---
sourceDocument: Brazil ServiceNow AI Platform Capabilities
sourceDocumentLink: https://www.servicenow.com/docs/r/servicenow-platform

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil ServiceNow AI Platform Capabilities

ft:clusterId :

    - platcap

bundleId :

    - platcap

workflow :

    - Platform


---

# Revoke a certificate

# Revoke a Hermes certificate {#ariaid-title1}

Release version: Brazil  
Updated September 10, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Revoke a ServiceNow® instance-signed certificate so that it can't be used in secure connections to the Hermes Messaging Service.

## Before you begin

Role required: hermes_admin and sn_kmf.cryptographic_manager

## Procedure

1. Navigate to AllCertificate GeneratorInstance PKI Certificate Generator.
2. Select Manage Certificates.
3. In the Hermes IPKI Certificates dialog box, select one or more certificates that you want to revoke.
4. Select Revoke.
5. Select a reason for the revocation and then select OK.

## Result

The certificates are revoked and can no longer be used in secure connections to Hermes. You can view the revocation date and the reason it was revoked in the Certificates \[sys_kmf_certificate\] table.
**Related concepts**   

* [Activating the Hermes Messaging Service](https://www.servicenow.com/docs/FjHiSwdhAzJXQ~TDnWbpQA "The Hermes Messaging Service is not a standalone plugin.")
* [Restricting access to Hermes](https://www.servicenow.com/docs/X3dbuhSCV5Wvz2E3Pf6pZA "Restrict access to Hermes by IP address.")  
**Related tasks**   

* [Set up a secure connection to the Hermes Messaging Service](https://www.servicenow.com/docs/8J_6l1Asj0Rnxm50EK9dow "Secure your Kafka topics by generating a ServiceNow instance-signed certificate.")
* [Enable encryption at rest for a Hermes topic](https://www.servicenow.com/docs/tCAo69bZhjuhhcANmxKDxw "Enable encryption at rest on a Hermes topic to help protect message data stored on broker disks from unauthorized access.")

*[\>]: and then