Before you can use the Solution Management for Vulnerability Response feature of Vulnerability Response in your instance, you must complete the installation of the Vulnerability Solution Management application. This application is available as a separate subscription in the ServiceNow Store.

Before you begin

Complete the following setup checklist prior to installation. Perform these setup tasks for a smooth installation.
Note: This process applies only to applications that are downloaded to production instances. If you're downloading applications to non-production or development instances, it's not necessary to get entitlements. Proceed to Activate a ServiceNow Store application.

The Microsoft Security Response Center Solution Integration and Red Hat Solution Integration are the solution applications available in Solution Management for Vulnerability Response after you install Vulnerability Solution Management.

Setup tasksDescription
Verify that the Vulnerability Response application is installed and activated.

Solution Management for Vulnerability Response requires the Vulnerability Response application.

For the most current version of Vulnerability Solution Management, verify you have the most current version of Vulnerability Response installed. See KB0856498 Vulnerability Response Compatibility Matrix and Release Schema Changes.

If the application is not installed and activated see, Install Vulnerability Response.
Verify that you have entitlement to the application.

To verify you have entitlement to the Vulnerability Solution Management application, navigate to Subscription Management > Subscriptions in your instance. The list displays the subscriptions your organization has purchased.

To get entitlement for the Vulnerability Solution Management application from the ServiceNow Store and download it onto your ServiceNow AI Platform instance, see Get entitlement for a Security Operations product or application.
Ensure that your NVD records are up-to-date for the last 10 years. See Importing data with the NVD and CWE integrations and managing third-party libraries.
Ensure your third-party vulnerabilities are up-to-date. See Vulnerability Response integrations for information on third-party vulnerability integrations.
Verify that you have the required ServiceNow AI Platform roles assigned for your instance. The following roles are required for installation and verification of expected results:

Persona and granular roles are available to help you manage what users and groups can see and do in the Vulnerability Response application. For an initial assignment of the persona roles in Setup Assistant, see Assign the Vulnerability Response persona roles using Setup Assistant. For more information about managing granular roles, see Manage persona and granular roles for Vulnerability Response.

  • The system administrator [admin] installs the application. If not already assigned, the admin assigns the vulnerability admin [sn_vul.vulnerability_admin or sn_vul.admin (deprecated)] role.
  • The vulnerability admin oversees configuration and verifies expected results.

Roles required: admin to install the Vulnerability Solution Management application and vulnerability admin to configure it.

Procedure

  1. Navigate to the ServiceNow Store.
  2. Click Log in and enter your HI credentials.
  3. Click the ServiceNow Products tab to view the available ServiceNow products.
  4. Click plus (+) sign next to Vulnerability Solution Management to view all the associated applications that you are eligible for.
  5. Click Opt-in to verify you have entitlement to Vulnerability Solution Management to the application.
  6. If you already have entitlement, skip to step 10 to install the application on your ServiceNow AI Platform instance.
  7. Select the check box and click Accept to agree to the terms and conditions at the prompt.
    A message is displayed that indicates you have successfully opted-in for the application.
  8. (Optional) Click Manage Entitlement if you want to manage your entitlement for Vulnerability Solution Management on other ServiceNow AI Platform instances.
    Note: If the Manage Entitlement button is not displayed, click the Vulnerability Solution Management application on the Product List to display it.
    1. Choose an option
    2. Click OK or Cancel to continue.
      You are ready to activate plugins and install the application on your instances.
  9. Log in to the ServiceNow AI Platform instance that you want to install the Vulnerability Solution Management application on.
  10. Navigate to All > System Applications > All Available Applications > All.
  11. Locate the Vulnerability Solution Management application (sn_vul_solution) and click Install.
    The Application installation dialog displays the application dependency plugin status. Any required dependencies not already installed are automatically installed along with the application.
  12. Click Install.
    This installation may take some time. A message is displayed in the Install dialog box after the application and its dependencies are successfully installed.

    The vulnerability admin can now configure the application from within the Setup Assistant.

  13. Click Close.

    The Microsoft Security Response Center Solution Integration and Red Hat Solution Integration are the solution applications available in Solution Management for Vulnerability Response after you install Vulnerability Solution Management.

    View the Vulnerability Solutions by navigating to All > Vulnerability Response > Administration > Setup Assistant > Integration Configuration > Solution Integrations. See Configure installed solution integrations for Vulnerability Solution Management using Setup Assistant for more information.

What to do next

After you configure the application and the available solutions, check that the CVEs and Solutions agree using Vulnerability Solution [sn_vul_m2m_vulnerability_solution] table.