Certificate routing policy form for EJBCA ACME
To automate the processes of your certificate life cycle, you must fill out a routing policy form that populates your Certificate Signing Requests. This table shows you the required fields and values.
|
Field |
Description |
|---|---|
|
Name |
Name of your routing policy. |
|
Certificate Authority |
Certificate authority. To see a list of supported Certificate Authorities, select the search icon. Choose EJBCA ACME. Note: The certificate authority determines if additional fields are necessary for your routing policy. Fill in this field first, to see what information you need for this form. |
|
Environment |
The environment that you want your certificate for. Options are:- Development
. |
|
Assignment Group |
Assignment group. You can select an assignment group or make a new one. |
|
DNS Challenge Action |
Domain name system challenge action. |
|
Credential Alias |
Credential alias. Your options are based on the aliases that you create in the Certificate Management Credentials form. |
|
Vault Type |
External vault provider to use for private key storage with this routing policy. When set, the system stores private keys in the specified vault during automated certificate operations.The available options are:
|
|
Certification Purpose |
Certification Purpose. Options are:- Internal
|
|
Certificate Format |
Format in which the certificate is generated. The available options are: PEM, DER, and PKCS12. The default value is PEM. |
|
PKCS12 Password Vault Reference |
Reference to the PKCS#12 key store password stored in your external vault. The format depends on your vault type: - For HashiCorp Vault, enter the full path to the secret
This field is required when the Certificate Format field is set to PKCS12. |
|
PKCS12 Password Vault Key |
Name of the key within the vault secret that holds the PKCS#12 key store password. This field is required when the Certificate Format field is set to PKCS12 and the Vault Type field is set to HashiCorp Vault. |
|
Is Active |
Option to activate the policy. |
|
Allow Duplicate Request |
Option to allow multiple requests to receive multiple certificates. |
|
Approval Required |
Option to require approval. |
|
Task Approval Group |
Task approval group. This field appears only when the Approval Required field is activated. |
|
DNS Task Assignment Group |
DNS Task Assignment Group. Select Certificate Inventory and Management. |
|
Domain |
Domain of the policy. This field is automatically set to global. |
|
MID Server |
MID Server you want to use. |
|
Subject Common Name |
Specific entity or domain name that the certificate is issued to. Enter a name or |
|
Subject Alternative Name |
Domain or subdomain included in the Subject Common Name. Enter an alternative name or |
|
Organization |
Organization making the certificate signing request for the given Subject Common Name. Enter the organization or |
|
Locality |
Locality (city) of the organization making the certificate signing request for the given Subject Common Name. Enter the locality or |
|
Country |
Country of the organization making the certificate signing request for the given Subject Common Name. Enter the country or |
|
Organizational Unit |
Organizational unit making the certificate signing request for the given Subject Common Name. Enter the unit or |
|
State |
State of the organization making the certificate signing request for the given Subject Common Name. Enter the state or |
|
Email Address |
Email address of the administrator in the organization making the certificate signing request for the given Subject Common Name. Enter an email address or |
--- title: Certificate routing policy form for EJBCA ACME description: To automate the processes of your certificate life cycle, you must fill out a routing policy form that populates your Certificate Signing Requests. This table shows you the required fields and values. locale: en-US canonical_url: https://www.servicenow.com/docs/r/australia/it-operations-management/discovery/certificate-routing-policy-form-table.html release: australia product: Discovery classification: discovery topic_type: reference last_updated: "2026-09-10" reading_time_minutes: 3 breadcrumb: [Reference, Certificate Inventory and Management, ITOM Visibility, IT Operations Management] --- # Certificate routing policy form for EJBCA ACME To automate the processes of your certificate life cycle, you must fill out a routing policy form that populates your Certificate Signing Requests. This table shows you the required fields and values. <table id="table_lhb_ppz_wfc"><thead><tr><th> Field </th><th> Description </th></tr></thead><tbody><tr><td> Name </td><td> Name of your routing policy. </td></tr><tr><td> Certificate Authority </td><td> Certificate authority. To see a list of supported Certificate Authorities, select the search icon. Choose **EJBCA ACME**. **Note:** The certificate authority determines if additional fields are necessary for your routing policy. Fill in this field first, to see what information you need for this form. </td></tr><tr><td> Environment </td><td> The environment that you want your certificate for. Options are:- Development - Disaster recovery - Production - Sub-Production . </td></tr><tr><td> Assignment Group </td><td> Assignment group. You can select an assignment group or make a new one. </td></tr><tr><td> DNS Challenge Action </td><td> Domain name system challenge action. </td></tr><tr><td> Credential Alias </td><td> Credential alias. Your options are based on the aliases that you create in the Certificate Management Credentials form. </td></tr><tr><td> Vault Type </td><td> External vault provider to use for private key storage with this routing policy. When set, the system stores private keys in the specified vault during automated certificate operations.The available options are: - HashiCorp Vault - Azure Key Vault - CyberArk PVWA </td></tr><tr><td> Certification Purpose </td><td> Certification Purpose. Options are:- Internal - External </td></tr><tr><td> Certificate Format </td><td> Format in which the certificate is generated. The available options are: PEM, DER, and PKCS12. The default value is PEM. </td></tr><tr><td> PKCS12 Password Vault Reference </td><td> Reference to the PKCS\#12 key store password stored in your external vault. The format depends on your vault type: - For HashiCorp Vault, enter the full path to the secret - For Azure Key Vault, enter the secret name - For CyberArk PVWA, enter the account name This field is required when the Certificate Format field is set to PKCS12. </td></tr><tr><td> PKCS12 Password Vault Key </td><td> Name of the key within the vault secret that holds the PKCS\#12 key store password. This field is required when the Certificate Format field is set to PKCS12 and the Vault Type field is set to HashiCorp Vault. </td></tr><tr><td> Is Active </td><td> Option to activate the policy. </td></tr><tr><td> Allow Duplicate Request </td><td> Option to allow multiple requests to receive multiple certificates. </td></tr><tr><td> Approval Required </td><td> Option to require approval. </td></tr><tr><td> Task Approval Group </td><td> Task approval group. This field appears only when the **Approval Required** field is activated. </td></tr><tr><td> DNS Task Assignment Group </td><td> DNS Task Assignment Group. Select **Certificate Inventory and Management**. </td></tr><tr><td> Domain </td><td> Domain of the policy. This field is automatically set to **global**. </td></tr><tr><td> MID Server </td><td> MID Server you want to use. </td></tr><tr><td> Subject Common Name </td><td> Specific entity or domain name that the certificate is issued to. Enter a name or `*`. </td></tr><tr><td> Subject Alternative Name </td><td> Domain or subdomain included in the Subject Common Name. Enter an alternative name or `*`. </td></tr><tr><td> Organization </td><td> Organization making the certificate signing request for the given Subject Common Name. Enter the organization or `*`. </td></tr><tr><td> Locality </td><td> Locality \(city\) of the organization making the certificate signing request for the given Subject Common Name. Enter the locality or `*`. </td></tr><tr><td> Country </td><td> Country of the organization making the certificate signing request for the given Subject Common Name. Enter the country or `*`. </td></tr><tr><td> Organizational Unit </td><td> Organizational unit making the certificate signing request for the given Subject Common Name. Enter the unit or `*`. </td></tr><tr><td> State </td><td> State of the organization making the certificate signing request for the given Subject Common Name. Enter the state or `*`. </td></tr><tr><td> Email Address </td><td> Email address of the administrator in the organization making the certificate signing request for the given Subject Common Name. Enter an email address or `*`. </td></tr></tbody> </table>**Parent Topic:**[Certificate Inventory and Management reference](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/it-operations-management/discovery/cert-invt-mgmt-references.md)
| title | Certificate routing policy form for EJBCA ACME |
| description | To automate the processes of your certificate life cycle, you must fill out a routing policy form that populates your Certificate Signing Requests. This table shows you the required fields and values. |
| locale | en-US |
| canonical_url | https://www.servicenow.com/docs/r/australia/it-operations-management/discovery/certificate-routing-policy-form-table.html |
| release | australia |
| product | Discovery |
| classification | discovery |
| topic_type | reference |
| last_updated | 2026-09-10 |
| reading_time_minutes | 3 |
| breadcrumb | ReferenceCertificate Inventory and ManagementITOM VisibilityIT Operations Management |