MID server secure deployment guide (instance security hardening)

The ServiceNow Management, Integration, and Discovery (MID) server is a lightweight Java application that runs as a Windows service or UNIX daemon on standard hardware, including virtual machines.

It securely authenticates to your instance in the ServiceNow Cloud using its own login credentials, and facilitates the data transmission with your applications, data sources, and services. Multiple MID servers can be deployed in different network segments to provide additional scalability.

Consider the following factors regarding security for your MID Server:

• Physical security
  Secure the physical hardware that hosts the MID Server or the hypervisor for virtualized MID Servers.
• Virtual infrastructure security
  Use virtualization with the flexibility to install multiple MID Servers in virtualized operating systems and networks in shared physical hardware.
• Operating system security
  Learn how the MID Server stores its ServiceNow AI Platform username and password in its configuration file, named config.xml, for secure authentication to the instance.
• Network security
  The MID Server communicates on port 443 using SSL to the instance and requires no inbound connections.
• Administration and Management
  This section describes the security practices and guidelines for administering and managing the MID Server in your environment.