Automating manual tasks like requesting a new certificate and renewing expired certificates can increase the productivity of the public-key infrastructure (PKI) team by approximately 30% and help digitize manual workflows.
The ServiceNow Certificate Inventory and Management store application provides a platform-based approach to the lifecycle management of TLS certificates. This solution, combined with task fulfillment, can provide a methodical approach to the request management and renewal management process.
Compliance and security hygiene go hand in hand, and strong TLS management is a priority. A lack of visibility to deployed TLS certificates and expiry of TLS certificates can result in service outages and data breaches. The largest consumer credit reporting company commented on how “TLS certificates had expired about 10 months before the breach occurred, meaning that encrypted traffic was not being inspected throughout that period.”
Key features
- Workflows for the request to fulfill/renew certificates via a Service Catalog.
- Policy-based framework to route digital certificate request/renewal and revoke workflows.
- Auto-discovery of TLS certificates in CMDB common service data model using IP/port scans and URL-based methods.
- Single pane of glass dashboard provides insights into workflow task management for the PKI team and provides comprehensive visibility to the deployment of certificates.
- Expiry pipeline view provides visibility to TLS certificates expiring in 30, 60, and 90 days.
- Automatic incident creation for expired TLS certificates.
- Discover, relate, and reconcile cloud certificates (AWS/Azure/GCP certificate manager) to your cloud apps and compute.
- Get Automatic Certificate Management Environment (ACME) protocol support for multiple certificate authorities with validation.
Note: The ACME protocol is a communications protocol for automating interactions between certificate authorities and their users' servers, allowing the automated deployment of public key infrastructure.
Fixed: Refined the access control list (ACL) role permissions required to access certificate inventory and management records.
Required plugins and products
- ITOM Visibility subscription
- Configuration Management for Scoped Apps (CMDB) (com.snc.cmdb.scoped)
- Discovery plugin (com.snc.discovery)
App dependencies
- CMDB CI Class Models