Version history for the IT Operations Management Certificate Inventory and Management app on the ServiceNow Store.

Important: For details on system requirements and family compatibility, view the application listing on the ServiceNow Store website.

Version history

Version 3.6.0 - November 2024
  • New: CSR Generation can now be generated on the ServiceNow instance itself (supported only on Y+ instances).
  • Fixed:
    • Resolved: Certificate Management Flow is not working as expected with Secure Mode Mid
    • Resolved: Issues with the certificate valid to and from dates.
    • Resolved: "DigiCert - Certificate Management" pattern setting invalid value "none" to service_type field
    • Resolved: [Upgrade from Vancouver/Washington to itommerge] Amazon AWS - Certificates Manager pattern is failing with error after AWS Cloud Discovery
    • Resolved: If SAN in CSR is an IP Address, it is being converted to hexadecimal in the form's "Subject Alternative Name" field.
    • Resolved: Certificate inventory and management - Microsoft CA new certificates have inconsistent new line control characters.
Version 3.4.0 - May 2024
  • New:
    • Populate all the attributes of the imported certificates using IRE.
    • ACME support for multiple Certificate authorities, and validating the automated certificate renewals
    • Cloud certificate discovery patterns have been integrated directly into the Certificate Inventory Management application, keeping these patterns housed within the app.
    • Discovering certificates from AWS, Azure, and GCP certificate managers and populating the cmdb_ci_certificate.
    • the app reconciles the certificates discovered with IP/Port scanner with certificate discovered from Cert Manager CA Pattern
  • Fixed:
    • "Multiple CAs on Host" error still observed during Microsoft CA certificate request
    • DigiCert - New Certificate automation flow is not getting certificate id in response
    • DigiCert - Certificate Management pattern - expired certificates are discovered with state 'issued'
    • In related lists, Certificates are sorted based on nonexistent field 'valid_upto', instead of the expected 'valid_to' field
    • Path attribute unecesarilly added for sn_disco_certmgmt_cmdb_installed_certificate
    • When parsing certificate subject-names allow spaces in between attributes of the certificate
    • Application Servers table (cmdb_ci_app_server) does not allow user to distinguish between the records in the table when the 'Request New Certificate (Automated)' catalog request is submitted
Version 3.3.0 - November 2023
  • Changed: Accessibility WCAG 2.1
  • Fixed:
    • Rectified Certificate Authority Discovery Payload populating special Characters for subject_organization field
    • app-itom-external-issuer helm chart can be deployed using --namespace tag
Version 3.1.0 - August 2023

What's New:

Certificate management workspace: Explore the brand-new workspace experience.

- Certificate Inventory Dashboard and Insights.

- PKI Workflow Insights.

- Certificate lifecycle management views.

Support cert-manager integration.

cert-manager adds certificates and certificate issuers as resource types in Kubernetes clusters and simplifies the process of obtaining, renewing, and using those certificates.

Version 3.0.6 - June 2023
Fixed: Decryption bug fixes.
Version 3.0.0 - May 2023
  • Fixed:
    • Minor bug fixes
    • Added support for multiple Microsoft CAs on same host.
    • Added support for using intermediate server instead of CA server for Microsoft CA.
Version 2.4.0 - February 2023
Minor fixes.
Version 2.3.2 - November 2022

What's New:

  • Automation of certificate fulfillment for Microsoft Active Directory Certificate Services
  • Employee Center experience for Certificate request, renewal, and revoke operations
  • Visibility to Certificate chain from Unique certificate form view
Version 2.1.0 - May 2022
New: Entrust CA Policy Automation for certificate request, renewal, and revoke operations.
Version 1.3.19 - March 2022
  • Fixed:
    • Save UI action was missing in context menu in sysapproval_approver record.
    • Warning message or alert in the "Disable CellEdit - State Field" client script appeared when user tried to change the state from approval list view.
Version 1.5.0 - February 2022
  • This is a patch release for Certificate Inventory and Management 1.3.8. This 1.5.0 patch release is compatible with the San Diego family release.
  • Fixed:
    • "Disable CellEdit - State Field" client script was blocking users from updating values from the "Approval" table list view. This has been removed.
    • Discovery issues for ECC Algorithm signed certificates for Entrust.
    • Subject Alternative Name was not getting recognized while decoding CSR if the Subject Alternative Name had X509v3 format.
    • In the Manual Renew Certificate Service Catalog Form, the Certificate Expiration Date was not converting to local time.
    • Save UI action was missing in the context menu for sysapproval_approver record.
    • Removed the overridden UI actions and added a new UI action “Choose Routing Policy & Approve.”
    • Earlier Certificates with single certificate in chain were marked as self-signed. Control this behavior by setting the [sn_disco_certmgmt.mark_self_signed_for_incomplete_chain] property. If the property is set to true (default), the certificate with incomplete chain is marked as self-signed.
Version 1.3.8 - September 2021
  • New:
    • Service Catalog workflows for users to request, renew and revoke digital certificates.
    • Policy-based routing framework for PKI administrators to configure the request fulfillment process flows for Digicert Certificate Authority
Version 1.2.1 - August 2020
Changed: Added ITOM visibility subscription as a dependency.
Version 1.1.7 - February 2020
  • New:
    • Discovery of TLS Certs from Certificate Authority Vendors - Support discovery TLS certificates from Digicert and GoDaddy Certificate Authority (CA). The discovery logic will use the existing pattern framework to discovery/inventory certificates from Digicert and GoDaddy CA.
    • Bulk import of TLS certs from MID Server - Certificates can be imported from files. You can discover certificates from certificate files by importing the files into the system using pattern-based Discovery. You can only import 1500 certificates at one time.
  • Fixed: Minor bug fixes
Version 1.0.6 - January 2020
The TLS Certificate management store application provides a platform-based approach to the lifecycle management of TLS certificates. This solution combined with task fulfillment can provide a methodical approach to the request management and renewal management process. Automating manual tasks like requesting a new certificate and renewing expired certificates can increase the productivity of the public-key Infrastructure (PKI) team by ~30% and help to digitize their manual workflows.