---
sourceDocument: Australia Conversational Interfaces
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/pt-BR/conversational-interfaces

 Release :

    - australia

ft:locale :

    - pt-BR

ft:publication_title :

    - Australia Conversational Interfaces

ft:clusterId :

    - convint

bundleId :

    - convint

workflow :

    - Platform


---

# Generate a Java Keystore (JKS) file and configure security on your ServiceNow instance

# Generate a Java Keystore (JKS) file and configure security on your ServiceNow instance {#ariaid-title1}

* Versão de lançamento: Australia
* 
* Atualizado 12 de mar. de 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 2 min. de leitura

To use Google Dialogflow as your NLU provider for Virtual Agent, use the private key you downloaded to generate a JKS file and
set up authentication in your ServiceNow instance.

## Antes de Iniciar

Make sure the Java Development Kit (JDK) is installed on the system.

Role required: admin

## Por Que e Quando Desempenhar Esta Tarefa

Nota:  
Google Dialogflow uses OAuth2.0 for authentication.

## Procedimento

1. Open a command shell window.
2. To create a JKS file from the P12 file, do the following:
   1. Run the following command:  

          keytool -importkeystore -srckeystore /local_dir/myprivatekey.p12 -srcstoretype pkcs12 -destkeystore /local_dir/myprivatekey.jks -deststoretype JKS

      In this example, `/local_dir/myprivatekey.p12` points
      to the private key that you downloaded in the previous step.
   2. When prompted, enter <kbd class="ph userinput">notasecret</kbd> for the destination keystore password and the source keystore password.  
      <kbd class="ph userinput">notasecret</kbd> is the private key password you noted from the previous step. You will enter this password three times.

   {#vad-configure-dialogflow-security__substeps_fcv_rjk_btb}  
   A JKS file is created in the same directory.
3. In your ServiceNow instance, add the JKS file to the Google Dialogflow X.509 certificate record:
   1. Navigate to All, and then enter <kbd class="ph userinput">sys_certificate.list</kbd> in the filter.
   2. Select Google Dialogflow X.509 Certificate to open the record.
   3. On the form, fill in the fields as follows.  
      {#vad-configure-dialogflow-security__table_dft_cbt_xsb__entry__2}

      | Field | Value |
      |-|-|
      | Type | Select Java Key Store. |
      | Key store password | Enter the private key password that you specified when creating the JKS file (<kbd class="ph userinput">notasecret</kbd>). |
      | Active | Select this option to activate the certificate. |
      [ ]

      {#vad-configure-dialogflow-security__table_dft_cbt_xsb}
   4. Select the attachment icon and upload the JKS file to the record.
   5. Under Related Links, select Validate Stores/Certificates.  
      You should see a Valid key_store message.
   6. Select Update.
   {#vad-configure-dialogflow-security__substeps_edv_n1t_xsb}
4. In your ServiceNow instance, update the Google Dialogflow JWT (JSON Web Token) Keystore alias record.
   1. Navigate to All, and then enter <kbd class="ph userinput">jwt_keystore_aliases.list</kbd> in the filter.
   2. Select Google Dialogflow JWT Keystore to open the record.
   3. On the form, fill in the fields as follows.  
      {#vad-configure-dialogflow-security__table_qzj_kgt_xsb__entry__2}

      | Field | Value |
      |-|-|
      | Signing Keystore | Select Google DialogFlow X.509 Certificate. |
      | Signing Algorithm | Select RSA 256. |
      | Signing Key | Enter the private key password that you specified when creating the JKS file (<kbd class="ph userinput">notasecret</kbd>). |
      | Key Id | Leave this field empty. |
      [ ]

      {#vad-configure-dialogflow-security__table_qzj_kgt_xsb}
   4. Select Update.
   {#vad-configure-dialogflow-security__substeps_ib5_bgt_xsb}
5. In your ServiceNow instance, update the Google Dialogflow JWT provider record.
   1. Navigate to All, and then enter <kbd class="ph userinput">jwt_provider.list</kbd> in the filter.
   2. Select Google Dialogflow JWT Provider to open the record.
   3. In the Signing Configuration field, select Google DialogFlow JWT Keystore.
   4. In the Standard Claims related list, enter the email address for your Google Dialogflow agent service account as the Claim Value for the iss entry.  

      For more information, refer to [Create a service account and private key in Google Dialogflow ES](https://servicenow-prod.fluidtopics.net/m4LNdOhKe2oH2WDvhS8IvQ "To use Google Dialogflow as your NLU provider for Virtual Agent, create a service account and private key for your agent in Google Dialogflow.").
   5. Select Update.
   {#vad-configure-dialogflow-security__substeps_hvd_qht_xsb}
6. In your ServiceNow instance, update the Google Dialogflow NLU OAuth Provider record:
   1. Navigate to All, and then enter <kbd class="ph userinput">oauth_entity.list</kbd> in the filter.
   2. Select Google Dialogflow NLU to open the record.
   3. On the form, fill in the fields as follows.  
      {#vad-configure-dialogflow-security__table_zt4_1kt_xsb__entry__2}

      | Field | Value |
      |-|-|
      | Client ID | Enter the unique ID for your Google Dialogflow agent service account that you saved from a previous step. |
      | Client Secret | Enter the private key password that you specified when creating the JKS file (<kbd class="ph userinput">notasecret</kbd>). |
      | Default Grant Type | Select JWT Bearer. |
      [ ]

      {#vad-configure-dialogflow-security__table_zt4_1kt_xsb}
   4. Select Update.
   {#vad-configure-dialogflow-security__substeps_sg3_vjt_xsb}
7. In your ServiceNow instance, update the GoogleDialogFlowESNLUPrediction system alias.
   1. Navigate to All, and then enter <kbd class="ph userinput">sys_alias.list</kbd> in the filter.
   2. Select GoogleDialogFlowESNLUPrediction to open the record.
   3. Select the Connection Attributes tab and find the EnvID record.
   4. In the Default value column, update the value with the name of the Google Dialogflow environment where the agent was published.  
      The default value is prod.

   5. Select Update.
   {#vad-configure-dialogflow-security__substeps_u4b_klt_xsb}
8. Specify Google Dialogflow ES as your NLU provider in Virtual Agent.  
   For more information, see [Configure Natural Language Understanding in Virtual Agent](https://servicenow-prod.fluidtopics.net/La4Q6KqoDw2XufrUntqemg "Configure Natural Language Understanding (NLU) in Virtual Agent to identify the NLU service provider for your instance. You can also specify the languages of NLU models used during conversation design, based on the languages supported by your NLU provider and the ServiceNow AI Platform.").
**Tópico anterior:** [Create a service account and private key in Google Dialogflow ES](https://servicenow-prod.fluidtopics.net/m4LNdOhKe2oH2WDvhS8IvQ "To use Google Dialogflow as your NLU provider for Virtual Agent, create a service account and private key for your agent in Google Dialogflow.")  
**Próximo tópico:** [Activate the Google Dialogflow ES service and enable it in your instance](https://servicenow-prod.fluidtopics.net/HFvrfMRTj0UQQ~TOIGVFEQ "When you activate the Google Dialogflow ES service in the Open NLU Drivers [open_nlu_driver] table, the service becomes available as an option in Virtual Agent NLU settings.")