Operational Technology

Use the Admin Home to access the Operational Technology (OT) card, and start setting up your organization's OT environment.

The Activity page lists only the Appliance activity on your system.

Create an Auto Query that you can run on demand for different Discovery Console for OT Assets.

Add a site to your Discovery Console for OT.

Add an Operational Technology (OT) group so you can organize users and assign roles per group.

Add Operational Technology (OT) users to your system, edit existing users, and assign multiple users to a group.

Create a Site-specific Variable set for use in Auto Queries.

Create a Notification Rule.

Use the advanced configuration for the Service Graph Connector for ServiceNow OT Discovery to set up an asset extension points, a class calculator extension points, and a configuration item (CI) naming strategy extension points.

The AI Enhanced Recommended Actions for Operational Technology Service Management (OTSM) feature accesses external sources related to an Operational Technology (OT) incident, and contextualizes how the document is relevant to the incident.

This section explains the options for air-gapped and non-air-gapped network, installation of Discovery for OT components, and accessing data from scans and queries.

If there are errors during the role assignment process for Operational Technology (OT) Setup, an error message appears that describes the cause.

You can access the Console Discovery data via the API. On the Settings page, select the API tab to view and use the active tokens, denied tokens, and endpoints needed to communicate with the Service Graph Connector (SGC).

The Appliances page displays active appliances in the Discovery Console for OT.

This document intends to describe the ServiceNow Operational Technology Discovery architecture and covers how discovery components find, identify, and inventory devices in an Operational Technology environment.

The Assets page shows a list of all available assets for the Discovery Console for OT.

Create users and assign the necessary Operational Technology (OT) admin roles to users managing configuration and operational control.

Assign Operational Technology (OT) roles to a user or group as needed so that group members can access the data required for their work.

The Auto Query page contains the automatic asset queries for the Discovery Console for OT.

To discover assets in your OT environment, the Operational Technology Discovery solution provides the ServiceNow platform, the Discovery Console for OT, the Discovery Sensor for OT, and the OT Discovery Collector.

Filter assets and do a bulk deletion in the Discovery Console for OT.

The Certificate tab is for generating or uploading the Discovery Console for OT certificate.

The Certificates page lets you access data regarding your CA certificates, Sensor credentials, and Collector credentials. You can also renew your certifications from this page.

View the daily counts or the averages for the most recent 90 days of CI data. ServiceNow OT Foundation, ServiceNow OT Visibility and ServiceNow OT Vulnerability and Response offer insights into the licensed resources that OTM applications support. Resources that OTM applications discover, monitor, and provision are configuration items (CIs) stored in the CMDB. The OTM licensing module combines this CI information with the information on subscriptions your organization purchased to produce statistics on subscription use by OTM applications.

This section describes how the OT Discovery components should be connected so they can communicate with each other.

Several types of components are installed with activation of the OTM SU Licensing plugin, including scheduled jobs and tables.

Configure AI Enhanced Recommended Actions for Operational Technology Service Management (OTSM) to contextualize external sources related to an Operational Technology (OT) incident.

In SGC Central, you can configure the Service Graph Connector for ServiceNow OT Discovery classifications settings to define how OT Discovery categories are mapped to the CMDB classes.

Configuring the Discovery Sensor for OT provides discovery of all assets in your OT environment. The Sensor requires a Linux operating system that is installed either as a virtual machine or on a Bare-metal computer that is x86.

This section is an overview of the steps for installing the Discovery Console for OT.

Verify you have access to the pages needed to complete the Operational Technology (OT) configuration items.

Configure the Service Graph Connector for ServiceNow Operational Technology (OT) Discovery authentication credentials and configuration used to connect to the ServiceNow OT Discovery devices.

Configure the Employee Center for Operational Technology (OT) so that you and other users can access the options available in the portal.

The OT Discovery Collector is an application that you can install on a Windows or Linux system.

You can create a full or partial backup of the Discovery Console for OT data.

The Discovery Console for OT provides an interactive configuration wizard that steps you through setting up your Console, Sensor, Collector, assets, queries, and sites.

Manually create an asset to the Discovery Console for OT.

Create an Auto Query to exclude specified asset IP addresses from receiving scanning traffic.

Create a Quick Scan from the Auto Query page.

Create a user account that can access the Discovery Console for OT.

Create a Variable set for an Auto Query scan created in the Discovery Console for OT.

Create a Site-specific Variable for use in Auto Queries. You can use the Variable as a credential for your Site.

Consider deployment options for your Operational Technology Discovery components.

Deployment scenarios for OT Discovery vary based on a network's architecture. Use these scenarios to help determine how to deploy the OT Discovery components in your OT environment.

Deregister a Discovery Sensor for OT from the Discovery Console for OT that is no longer available on your system.

You can use the IT Discovery for Operational Technology (OT) Networks function to discover IT class OT devices. These devices are located in designated Purdue levels within your Industrial Control System (ICS) networks. IT class items include switches, routers, and computers that exist both in data centers and in your factories.

IT Discovery for OT Networks contains several related links and lists.

The Device Management Interface (DMI) is a web-based interface where you configure and register a Discovery Sensor for OT to the Discovery Console for OT.

The Console logs are available to download for tracking or troubleshooting purposes.

This section describes what information that is available and that is setup on an Appliance record

Edit the API settings for the Discovery Console for OT to generate active tokens, remove denied tokens, or view the available API endpoints needed to communicate with the Service Graph Connector (SGC).

Edit the email settings as needed to match the settings on your mail server.

Edit a site to update its information or delete a site that no longer exists on your Discovery Console for OT.

If you're using a local repository, upload firmware packages to the Discovery Console for OT so the system knows when an update is needed.

Edit the Query Driver on Metadata tab. The Query Driver section enables you to import or download query drivers as well as control the speed of Auto Queries.

Edit the Syslog settings as needed to configure the Syslog server.

Edit a User's information and keep the user account up to date.

Edit a Variable set for an Auto Query scan created in the Discovery Console for OT.

Edit an Auto Query to change or add parameters to your scan.

The Discovery Console for OT provides you with enhanced features to discover your assets in the OT environment.

The Discovery Sensor for OT provides you with enhanced scanning and query functionality to manage your assets in the OT environment.

Find out more about how the Admin Home, Product Hub, and Configuration Console from the ServiceNow Otto for Setup framework is used to access and complete Operational Technology (OT) configuration items.

The Service Graph Connector for ServiceNow Operational Technology (OT) Discovery imports data from a connected Operational Technology (OT) Discovery environment and leverages the Integration Hub ETL framework.

The AI Enhanced Recommended Actions for Operational Technology Service Management (OTSM) feature accesses external sources related to an Operational Technology (OT) incident, and contextualizes how the document is relevant to the incident.

The OT Discovery Collector provides you with enhanced features to create an inventory of your assets in your OT environment.

The Employee Center for Operational Technology (OT) is a central location in the Employee Center where you can submit requests for industrial issues.

The Discovery Console for OT exports data as a JSON export file.

Export Sites on your Discovery Console for OT into a CSV.

To provide feedback on OT Discovery you can submit a NOW idea on ServiceNow support.

The Results page provides a filter to find specific types of queries of information.

For each ServiceNow OT Discovery connection, configure the name and run as user for each import job. Each connection will generate a new Scheduled Import Set and Data Source.

Generate a certificate to use with the Discovery Console for OT or upload your own certificates. This certificate allows the Console to boot up.

The Home page on the Discovery Console for OT provides a dashboard overview of the assets and sites on your current system.

The Images page contains the images related to your Discovery Console for OT assets.

You can import or export assets, and ignored assets, to either CSV or JSON formats.

Import existing Sites to the Discovery Console for OT.

Install the OT Discovery containerized packages on your network.

Install the containerized packages for the Discovery Console for OT and the OT Discovery Collector onto a machine with Rocky 10 OS.

Install the Service Graph Connector for OT Discovery before accessing the Discovery for OT packages. You must also install a Linux distribution on the same machine the Discovery Console for OT is installed on.

Download the Discovery Sensor for OT package and install the ISO image. Then install the Discovery Sensor for OT.

Install a Linux operating system on a virtual machine and then install the Discovery Console for OT on the same VM.

Install or update the ServiceNow ITOM SU Licensing [sn_itom_licensing] to ensure you use the latest licensing functionality. The application includes demo data and installs related ServiceNow Store applications and plugins if they are not already installed.

Install the Service Graph Connector for ServiceNow OT Discovery from the ServiceNow Store.

Install the OT Discovery Collector on a Windows system. The OT Discovery Collector installation is compatible on Windows 10 or Windows 11 systems.

Install the OT Discovery Collector on a Linux system.

This sections describes your initial log onto the OT Discovery Collector.

The Network Zones page in the Appliances section includes a list of all Network Zones on the Console. Network zones group assets by IP address to help distinguish one or more assets that share an IP address but are in different local area networks.

The Notification Rules page shows the notification rules that were setup for the Console. Notifications are displayed on the Notification page.

The Notifications page shows the notifications available for your Discovery Sensor for Operational Technology (OT).

Use the ServiceNow Otto for Operational Technology (OT) Service Management application to summarize the Operational Technology (OT) incident information and generate incident resolution notes. You can enable your users to understand the context so that they can implement quicker resolutions.

Use the Operational Technology (OT) Manager Foundation to help streamline processes in the Industrial Workspace related to your OT device data.

You can use the Operational Technology Native Discovery solution to amplify the visibility of devices in your OT environment. You can also use the IT Discovery for Operational Technology (OT) Networks function to discover IT class OT devices.

The ServiceNow Discovery for Operational Technology (OT) Native components give you visibility of your OT devices. The components import your device data into ServiceNow using the Service Graph Connector for ServiceNow OT Discovery. Using the OT components, that is, the Discovery Console for OT, Discovery Sensor for OT, and OT Discovery Collector, you can monitor and query your devices within the OT environment.

Use ServiceNow for Operational Technology (OT) to help your organization streamline operations, boost productivity, and maximize your Operational Technology up-time on the production floor through digital workflows.

Use the OT Discovery Collector component to discover devices the Discovery Sensor for OT can't reach in the OT environment.

Use the Discovery Console for OT component to discover, monitor, and query devices in your Operational Technology environment.

Use the Discovery Sensor for Operational Technology (OT) application to discover and query devices in the Operational Technology environment.

You can review the OT Discovery component resources before setting up your OT network.

If any conrefs are broken, re-add them from the doc/source/reuse/domain-separation/domain-separation-overview.dita file. In the short description, edit the first sentence to state whether domain separation is supported or not and add the application name. Keep the conref at the end that describes domain separation.Domain separation is supported for Operational Technology. Domain separation enables you to separate data, processes, and administrative tasks into logical groupings called domains. You can control several aspects of this separation, including which users can see and access data.

The Employee Center for Operational Technology (OT) is a central location where you can submit requests related to OT and industrial services.

The Configuration Console contains Operational Technology (OT) Setup configuration items, grouped by category, that administrators can complete.

You can complete Operational Technology (OT) configuration items by navigating through the Admin Home and Product Hub, which use the ServiceNow Otto for Setup framework.

Reference topics provide additional information about the Operational Technology Setup application.

For Operational Technology (OT), ServiceNow Otto for Setup consolidates the setup processes for OT onto a single page, giving administrators a unified view of their configuration state.

The ServiceNow platform employs OTM for license management in the manufacturing sector. OTM encompasses licenses found in IT Operations Management, along with licenses exclusive to the OTM domain.

Use the OTM Licensing dashboard to assess resource consumption and status in relation to your acquired subscriptions. The dashboard provides dedicated reports for each OTM application, providing visual representations of daily usage counts and the average utilization of subscription units over a 90-day period. The OTM Licensing dashboard is an integral component of ITOM Licensing application version 4.0, accessible at ServiceNow Store.

ServiceNow OTM licensing calculates and presents subscription usage based on subscription units. These units can include factors like the number of devices monitored or the subscription duration.

Use reference topics to gain valuable insights on the components installed with OTM licensing, subscription forms for OTM products, and an overview of the OTM licensing dashboard. Navigate the subtopics to access specific guidance and references on each of these critical aspects, helping you effectively manage your OTM subscriptions and licensing requirements.

Learn about the essential fields and indicators found on the Subscriptions form for our products, enabling streamlined subscription management and clarity in your OTM product usage.

When you have installed the Discovery Console for OT and the Discovery Sensor for OT, register the Sensor to the Console with the Console's Device Management Interface (DMI).

Remove a Sensor that no longer functions or is otherwise reported as having a lost connection from the Discovery Console for OT.

Deactivating a user verifies that they can't access the Discovery Console for OT.

This section describes how to renew a certificate on the Certificates page.

If you're not an Operational Technology (OT) incident user and need to report an OT incident, report the incident in the Employee Center for OT.

On the Settings page, the Reprocess tab is available to reprocess Auto Query results.

For remote deployment at a facility or on a network, verify that the following requirements are met before installing the Discovery Console for OT.

Force a user to reset their password.

Perform manual restart of OT Discovery Collector when its configuration file has been refreshed, or if the OT Discovery Collector is unstable. You can perform manual restart only on the Collector installed in a Windows environment and for Linux-based agents that use systemd.

Perform manual restart of the OT Discovery Collector when its configuration file has been refreshed, or if it is unstable. You can perform manual restart only on Collectors installed in a Windows environment and for Linux-based agents that use systemd.

Filter your query results by Host Status. Verify whether devices were reachable when the query was executed.

The Results page provides the results from your queries in the Discovery Console for OT.

To make the Service Graph Connector for ServiceNow OT Discovery simple to use, set options that let you modify the integration behavior to meet your business needs.

Review and analyze resource statistics that OTM products can manage and compare this information to the average allocation of subscription units.

After completing the Service Graph Connector for ServiceNow Operational Technology (OT) Discovery Guided Setup, review the unknown devices and log records.

Define Operational Technology (OT) Discovery schedules that orche schedules that orchestrate how and when the Discovery strate how and when the Discovery for an OT function should run. You can also perform an immediate Quick Discovery or an actual OT Discovery run.

Set up AI Enhanced Recommended Actions for Operational Technology Service Management (OTSM) so that you can contextualize external sources related to an Operational Technology (OT) incident.

The Settings page lets you view and modify system-wide settings for the Discovery Console for OT, Discovery Sensor for OT, and the OT Discovery Collector.

Configure the scheduled import jobs.

Use SGC Central to set up your Service Graph Connector for ServiceNow OT Discovery, then import data from your OT Discovery environment into your ServiceNow instance.

In SGC Central the next step is to import the Sites.

Get started with SGC Central and set up the prerequisites for the Service Graph Connector for ServiceNow OT Discovery

Use the Guided Setup for the Service Graph Connector for ServiceNow OT Discovery to lead you through the installation, connection, configuration, and integration steps for the OT Discovery environment.

The Service Graph Connector for ServiceNow Operational Technology (OT) Discovery (SGC) imports data from a connected Operational Technology Discovery OT Discovery environment and leverages the Integration Hub ETL framework.

During set up of the Discovery Console for OT, review and confirm you have the following settings.

The SGC Central playbook launches when you start to configure and test connection.

After importing sites and configuring site mappings, you can create an import schedule.

Importing the site data must be complete before you can move onto configure site mappings.

In this step, review and modify the configurable system properties included with the integration.

This section reviews all your importation settings in SGC Central.

A Site represents a physical location in your organization, such as a DATACENTER, office, or IoT site. Each Site includes location details, time zone settings, and network range configurations that determine which IP addresses the Console for scans during discovery.

Common troubleshooting options when you set up the integration for the Service Graph Connector for ServiceNow OT Discovery.

The Updates page shows available updates for your Sensor firmware.

These are the instructions for upgrading the Discovery Console for OT. The scope of this document does not include how to upgrade the containerized version of the Console.

With the AI Enhanced Recommended Actions for Operational Technology Service Management (OTSM), contextualize an external document to get an explanation of why the document is relevant to an Operational Technology (OT) incident.

When your OT Discovery Collector stops or loses power use the next task specific to your OS to restart it.

Complete the configuration items for Operational Technology (OT) to help set up your OT environment.

This section describes how a Discovery Console for OT user can set up an Microsoft Entra ID integration.

The Users page shows the lists of both active and inactive users in your Discovery Console for OT system. You can access the Discovery Console for OT through user accounts available in the system.

After you configure AI Enhanced Recommended Actions for Operational Technology Service Management (OTSM), you can use the feature to contextualize external sources related to an Operational Technology (OT) incident.

Get started with the Discovery Console for OT application after it is installed and configured.

After you set up the Employee Center for Operational Technology (OT), you can use the portal to submit requests for industrial issues.

The Variables page provides a list of currently available variable sets.

View the count of OTM application subscriptions purchased and consumed by your organization, offering valuable insights for resource management and operational technology optimization.

Generate a list of currently countable CIs for each of the OTM applications: ServiceNow OT Foundation, ServiceNow OT Visibility and ServiceNow OT Vulnerability and Response.