---
sourceDocument: Australia IT Operations Management
sourceDocumentLink: https://www.servicenow.com/docs/r/it-operations-management

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia IT Operations Management

ft:clusterId :

    - itom

bundleId :

    - itom

workflow :

    - Technology


---

# Run certificate discovery via port scans

# Run certificate discovery via port scans {#ariaid-title1}

* Release version: Australia
* 
* Updated March 12, 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

When the TLS port probe \[tls_ssl_certs\] is enabled, Discovery automatically scans 14 pre-authorized ports as part of your existing CI Discovery schedules.

## Before you begin

Role required: discovery_admin or admin

## Procedure

1. Activate the TLS port probe \[tls_ssl_certs\].
   1. Navigate to Discovery DefinitionPort Probes.
   2. Open tls_ssl_certs.
   3. To enable the probe, select the Active check box.  
      By default, the check box for any new installation is unchecked.
   4. Save your changes.
2. Add IP service to help configure the TLS port probe.
   1. Navigate to Discovery DefinitionIP Services.
   2. Create a new IP service with a port.
   {#run-cert-inventory-mgmt-ports__substeps_zjf_mpt_kjb}
3. Configure the TLS port probe.  
   Edit the Port Probe definition to add up to 138 additional ports or remove existing ones.
   1. Navigate to Discovery DefinitionPort Probes.
   2. Open tls_ssl_certs.
   3. Unlock the Triggered by services field by selecting the lock icon next to it.
   4. Remove any ports from the list or add additional ones from the search area.
   5. Save your changes.
   {#run-cert-inventory-mgmt-ports__substeps_u54_xpt_kjb}

## Result

Your existing Discovery schedules should then automatically scan for any certificates on the specified ports.

*[\>]: and then