production) and verifiapitest.visa.com (UAT).
   3. If the certificate chain contains multiple files (root + intermediate), import each one separately.
   {#import-the-tls-certificate__substeps_wxt_1fm_53c}
2. Import the certificate into ServiceNow® by performing the following steps:
   1. Navigate to the System Definition \> Certificates.
   2. Select New.
   3. Set the type field to PEM.
   4. Paste the full certificate content (including -----BEGIN CERTIFICATE----- and -----END CERTIFICATE----- delimiters) into the PEM Certificate field.
   5. Set the Name field to a recognizable label, for example:  
      {#import-the-tls-certificate__entry__2}

      | Certificate | Suggested Name |
      |-|-|
      | Visa/Verifi Root CA | Verifi --- Visa Root CA |
      | Intermediate CA | Verifi --- Visa Intermediate CA |
      [ ]

   6. Select Submit.
   7. Repeat all the steps for each certificate in the chain.
3. Associate with the REST Endpoint by performing the steps given below:
   1. Open the Verifi CDRN REST Message record (UAT or Production).
   2. Locate the Mutual Authentication field group.
   3. In the Trust Store field, reference the imported certificates.
   4. **Optional:** Populate the Keystore and Keystore Password fields with the client certificate provided during onboarding if the client certificate authentication is required by Verifi.
   5. Save the record.

   Note:  
   To verify the certificate import, use the Test link on the REST Message record. A successful response confirms that TLS handshaking is working correctly. A "PKIX path building failed" error typically indicates a missing intermediate certificate.
4. Set a calendar reminder at least 30 days before the certificate expiration date to obtain a renewal from the Verifi Integration Team.  
   Expired certificates will cause all API calls to fail with a TLS handshake error. Verifi certificates are subject to periodic renewal.