---
sourceDocument: Australia Security Management
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/security-management

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Security Management

ft:clusterId :

    - security

bundleId :

    - security

workflow :

    - Technology


---

# Replace an untrusted or expired third-party SSL certificate

# Replace an untrusted or expired third-party SSL certificate {#ariaid-title1}

* Release version: Australia
* 
* Updated March 12, 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

When an SSL connection is required in an integration, there are circumstances when
the certificate provided by the third-party vendor is either not yet trusted in ServiceNow or has expired. You can
replace it or add a new certificate.

## Before you begin

Role required: sn_ti.write

## Procedure

1. Acquire the SSL certificate from the third-party vendor.  
   For example, you can import an X.509 Certificate (PEM) from an SSL endpoint in the Firefox browser, as follows.
   1. Enter the endpoint URL into the browser address bar.  
      For example: `https://<3rdparty>/`.
   2. Click the lock icon in the address line.
   3. Click More Information and click the Security tab.
   4. Click View Certificate and click the Detail tab.
   5. Click Export to save the PEM into your local file system.
   6. Open the saved file in any text editor tool and copy the content into the clipboard.  
      It must begin with `-----BEGIN CERTIFICATE-----` and end with `-----END CERTIFICATE-----`.
   {#t_Import3rdPartySSLCert__substeps_gkc_f3w_tv}
2. Navigate to System DefinitionCertificates.
3. Click New and [create a new
   record](https://www.servicenow.com/docs/access?context=t_UploadACertificateToAnInstance&version=australia&pubname=australia-platform-security&ft:locale=en-US) for the integration.
4. In PEM Certificate, paste in the certificate you downloaded and copied into the clipboard earlier.
5. Click Save.  
   The other fields in the record are generated automatically.

*[\>]: and then