Revoke a Hermes certificate
Revoke a ServiceNow® instance-signed certificate so that it can't be used in secure connections to the Hermes Messaging Service.
Before you begin
Role required: hermes_admin and sn_kmf.cryptographic_manager
Procedure
-
Navigate to All > Certificate Generator > Instance PKI Certificate Generator.
-
Select Manage Certificates.
-
In the Hermes IPKI Certificates dialog box, select one or more certificates that you want to revoke.
-
Select Revoke.
-
Select a reason for the revocation and then select OK.
Result
The certificates are revoked and can no longer be used in secure connections to Hermes. You can view the revocation date and the reason it was revoked in the Certificates [sys_kmf_certificate] table.
Parent Topic:Configuring Hermes Messaging Service
Related topics
Activating the Hermes Messaging Service
--- title: Revoke a Hermes certificate description: Revoke a ServiceNow instance-signed certificate so that it can't be used in secure connections to the Hermes Messaging Service. locale: en-US canonical_url: https://www.servicenow.com/docs/r/australia/servicenow-platform/multi-instance-framework-hermes/revoke-certificate.html release: australia product: Multi-Instance Framework - Hermes classification: multi-instance-framework-hermes topic_type: task last_updated: "2026-09-10" reading_time_minutes: 1 breadcrumb: [Configure, Hermes Messaging Service, Manage service capabilities, Extend ServiceNow AI Platform capabilities] --- # Revoke a Hermes certificate Revoke a ServiceNow® instance-signed certificate so that it can't be used in secure connections to the Hermes Messaging Service. ## Before you begin Role required: hermes\_admin and sn\_kmf.cryptographic\_manager ## Procedure 1. Navigate to **All** > **Certificate Generator** > **Instance PKI Certificate Generator**. 2. Select **Manage Certificates**. 3. In the **Hermes IPKI Certificates** dialog box, select one or more certificates that you want to revoke. 4. Select **Revoke**. 5. Select a reason for the revocation and then select **OK**. ## Result The certificates are revoked and can no longer be used in secure connections to Hermes. You can view the revocation date and the reason it was revoked in the Certificates \[sys\_kmf\_certificate\] table. **Parent Topic:**[Configuring Hermes Messaging Service](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/servicenow-platform/multi-instance-framework-hermes/configuring-hermes-messaging-service.md) **Related topics** [Activating the Hermes Messaging Service]() [Set up a secure connection to the Hermes Messaging Service]() [Restricting access to Hermes]() [Enable encryption at rest for a Hermes topic]()
| title | Revoke a Hermes certificate |
| description | Revoke a ServiceNow instance-signed certificate so that it can't be used in secure connections to the Hermes Messaging Service. |
| locale | en-US |
| canonical_url | https://www.servicenow.com/docs/r/australia/servicenow-platform/multi-instance-framework-hermes/revoke-certificate.html |
| release | australia |
| product | Multi-Instance Framework - Hermes |
| classification | multi-instance-framework-hermes |
| topic_type | task |
| last_updated | 2026-09-10 |
| reading_time_minutes | 1 |
| breadcrumb | ConfigureHermes Messaging ServiceManage service capabilitiesExtend ServiceNow AI Platform capabilities |