You can export Microsoft Active Directory certificates, such as root, intermediate, and a client authentication certificate, for authentication purposes. You then register the exported root and intermediate certificate in the ServiceNow instance and map the exported client authentication certificate to the user.

You must do these tasks in your Windows machine.

If you don't have the user-generated certificates (client authentication and code signing), do the tasks in the following topics to export active directory certifications. For more information, see Generating and installing user certificates.