ServiceNow connector

Use a ServiceNow connector in conjunction with the DigiCert Trust Lifecycle Manager app for ServiceNow to copy selected certificates from selected business units to the ServiceNow configuration management database (CMDB) table. You can select specific certificate profiles and exclude certificates based on their source or status.

Notice

This page covers the basic process of adding a ServiceNow connector in Trust Lifecycle Manager. For a complete guide about how to integrate with and use the DigiCert Trust Lifecycle Manager app for ServiceNow, refer to the ServiceNow integration guide.

ServiceNow prerequisites

The DigiCert Trust Lifecycle Manager app for ServiceNow must be installed and active (minimum app version 1.3.0).
Your ServiceNow instance must have the Certificate Inventory and Management (App id: sn_disco_certmgmt) v3.3.0 plugin installed, which requires a paid subscription.

Add ServiceNow connector

To add the ServiceNow connector in Trust Lifecycle Manager using the Integrations > Connectors > Add connector function:

From the Trust Lifecycle Manager main menu, select Integrations > Connectors.
Select the Add connector button.
In the IT service management section, select the tile for ServiceNow.
Fill out the form:
- Name: Provide a friendly name for this connector.
- Business unit: Select the business unit for the certificates to copy and synchronize to the ServiceNow CMDB table.
  Note
  Each ServiceNow connector is associated with a single business unit in Trust Lifecycle Manager. To copy certificates from multiple business units to ServiceNow, add multiple connectors.
- Profiles: Select one or more certificate profiles to copy certificates enrolled using those profiles to ServiceNow. If you do not select a profile, certificates associated with all profiles in the selected business unit are included.
- Exclude imported certificates: Select to prevent imported certificates from being copied to ServiceNow.
- Exclude discovered certificates: Select to prevent discovered certificates from being copied to ServiceNow.
  Note
  You can select both exclusion options. When you do, imported and discovered certificates are excluded.
- Exclude certificates by status: Select one or both statuses (Expired, Revoked) to exclude certificates from synchronization.
- Link account: Add the URL and authentication details for your ServiceNow instance.
  - Instance URL: Enter the ServiceNow instance URL, for example, https://my-instance-123.service-now.com.
  - Authentication method: Select an authentication method to connect the ServiceNow instance to Trust Lifecycle Manager.
    Account credentials: Enter the credentials for a valid ServiceNow user. At minimum, the ServiceNow user specified in the connector must have the "user" role (x_dice_digicertone.user).
    Certificate-based authentication: Upload a PKCS#12 certificate to authenticate via mutual TLS (mTLS). Enter the password for the PKCS#12 certificate file.
Select Add to create the ServiceNow connector with the configured settings.
Important
After you create the connector, you cannot change its business unit, profiles, or certificate exclusion settings. Locking these settings helps keep the initial migration and subsequent updates synchronized with ServiceNow. To change these locked settings, you must delete the connector and create a new one.

What's next

When you add a ServiceNow connector in Trust Lifecycle Manager:

A one-time initial migration job starts approximately 30 minutes after you create the connector. It copies certificates that match the business unit, profile, source, and status settings configured for the connector. For details on certificate properties that are copied, see ServiceNow CMDB table.
Note
The ServiceNow CMDB table has view-only access. You can’t directly manage the certificates from the CMDB table, but the integration lets you use the CMDB functionality to query, filter, and monitor the certificates from the ServiceNow Workspaces > Certificate Management page.
- To monitor the migration, go to Integrations > Connectors, select the connector, and check the Migration status field on the connector details page. You can also track the status of the migration from the CMDB integration page in the DigiCert Trust Lifecycle Manager app in ServiceNow.
- When the initial migration has not started or is in progress, the connector details page displays the following banner: Initial certificate migration is in progress. This may take some time depending on the number of certificates. See Next update for the next synchronization job.
After the initial migration is complete, an incremental job runs every 10 minutes to synchronize any updated certificate data in the Trust Lifecycle Manager business unit to the ServiceNow CMDB table. The incremental job does not run until the initial migration completes successfully.
To troubleshoot or reconfigure an existing ServiceNow connector:
- If the connector status changes to Action needed, correct the ServiceNow account settings and select Test connection from the connector’s actions menu on the Integrations > Connectors page. Trust Lifecycle Manager also tests the connection every 10 minutes. When the connection is restored, the connector returns to Active and resumes copying certificate data.
- Delete and recreate the connector if the certificate counts do not match or if you want to edit profile and certificate exclusion settings.

In this section:

ServiceNow connector

Notice

ServiceNow prerequisites

Add ServiceNow connector

Tip

Note

Note

Important

What's next

Note