---
sourceDocument: Australia IT Operations Management
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/de-DE/it-operations-management

 Release :

    - australia

ft:locale :

    - de-DE

ft:publication_title :

    - Australia IT Operations Management

ft:clusterId :

    - itom

bundleId :

    - itom

workflow :

    - Technology


---

# Secure a custom plugin with a certificate

# Secure a custom plugin with a certificate {#ariaid-title1}

* Freigeben Version: Australia
* 
* Aktualisiert 12. März 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 Minute Lesedauer

When you customize or create an Agent Client Collector plugin, you can secure the plugin with either a third-party certificate or an internal secure certificate in the plugin's script. Official plugins are signed by an external certificate
authority.

Using a self-signed certificate is enabled by default. To disable this feature, set the verify-plugin-signature property to False. When you disable a self-signed certificate, your
configured plugins use no certificate.

For details on how to configure a self-signed certificate by using OpenSSL, see [Enable OpenSSL secure signing for plugins](https://servicenow-prod.fluidtopics.net/UD40gFeQTkY6Vsh4zJzUbg "Create a self-signed certificate for an Agent Client Collector plugin. The following procedure gives an example of how to create an x509 certificate using OpenSSL. For other certificate types, consult OpenSSL documentation."). For details on how to configure a third-party certificate, consult the third-party vendor's documentation.

When the agent's current certificates can't validate a plugin, Agent Client Collector requests the updated certificates from its synchronized MID Server. You can manually refresh the agent to receive these certificates before the scheduled synchronization. For details, see [Manually refresh Agent Client Collector certificates](https://servicenow-prod.fluidtopics.net/8El2lBB8F9HpbUoNA7Nk9w "Refresh Agent Client Collector self-signed certificates manually to validate Agent Client Collector plugins, instead of waiting for the scheduled synchronization. For example, you can use this feature when the agent can't validate a plugin and you don't want to wait for the scheduled synchronization.").

You can manually save the certificates in a directory on the MID Server that is connected to the installed agents. Any agent that's installed in your environment can then access the certificates from that MID Server.

For details on how to configure the certificate synchronization properties, see [Synchronization properties for validating Agent Client Collector plugins](https://servicenow-prod.fluidtopics.net/bl7Hbii8_jUhPt_L00_OVg "Use the following properties when synchronizing public certificates from the MID Server to the Agent Client Collector.").