Adding the XClarity One certificate to ServiceNow

You need to add the XClarity One certificate to ServiceNow.

Procedure

To add XClarity One certificate to ServiceNow, complete the following steps.

1. Open the terminal and run following command to retrieve and display the certificates.

   openssl s_client -connect sit.xclarityone.lenovo.com:443 -servername sit.xclarityone.lenovo.com -showcerts openssl s_client -connect sit.xclarityone.lenovo.com:443 -servername sit.xclarityone.lenovo.com -showcerts 
   

2. From the ServiceNow portal, click the All tab, search for “Certificates” in the drop down-menu search field, and then click Certificates to display the list of certificates.
3. Click the New button to add a new certificate.
4. Fill in the required information and paste the retrieved certificate content (including the -----BEGIN CERTIFICATE----- and -----END CERTIFICATE----- lines) from the terminal.
   Note

   Each certificate (block between -----BEGIN CERTIFICATE----- and -----END CERTIFICATE-----) will be created as a new entry.
5. If a mid server is used, import the certificate into the keystore.

   1. Change to the super user (root), and then change to the Java binary folder where the MID Server was installed on your local system, for example:

      sudo su
      cd /opt/servicenow/mid/agent/jre/bin
      

   2. Copy and save each certificate block retrieved from the terminal as a separate file named server.crt, intermediate.crt, and root.crt.

      Note

      Each block starts with -----BEGIN CERTIFICATE----- and ends with -----END CERTIFICATE-----.
   3. Run the following commands to import the certificate into the keystore, for example:

      ./keytool -import -alias xc1-server -file "/home/lhtc/server.crt" -keystore "/opt/servicenow/mid/agent/jre/lib/security/cacerts"
      ./keytool -import -alias xc1-intermediate -file "/home/lhtc/intermediate.crt" -keystore "/opt/servicenow/mid/agent/jre/lib/security/cacerts"
      ./keytool -import -alias xc1-root -file  "/home/lhtc/root.crt" -keystore "/opt/servicenow/mid/agent/jre/lib/security/cacerts"
      

      Note

      The default keystore password is changeit.