---
sourceDocument: Australia Security Management
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/security-management

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Security Management

ft:clusterId :

    - security

bundleId :

    - security

workflow :

    - Technology


---

# Using Certificates for authentication

# Using Certificates for authentication {#ariaid-title1}

* Release version: Australia
* 
* Updated March 12, 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

Request an access token with a certificate credential.

## Before you begin

1. You can either use a self-signed certificate or CA issued certificate. You can create a self-signed certificate by executing the PowerShell script as outlined in [Setting up an Azure AD app for app-only access](https://docs.microsoft.com/en-us/sharepoint/dev/solution-guidance/security-apponly-azuread#setting-up-an-azure-ad-app-for-app-only-access). The script generates two files: .PFX file and .CER file.  
   Note:  
   Ensure that you are aware of the password that is used to encrypt private key to generate the .PFX file and .CER file.
2. Use the .PFX file to create a Java Key Store (JKS) file.  
   Note:  
   Ensure that you are aware of the password that is used to generate JKS file from the .PFX file.
{#using-certificates-for-authentication__ol_mv4_5gy_2sb}Role required: admin

## Procedure

1. Navigate to App registrations in Azure AD portal.
2. Select Certificates \& secrets from the Manage section.
3. In the Certificates tab, select Upload Certificate.
4. On the form, fill these values.  
   {#using-certificates-for-authentication__table_lxy_jbx_dsb__entry__2}

   | Field | Description |
   |-|-|
   | Upload a certificate (public key) with one of the following file types: .cer, .pem, .crt | .CER file you had generated using the PowerShell script. |
   | Description | Description of the certificate. |
   [ ]

   {#using-certificates-for-authentication__table_lxy_jbx_dsb}
5. Select Add.  
   The certificate is uploaded and its details are displayed under the Certificates tab.
6. Copy the Thumbprint value of the uploaded certificate.  
   The Thumbprint value is a hexadecimal value.
7. Encode the Thumbprint value to a Base64 value and record the value for later use.  
   Note:  
   You can use a Hexadecimal to Base64 (Hex to Base64) converter tool to encode the Thumbprint value to a Base64 value.
{#using-certificates-for-authentication__steps_ajc_cnr_gwb}
* **[Attach a Java Key Store certificate for MS Teams](https://servicenow-prod.fluidtopics.net/ZWsIdU7EtX6Rdvk7rv2Eeg)**   
  Enable the JWT Bearer Grant token authentication by attaching a valid Java Key Store (JKS) certificate.
* **[Configure the JWT signing key for MS Teams](https://servicenow-prod.fluidtopics.net/D4P_DpdGm2IXigQ9vDgx2Q)**   
  Create a JSON Web Token (JWT) signing key to assign to your Java Key Store certificate.
* **[Configure the JWT provider for MS Teams](https://servicenow-prod.fluidtopics.net/b3Ib6DqcFZ6qV_0kuoLr~Q)**   
  Add a JSON Web Token (JWT) provider to your ServiceNow instance.
* **[Establish a connection using certificates](https://servicenow-prod.fluidtopics.net/bwzBVbfqwVxf1H1_0Fi_NQ)**   
  Establish a connection between newly created Microsoft Teams graph application using certificates.