---
sourceDocument: Australia Financial Services Operations
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/de-DE/financial-services-operations

 Release :

    - australia

ft:locale :

    - de-DE

ft:publication_title :

    - Australia Financial Services Operations

ft:clusterId :

    - finso

bundleId :

    - finso

workflow :

    - Customer and Industry


---

# Set up a Token Signer

# Set up a Token Signer {#ariaid-title1}

* Freigeben Version: Australia
* 
* Aktualisiert 12. März 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 Minute Lesedauer

Configure a token signer to enable secure JWT-based authentication for tokenizer service integration. This task involves creating an OAuth entity profile with JWT Bearer grant type, setting up OAuth credentials, and
establishing a connection alias that links to your tokenizer service endpoint.

## Vorbereitungen

Role required: admin

Complete set up for context-aware authorization in the tokenizer service. See [Initial steps to setup schema and connections for Card data security (KB2238661)](https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB2238661) for more information.  
Perform the following set up tasks for the token signer:

* [Create a JKS file](https://servicenow-prod.fluidtopics.net/jW6Gj~DpO4UVrL0sxwTfeQ "Generate a Java KeyStore (JKS) file for OAuth authentication setup. This process involves extracting the private key from a credentials JSON file and converting it through PEM format to create the required JKS file.")
* [Create an X.509 Certificate](https://servicenow-prod.fluidtopics.net/qfJWVOsJG_z9cH6Ejz3Vdw "Create an X.509 certificate record in ServiceNow by uploading a Java Key Store (JKS) file and configuring the certificate settings. This enables secure authentication and encryption for Card Data Security applications.")
* [Set up a JWT key](https://servicenow-prod.fluidtopics.net/Dvmrs4moVChLaUgqsmFrTg "Configure a JWT key to enable secure authentication for Card Data Security by linking X.509 certificates with tokenizer service credentials. This setup is required before creating a JWT provider for OAuth authentication workflows.")
* [Set up a JWT Provider](https://servicenow-prod.fluidtopics.net/QND~eI7QRhvo3nodzD5vnA "Configure a JWT Provider to enable secure token-based authentication for Card Data Security by setting up signing configurations and claim values. This provider generates JSON Web Tokens that authenticate requests to the tokenizer service using credentials from your tokenizer service JSON file.")

{#set-up-a-token-signer__ul_rrb_hyx_g3c}  
Hinweis:  
Ensure you are using the Token Signing credentials JSON file from the tokenizer service when performing the above set up tasks.

## Prozedur

1. Navigate to Alloauth_entity_profile.do.
2. Enter the following field values.

   | Field | Value |
   | Grant type | JWT Bearer |
   | OAuth provider | \<The OAuth provider for the client bearer token\> |
   | JWT Provider | \<The Token Signing JWT Provider created from the task [Set up a JWT Provider](https://servicenow-prod.fluidtopics.net/QND~eI7QRhvo3nodzD5vnA "Configure a JWT Provider to enable secure token-based authentication for Card Data Security by setting up signing configurations and claim values. This provider generates JSON Web Tokens that authenticate requests to the tokenizer service using credentials from your tokenizer service JSON file.")\> |
   |-|-|

   {#set-up-a-token-signer__choicetable_pyb_2xx_g3c}
3. Select Submit.
4. In the OAuth Entity Profiles list, verify Is default is set to `false`.
5. [Set up an OAuth Credential](https://servicenow-prod.fluidtopics.net/X40Bly_Vercc1Echn4Bm4g "Create an OAuth 2.0 credential to enable secure authentication for Card Data Security integrations. This credential uses an existing OAuth Provider to establish authenticated connections with external systems.").  
   In the OAuth entity profile field, select the OAuth entity profile created earlier in this procedure.
6. Navigate to AllIntegration HubConnections \& CredentialsConnection \& Credential Aliases.
7. Select the CardDataSecurity.DataTokenSigner record.
8. In the Connections related list, select New.
9. Enter the following field values.

   | Field | Value |
   | Name | \<Name of the HTTP(s) connection\> |
   | Connection URL | \<The tokenizer service endpoint URL i.e. the `tokenURI` value from the token signing credentials JSON file\> |
   | Credential | \<The OAuth Credential created earlier in this procedure\> |
   | Connection alias | sn_data_sec.CardDataSecurity_DataTokenSigner |
   | vault_id Attribute | \<The vault ID of the tokenizer service data vault\> |
   |-|-|

   {#set-up-a-token-signer__choicetable_v4f_gwy_23c}

## Ergebnisse

The token signing JWT Provider is configured.