---
sourceDocument: Australia Platform security
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/de-DE/platform-security

 Release :

    - australia

ft:locale :

    - de-DE

ft:publication_title :

    - Australia Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Create a service provider key store for SAML

# Create a service provider key store for SAML {#ariaid-title1}

* Freigeben Version: Australia
* 
* Aktualisiert 12. März 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 Minute Lesedauer

Create a Java key store containing the following items for your instance to sign logout requests.

## Vorbereitungen

Role required: sso_config_admin, business_rule_admin, script_include_admin

## Warum und wann dieser Vorgang ausgeführt wird

* Signed server certificate for the instance
* Signed CA certificate
* Public and private key pair
{#t_CreatingAServiceProviderKeyStore__ul_dbq_gl5_vp}

You may create your own signed certificate with a private certificate authority or
purchase one from a public certificate authority.  
The following steps illustrate how to generate a new Java Keytool keystore file, create a certificate signing request (CSR), and import certificates. Any root or intermediate certificates need to be imported before importing the primary certificate for your domain. Type these commands in a command line interface.  
Hinweis:  
These instructions are not specific to the platform and require technical knowledge of security certificates to complete. Technical Support cannot assist in creating the certificates.

## Prozedur

1. Generate a Java keystore and key pair.  

       keytool -genkey -alias mydomain -keyalg RSA -keystore my.keystore

2. Generate a CSR for an existing Java keystore.  

       keytool -certreq -alias mydomain -keystore my.keystore -file mydomain.csr

3. Import a root or intermediate certificate authority CA certificate to an existing Java keystore.  

       keytool -import -trustcacerts -alias root -file Thawte.crt -keystore my.keystore

4. Import a signed primary certificate to an existing Java keystore.  

       keytool -import -trustcacerts -alias mydomain -file mydomain.crt -keystore my.keystore