Jun 1, 2023

ATLAS with ServiceNow Integration

Introduction

ServiceNow is a cloud-based “workflow automation” platform that enables enterprise organizations to improve operational efficiencies by streamlining and automating routine work tasks.

GlobalSign-ServiceNow integration provides ServiceNow users with the ability to simplify and streamline the procurement and management of public and private Certificates via GlobalSign's Connector.

Prerequisites

• GlobalSign Atlas API credentials, mTLS Certificate
• Validated Domains
• PKCS12 key store Certificate
• ServiceNow

How to get GlobalSign Atlas API credentials, mTLS Certificate

1. Use your credentials to access the ATLAS portal: https://atlas.globalsign.com/.
   
   Or, contact sales if you don’t have an ATLAS account or the Product.
2. Generate the API Credentials in the ATLAS Portal by following the guidelines found here:
   
   https://support.globalsign.com/atlas/general-category-faqs/api-related-faqs 
3. Generate the mTLS Certificate by following the guidelines found here:
   
   https://support.globalsign.com/atlas/general-category-faqs/mtls-faqs

Validating Domains

1. Make sure to add the domain in the Domain section of the ATLAS portal to be able to issue the TLS Certificate from ServiceNow.
2. Make sure to add the domain with the right identity Profile in the ATLAS portal so that Certificates issued to those domains will include any relevant identity information in the linked profile.

How to generate PKCS12 key store Certificate

To convert mTLS into PFX, use this command:

Openssl pkcs12 -export -out {your new pkcs12 cert name}.pfx -inkey {your private key}.key -in {your mtls cert}.pem

Note: Please create and keep the PFX password, which is required in the ServiceNow portal.

ServiceNow

Please use the ServiceNow admin guide to create your ATLAS account and set up ATLAS with the ServiceNow Connector:

https://www.globalsign.com/en/repository/GlobalSign-PKIaaS-connector-for-Service-Now-Admin-Guide-1.2.1.pdf

Please use the ServiceNow user guide to request the Certificate and manage the Certificate lifecycle:

https://www.globalsign.com/en/repository/GlobalSign-PKIaaS-connector-for-Service-Now-User-Guide-1.2.1.pdf

FAQs

Does ServiceNow work with all ATLAS products?

No, it’s only for TLS and S/MIME products.

Can I issue the Certificate for any domain in ServiceNow?

Yes, you can issue the Certificate for any domain. However, you should have that domain added, and it should be active in the Domain section in the ATLAS portal.

For more information, check out this link: https://support.globalsign.com/atlas/domain-management

What if I change the API credentials in the ATLAS portal?

You would need to update the new API credentials in Service. However, there would not be any changes in mTLS.

How do I Revoke a TLS Certificate in ServiceNow?

ServiceNow allows you to revoke the Certificate, however, you need to select the reason for the revocation.

For more information on revocation reasons, check out this link: https://support.globalsign.com/ssl/ssl-certificates-life-cycle/tls-certificate-revocation-reasons