---
sourceDocument: Brazil Platform security
sourceDocumentLink: https://www.servicenow.com/docs/r/platform-security

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Register CA certificate

# Register CA certificate {#ariaid-title1}

Release version: Brazil  
Updated September 10, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Register root certificates or intermediate certificates to make them available for authentication.

## Before you begin

Role required: sso_config_admin

## Procedure

1. Navigate to AllCertificate Based AuthenticationCA Certificate Chain.
2. Select New.
3. On the form, fill in the fields:  
   {#map-ca-cert-chain__table_att_rwx_c4b__entry__2}

   | Field | Description |
   |-|-|
   | Name | Name to identify the certificate. |
   | Expiration notification | Option to warn users when a certificate is about to expire. |
   | Notify on expiration | List of users to be notified when the certificate expires. |
   | Warn in days to expire | Number of days when a notification is sent to users before a certificate expires. |
   | Active | Option to make the client certificate active. |
   | Format | PEM |
   | Type | Type of certificate. Options include: * CA Cert: The root CA certificate. Can also include intermediate certificates in the chain. CA certificates are automatically synced with the load balancer. Use this option when possible to avoid missing a required certificate in the chain. * Intermediate Cert: An intermediate certificate in the certificate chain. This certificate remains on the instance only and is not synced with the load balancer. Only use this option if you need to add an intermediate certificate to an existing chain. {#map-ca-cert-chain__ul_cy3_jvh_dpb} |
   | Short description | Short description of the user client certificate. |
   [Table 1. Mutual Auth CA Certificate form]

   {#map-ca-cert-chain__table_att_rwx_c4b}  
   Note:  
   During the certificate upload, the read-only fields, Valid from, Expires, Expires in days, Issuer, Subject, Certificate Chain, and PEM Certificate are extracted and auto-populated.
4. Select Submit.
5. **Optional:** Select Validate Stores/Certificates to validate the certificate.

*[\>]: and then