---
sourceDocument: Brazil IT Operations Management
sourceDocumentLink: https://www.servicenow.com/docs/r/it-operations-management

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil IT Operations Management

ft:clusterId :

    - itom

bundleId :

    - itom

workflow :

    - Technology


---

# Manual flow for certificate requests

# Manual flow for certificate requests {#ariaid-title1}

Release version: Brazil  
Updated September 10, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Certificate renewal requests and incidents are automatically created when certificates are about to expire or have expired. You can also manually create requests using the Service Catalog.

In the manual flow, the request and its approval are recorded on the ServiceNow instance. However, the certificate itself is obtained outside the instance, directly with your certificate authority (CA). Use the manual flow when your CA is not covered in the automated flow.
For the CAs that are supported, see [Automated certificate management for TLS certificates](https://www.servicenow.com/docs/zn0cl_M~LuCFK6FiVldaxw "From Certificate Inventory and Management version 1.3.8, you can automate the request flow for new certificates, renewals, and revoking certificates.").

A scheduled job examines the Unique Certificates \[cmdb_ci_certificate\] table on a daily
basis and triggers renewal certificate tasks when a certificate is either expired or
nearing expiration.  
Things to consider for renewal of certificates:

* Tasks for certificate renewals are automatically generated 60 days prior to expiration. To modify the timeframe, update the [Discovery property](https://www.servicenow.com/docs/wW3t0XVc87OzEMKPtzQGQg "Discovery properties enable you to control several aspects of the horizontal discovery process."): glide.discovery.certs.days_before_expiration_to_create_renewal_task.  
  Note:  
  It's enough to configure the glide.discovery.certs.days_before_expiration_to_create_renewal_task system property for the automatic creation of manual certificate tasks. You don't need to custom configure the CertificateNotifier or other prefilters.
* Certificate tasks are automatically assigned a Priority 3 - Moderate. Modify the priority by opening the task if necessary.
* If a certificate task already exists for the current certificate, no additional tasks are created.
* For renewal certificate tasks and incidents, various fields are automatically pre-populated based on the certificate CI.  
  Note:  
  The fields assigned_to and requested_for in the renewal task are derived from the assigned_to field in the targeted certificate. Additionally, the assignment_group is carried over from the certificate to the renewal task.
* If a certificate expires and isn't replaced, a new incident is created. However, only one incident is generated for each expired certificate.
* To view the certificate incidents list, navigate to Service DeskIncidents.
{#manual-cert-requests__ul_xln_32z_31c}

*[\>]: and then