Add your certificate to the ServiceNow Trusted Key Store

Upload your key and certificate to the ServiceNow Trusted Key Store.

Before you begin

Role required: admin

The public certificate that you created in this example is considered a “self-signed” certificate (meaning it didn't come from a trusted root authority). You must add the certificate to the ServiceNow Trusted Key Store for it to be used. When using a certificate that came from a Certificate Authority, you don't need to complete this step.

Procedure

In your local environment, open Terminal (on Mac or Linux), or Command Line (in Windows).
Using the terminal, use cd to move into the folder where you have created your encryption keys.
In the terminal, enter the following command:
```
cat sm_public_cert.pem
```
You must view the contents of your public certificate to copy it into the trusted key store. This cat command displays the certificate.

Image omitted: client-side-2.png
Contents of the public certificate displayed in terminal

Copy the certificate information to your clipboard.

Start with and include the -----BEGIN CERTIFICATE----- line and end with and include the -----END CERTIFICATE----- line.
On your ServiceNow instance, navigate to the X.509 certificate list by entering sys_certificate.LIST in the navigation filter.

Image omitted: client-side-3.png
sys\_certificate.LIST entered into the instance navigation filter

Select New to create a X.509 Certificate record.
In the form, fill in the following fields.

Field	Value
Name	Name of the certificate. This name can be any name you choose.
Format	Select PEMNote: Privacy Enhanced Mail (PEM) files are a type of Public Key Infrastructure (PKI) file used for keys and certificates. The records you created in the previous steps are of this file type.
Type	Select Trusted Store Cert
Short Description	Description of the certificate. Enter a value that lets you know what this certificate is being used for.
PEM Certificate	Paste the certificate information that you copied in step 4.

Select Submit to save the record.

Parent Topic:Configuring client accessible secrets