Skip to page contentSkip to chat
ServiceNow support
    • Community
      Ask questions, give advice, and connect with fellow ServiceNow professionals.
      Developer
      Build, test, and deploy applications
      Documentation
      Find detailed information about ServiceNow products, apps, features, and releases.
      Impact
      Accelerate ROI and amplify your expertise.
      Learning
      Build skills with instructor-led and online training.
      Partner
      Grow your business with promotions, news, and marketing tools
      ServiceNow
      Learn about ServiceNow products & solutions.
      Store
      Download certified apps and integrations that complement ServiceNow.
      Support
      Manage your instances, access self-help, and get technical support.
Steps to set up Mutual Authentication: Keys - Support and Troubleshooting
  • >
  • Knowledge Base
  • >
  • Support and Troubleshooting (Knowledge Base)
  • >
  • Steps to set up Mutual Authentication: Keys
KB0696776

Steps to set up Mutual Authentication: Keys


5302 Views Last updated : Aug 24, 2022 public Copy Permalink
KB Summary by Now Assist

Issue

  1. Generate a Private key pair on your side:
    keytool -genkey -alias ServiceNow_alias -keyalg RSA -validity 365 -keystore myKeystore.keystore -storepass pass123 -keypass pass123
  2. Extract the Public certificate yourPublicCert.cer from the above keystore:
    keytool -export -alias ServiceNow_alias -keystore myKeystore.keystore -storepass pass123 -file yourPublicCert.cer
  3. Convert yourPublicCert.cer to yourPublicCert.pem:
    openssl x509 -inform der -in yourPublicCert.cer -out yourPublicCert.pem

    Supply the extracted Public Certificate yourPublicCert.pem to your third-party so that they can add it to their Trust Store.

Now, prepare your keystore for Mutual Authentication:

  1. Convert the third-party's public certificate 3rdPublicCert.pem to 3rdPublicCert.cer:
    openssl x509 -outform der -in 3rdPublicCert.pem  -out 3rdPublicCert.cer
  2. Import the third-party's public certificate 3rdPublicCert.pem into above-created Customer's Private key pair Keystore:
    keytool -import -alias Puppet -keystore myKeystore.keystore -file 3rdPublicCert.cer

This keystore is now ready to be used for Mutual Authentication.

Advise the customer to get their keystore certified by a CA, otherwise, it remains self-signed which is not recommended.

Related Links

Helpful KB for debugging Mutual Authentication: KB0696599 - Debugging Mutual Authentication

Mutual Authentication Overview: KB0691876 - Mutual Authentication: Overview


The world works with ServiceNow.

Sign in for more! There's more content available only to authenticated users Sign in for more!
Did this KB article help you?
Did this KB article help you?

How would you rate your Now Support digital experience?

*

Very unsatisfied

Unsatisfied

Neutral

Satisfied

Very satisfied

Very unsatisfied

Unsatisfied

Neutral

Satisfied

Very satisfied

What can we improve? Please select all that apply.

What are we doing well? Please select all that apply.

Tell us more

*

Do you expect a response from this feedback?

  • Terms and conditions
  • Privacy statement
  • GDPR
  • Cookie policy
  • © 2025 ServiceNow. All rights reserved.