---
sourceDocument: Brazil IT Operations Management
sourceDocumentLink: https://www.servicenow.com/docs/r/it-operations-management

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil IT Operations Management

ft:clusterId :

    - itom

bundleId :

    - itom

workflow :

    - Technology


---

# Certificate Routing Policy form

# Certificate Routing Policy form {#ariaid-title1}

Release version: Brazil  
Updated September 10, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
The Certificate Routing Policy form enables you to configure routing policies for CyberArk Certificate Manager SaaS.
{#certificate-routing-policy-form__table_cyberark_routing_policy__entry__2}

| Field | Description |
|-|-|
| Name | Descriptive name for the routing policy |
| Certificate Authority | This value should be CyberArk Certificate Manager SaaS. |
| Environment | Environment where the certificate is deployed or installed. |
| Assignment Group | Group to which certificate tasks created for this routing policy are assigned to automatically. |
| Vault Type | This should be set to CyberArk PVWA. |
| Application Name | Unique application name from the CyberArk portal. This field is case-sensitive. |
| Issuing Template Alias | API alias of the issuing template from the CyberArk portal. This field is case-sensitive. |
| Credential Alias | Credential alias associated with the certificate authority. |
| Certificate Purpose | Whether the certificate request is for internal or external use. |
| Certificate Format | Format in which the certificate is generated. The available options are: PEM, DER, and PKCS12. The default value is PEM. |
| PKCS12 Password Vault Reference | Reference to the PKCS#12 key store password stored in your external vault. The format depends on your vault type: * For HashiCorp Vault, enter the full path to the secret * For Azure Key Vault, enter the secret name * For CyberArk PVWA, enter the account name This field is required when the Certificate Format field is set to PKCS12. |
| PKCS12 Password Vault Key | Name of the key within the vault secret that holds the PKCS#12 key store password. This field is required when the Certificate Format field is set to PKCS12 and the Vault Type field is set to HashiCorp Vault. |
| Is Active | Option to determine whether the routing policy is active. |
| Allow Duplicate Request | Option to allow duplicate requests with the same Certificate Signing Request (CSR). |
| Approval Required | Option to require approval before the automated flow begins. |
| Task Approval Group | If Approval Required is selected, the task approval group with the pki_approver role to provide approval. |
| Mid Server | Specific MID Server that handles all requests matching this routing policy. |
| Subject Common Name | Domain name secured by the certificate. |
[ ]

{#certificate-routing-policy-form__table_cyberark_routing_policy}