Configure the MID Server for automatic certificate renewal

  • Release version: Australia
  • Updated May 25, 2026
  • 1 minute to read

    • Collect information about root certificates stored outside your server. Create a specialized Discovery schedule.

    Before you begin

    Role required: pki_admin or admin

    About this task

    Configure your MID Server to renew certificates automatically by setting the configuration parameters in your MID Server.

    For information about version compatibility and troubleshooting, see the Renewal of TLS certificates using AI Agents for Discovery knowledge article [KB2470998] in the Now Support Knowledge Base. The Certificate Inventory and Management on Yokohama Patch 8 or later supports the certificate renewal agent.

    Procedure

    1. Navigate to All > Mid Servers.
    2. Select the MID Server that you want to configure.
    3. Select the Configuration Parameters tab.
    4. Add a new parameter by selecting New.
    5. Select the Parameter name field.
    6. Select ext.vault.hashicorp.address.
    7. In the Value field, enter your external HashiCorp vault address.
      The default value is http://127.0.0.1:8200.
    8. Select Submit.
    9. Add the HashiCorp vault path parameter.
      1. Select New.
      2. Select the Parameter name field.
      3. Select ext.vault.hashicorp.path.
      4. In the Value field, enter your file path in the HashiCorp vault.
      5. Select Submit.
    10. Add the HashiCorp vault token to your MID Server configuration file.
      1. Navigate to the IP address in the IP address field of your MID Server record.
      2. Navigate to the MID Server installed folder where you installed your MID Server.
      3. Select the agent/config.xml file.
      4. Add the parameter ext.vault.hashicorp.token in your config.xml file.
      5. Insert the following code: 
        <parameter name="ext.vault.hashicorp.token" secure="true" value="<YOUR TOKEN VALUE>"/>
      6. Restart your MID Server.

    Result

    Your MID Server is configured for automatic certificate renewal.

    What to do next

    To complete the process of configuring yourself for automatic certificate renewal, you must complete the required steps to Add the required applications and capabilities to your MID Server and Configure System Properties for automatic certificate renewal.