Skip to content
Release: Australia · Updated: 2026-03-12 · Official documentation · View source

F5 certificate discovery

The ServiceNow® Discovery application uses The F5-SSH-SSL Certification pattern extension to find all associated certificates on F5 load balancers that use IPv4 addresses, IPv6 addresses, or both.

The The F5-SSH-SSL Certification pattern extension is part of the F5 load balancer and F5 load balancer SSH patterns that discover F5 BIG-IP load balancer. The The F5-SSH-SSL Certification pattern extension discovers F5 load balancer instances running on the hosts via SNMP/SSH, and then discovers certifications used by the running node of the load balancer.

Note: For load balancers running IPv6, only SSH is supported.

Request apps on the Store

Visit the ServiceNow Store to view all the available apps, and for information about submitting requests to the store. For cumulative release notes information for all released apps, see the ServiceNow Store version history release notes.

For details on system requirements and family compatibility, view the application listing on the ServiceNow Store website.

IPv6 support limitations

  • F5 SNMP is not supported.
  • MID Server cannot run REST APIs with IPv6.

    To run discovery with F5 REST, see KB0864769.

Prerequisites

  • Verify the applications are up to date
    • Discovery and Service Mapping Patterns
    • CMDB CI Class Models
  • Verify the configuration of F5 load balancer
    • Ensure that F5 load balancer instances are up and running.
    • Make sure the host (that has the F5 instance running on it) can discover successfully with the Discovery user credentials.
  • Verify the configuration of Discovery

    Ensure that the Discovery user added in the ServiceNow AI Platform instance can run the following commands:

CommandDescription
`modify`Modifies the TMSH components. You can modify one or more property settings in multiple components.The `modify` command uses the following option: `display-threshold pager`
`display_threshold`Allows you to re-enable a `display-threshold` in your script.
`list`Displays components that you have permission to view or are passed as arguments.The `list` command looks for the following arguments: - `ssl-cert` - `certificate-key-size` - `checksum` - `create-time` - `expiration-string` - `issuer` - `subject` - `version` - `fingerprint` - `serial-number` - `subject-alternative-name` - `size`
  • Verify the configuration of the patterns

    Make sure that the F5-SSH-SSL Certification shared library is added to the extension section of the F5 Load Balancer and F5 Load Balancer SSH patterns, in order to collect the certification attributes.

F5 certificate discovery class model

Image omitted: F5cert-classmodel.png
F5 certification discovery class model

Data collected by Discovery during horizontal discovery

The discovered data includes the following tables and fields.

Table and fieldDescription
Base Configuration Item Cluster [cmdb]
Serial numberSerial Number associated with the CI.
Configuration Item [cmdb_ci]
operational_statusOperational status of the cluster node.
Unique Certificate [cmdb_ci_unique_certificate]
fingerprintHash value of the certificate.
fingerprint algorithmAlgorithm used to hash the certificate.
subject common nameIdentifies the hostname/domain associated with the certificate.
subject distinguished nameIdentifying information of the subject.
issuer distinguished nameDistinguished name of the issuer.
comments 
renewal trackingIndicates whether to create any priority 1 or priority 3 tasks for the expiring certificates.
issuer common nameCommon name of the issuer.
valid FromValidity start period of the certificate.
serial NumberSerial Number associated with the CI.
subject countryThe subject's two letter country code.
subject organizationSubject’s organization.
VersionX.509 version of the certificate.
IssuerEntity that signed and issued the certificate.
subject organizational unitSubject's organizational unit.
subject alternative nameList of fully qualified domain names secured by the certificate.
valid toValidity end period of the certificate.
name 
StateLifecycle states of the certificate.
root issuerRoot entity that signed and issued the immediate certificate.
key sizeSize of the key used by the signing algorithm.
subject localitySubject's locality.
subject stateSubject's state.

CI relationships

The The F5-SSH-SSL Certification pattern extension does not create any CI relationships.

Parent Topic:Available on-premise discovery patterns