ServiceNow コネクタ

ServiceNow コネクタを ServiceNow 向け DigiCert Trust Lifecycle Manager アプリと組み合わせて使用し、いずれかの事業部門のすべての証明書を ServiceNow CMDB（Configuration Management Database）テーブルにコピーします。

注記

このページには、Trust Lifecycle Manager で ServiceNow コネクタを追加するための基本プロセスが記載されています。ServiceNow 向け DigiCert Trust Lifecycle Manager アプリと統合して使用する方法の詳細なガイドについては、「ServiceNow integration guide」を参照してください。

ServiceNow の前提条件

ServiceNow 向け DigiCert Trust Lifecycle Manager アプリがインストールされ、アクティブになっている必要があります（アプリの最小バージョンは 1.3.0）。
ServiceNow インスタンスに、有料サブスクリプションが必要となる Certificate Inventory and Management（App id: sn_disco_certmgmt）v3.3.0 プラグインがインストールされている必要があります。

ServiceNow コネクタを追加する

To add the ServiceNow connector in Trust Lifecycle Manager using the Integrations > Connectors > Add connector function:

From the Trust Lifecycle Manager main menu, select Integrations > Connectors.
Select the Add connector button.
In the IT service management section, select the tile for ServiceNow.
Fill out the form:
- Name: Provide a friendly name for this connector.
- Business unit: Select the business unit for the certificates to copy and synchronize to the ServiceNow CMDB table.
  注記
  Each ServiceNow connector is associated with a single business unit in Trust Lifecycle Manager. To copy certificates from multiple business units to ServiceNow, add multiple connectors.
- Profiles: Select one or more certificate profiles to copy certificates enrolled using those profiles to ServiceNow. If you do not select a profile, certificates associated with all profiles in the selected business unit are included.
- Exclude imported certificates: Select to prevent imported certificates from being copied to ServiceNow.
- Exclude discovered certificates: Select to prevent discovered certificates from being copied to ServiceNow.
  注記
  You can select both exclusion options. When you do, imported and discovered certificates are excluded.
- Exclude certificates by status: Select one or both statuses (Expired, Revoked) to exclude certificates from synchronization.
- Link account: Add the URL and authentication details for your ServiceNow instance.
  - Instance URL: Enter the ServiceNow instance URL, for example, https://my-instance-123.service-now.com.
  - Authentication method: Select an authentication method to connect the ServiceNow instance to Trust Lifecycle Manager.
    Account credentials: Enter the credentials for a valid ServiceNow user. At minimum, the ServiceNow user specified in the connector must have the "user" role (x_dice_digicertone.user).
    Certificate-based authentication: Upload a PKCS#12 certificate to authenticate via mutual TLS (mTLS). Enter the password for the PKCS#12 certificate file.
Select Add to create the ServiceNow connector with the configured settings.
重要
After you create the connector, you cannot change its business unit, profiles, or certificate exclusion settings. Locking these settings helps keep the initial migration and subsequent updates synchronized with ServiceNow. To change these locked settings, you must delete the connector and create a new one.

次の手順

Trust Lifecycle Manager で ServiceNow コネクタを追加するとき:

A one-time initial migration job starts approximately 30 minutes after you create the connector. It copies certificates that match the business unit, profile, source, and status settings configured for the connector. For details on certificate properties that are copied, see ServiceNow CMDB table.
注記
ServiceNow CMDB テーブルには閲覧専用のアクセス権があります。証明書を CMDB テーブルから直接管理することはできませんが、統合により、CMDB 機能を使用して ServiceNow の［Workspaces］>［Certificate Management］ページから証明書のクエリ、フィルタリング、監視が可能となります。
- To monitor the migration, go to Integrations > Connectors, select the connector, and check the Migration status field on the connector details page. You can also track the status of the migration from the CMDB integration page in the DigiCert Trust Lifecycle Manager app in ServiceNow.
- When the initial migration has not started or is in progress, the connector details page displays the following banner: Initial certificate migration is in progress. This may take some time depending on the number of certificates. See Next update for the next synchronization job.
After the initial migration is complete, an incremental job runs every 10 minutes to synchronize any updated certificate data in the Trust Lifecycle Manager business unit to the ServiceNow CMDB table. The incremental job does not run until the initial migration completes successfully.
To troubleshoot or reconfigure an existing ServiceNow connector:
- If the connector status changes to Action needed, correct the ServiceNow account settings and select Test connection from the connector’s actions menu on the Integrations > Connectors page. Trust Lifecycle Manager also tests the connection every 10 minutes. When the connection is restored, the connector returns to Active and resumes copying certificate data.
- Delete and recreate the connector if the certificate counts do not match or if you want to edit profile and certificate exclusion settings.

このセクションの内容: