---
sourceDocument: Yokohama IT Operations Management
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/yokohama/it-operations-management

 Release :

    - yokohama

ft:locale :

    - en-US

ft:publication_title :

    - Yokohama IT Operations Management

ft:clusterId :

    - itom

bundleId :

    - itom

workflow :

    - Technology


---

# Configure a secure MID Web Server extension

# Configure a secure MID Web Server extension {#ariaid-title1}

* Release version: Yokohama
* 
* Updated January 30, 2025
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

Configure a TLS listener for extra security and encryption of data transferred to and
from the MID Web Server extension. Access both a private key and a
certificate (or certificate chain) from a Java keystore to use during the TLS handshake
where the MID Web Server and the client acknowledge each other.

## Before you begin

Role required: agent_client_collector_admin

## Procedure

1. Navigate to MID ServerExtensionsMID Web Server.
2. Select New.
3. In the Authentication Type field, select an authentication type to be used.  
   * Keybased -- See [Configure key-based MID Web Server authentication](https://servicenow-prod.fluidtopics.net/pZUyTnNO1DjS4NgiTf1x6g "Provide added security to your MID Web Server extension by using key-based authentication. Generate an authentication token to be sent in the Authorization header of incoming client requests.")
   * Basic -- Standard username/password authentication
   * API key -- See [Configure MID Web Server API key authentication](https://servicenow-prod.fluidtopics.net/S7AyVLPFGsZ0MGuAzDaFSA "Authenticate incoming requests from clients to the MID Web Server extension using API key authentication. API authentication is a secure and simple way to authenticate your request. You can create or modify a MID Web Server API key.")
   * mTLS -- See [MID Web Server and agent mTLS Authentication](https://servicenow-prod.fluidtopics.net/H5M4AD_YkGgzKe40o1Fb~w "Mutual authentication using the Transport Layer Security protocol (mTLS) is a secure, certificate-based authentication scheme. With mTLS, the server (the MID Web Server extension) and the client (the agent) authenticate each other.")
   {#configure-midwebserver-extension-secure__ul_fdw_q32_fsb}
4. Select either the MID unified keystore or the web server keystore.  
   The MID Web Server unified keystore is the most efficient option. If you want to enable backward compatibility and the ability to store keypairs in an additional keystore, use the Web server keystore (which allows you to use the MID unified keystore as well).

   | Option | Description |
   | MID unified keystore | 1. Select the Use MID Unified Keystore check box 2. Enter an alias name in the Keystore Certificate Alias field or leave the field empty to use the keystore's default alias. For more information, see the Install custom certificates in the MID Server unified key store section in [MID Server unified key store](https://www.servicenow.com/docs/access?context=mid-unified-keystore&version=yokohama&pubname=yokohama-servicenow-platform&ft:locale=en-US). Important: Leaving the Keystore Certificate Alias field empty causes connecting clients to skip certificate verification. Instead, the MID Server uses its own self-signed certificate. {#configure-midwebserver-extension-secure__ol_nvs_wvg_dsb} |
   | Web server keystore | 1. Clear the Use MID Unified Keystore check box. 2. Specify an alias name in the Keystore Certificate Alias field or leave the field empty if you have a single alias in that keystore. 3. If the password to the private key of the required alias is different from the keystore password, specify the alias in the Keystore Key Password field. 4. Enter the keystore password in the Keystore Password field. {#configure-midwebserver-extension-secure__ol_rgl_5wg_dsb} |
   |-|-|

   {#configure-midwebserver-extension-secure__choicetable_ezm_tvg_dsb}
{#configure-midwebserver-extension-secure__steps_hsb_rnc_xrb}
**Related tasks**   

* [Connect the agent to the MID Server using mTLS](https://servicenow-prod.fluidtopics.net/ZMhnE1YVvmuFaQJw8FpPjA "Before configuring mTLS authentication on the agent, you must run a series of commands that enable configuring Transport Layer Security (TLS) authentication.")

*[\>]: and then