---
sourceDocument: Brazil Platform security
sourceDocumentLink: https://www.servicenow.com/docs/r/platform-security

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Restrict MID IPKI registration key retry attempts

# Restrict MID IPKI registration key retry attempts {#ariaid-title1}

Release version: Brazil  
Updated September 10, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Configure the registration key retry threshold to prevent unauthorized Management, Instrumentation, and Discovery (MID) Server registration attempts. Setting the sn_mid_infra.registration_key.max_use_count
property limits how many times a registration key can be used before it is revoked.
The MID Internal Public Key Infrastructure (IPKI) feature uses registration keys to issue IPKI certificates to MID agents. This property controls the maximum number of failed attempts allowed before a registration key is revoked.
The default value of <kbd class="ph userinput">five</kbd> allows a limited number of retries. Lower values restrict retries further; higher values increase retry attempts.
Configure the sc-restrict-mid-ipki-registration-key-retry property

1. Navigate to /sys_properties_list.do on your ServiceNow instance.
2. Search for the sn_mid_infra.registration_key.max_use_count property.
3. Set the value to a number between 3-5. Don't exceed 5.

   Lower values within this range provide a more restrictive security posture while maintaining reasonable tolerance for legitimate registration failures. Save the property configuration.
4. Test the configuration by initiating a new MID IPKI registration and verify that the certificate is issued successfully.
5. Monitor MID registration logs for any revocation events indicating the retry threshold has been reached.
{#sc-restrict-mid-ipki-registration-key-retry__ol_vn2_wfg_dkc}

## More information {#sc-restrict-mid-ipki-registration-key-retry__section_wm1_vqn_phc}

{#sc-restrict-mid-ipki-registration-key-retry__table_ajc_y23_3ik__entry__2}

| Attribute | Description |
|-|-|
| Configuration name | sn_mid_infra.registration_key.max_use_count |
| Configuration type | System Properties ( /sys_properties_list.do) |
| Data type | Integer |
| Recommended value | 3-5 |
| Default value | 5 |
| Fallback value | 5 |
| Category | [Authentication](https://www.servicenow.com/docs/SZIHG9SfxVh2_gyMf2ec2Q "The authentication category covers the main elements of modern authentication to confirm an entity and its claims are authentic and correct, resistant to impersonation and prevent interception of passwords.") |
| Security risk | * Severity score: 5.4 * CVSS rating: Medium * Security risk details: Setting this property to a high value allows an attacker with a registration key to attempt multiple failed registrations before the key is auto-revoked. A higher retry threshold extends the attack window and can increase the opportunity to identify validation weaknesses or bypass registration controls. This can lead to unauthorized IPKI certificate issuance or compromise of MID agent identity validation. {#sc-restrict-mid-ipki-registration-key-retry__ul_g1g_3sf_xwb} |
| Functional impact | Modifying this property changes the maximum number of retries allowed for a registration key on failure before permanent revocation. Setting a lower value reduces the chances of successful registration if temporary or transient failures occur during the registration process. Setting a higher value increases the likelihood of successful registration but allows more retry attempts before revocation, potentially delaying detection of persistent registration failures. Instance owners must test new MID IPKI registrations to verify that the registration key is issued successfully with the configured retry count. Beyond confirming successful registration, no additional regression testing is possible. |
| Dependencies and prerequisites | None |
[ ]

{#sc-restrict-mid-ipki-registration-key-retry__table_ajc_y23_3ik}