---
sourceDocument: Yokohama IT Operations Management
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/yokohama/it-operations-management

 Release :

    - yokohama

ft:locale :

    - en-US

ft:publication_title :

    - Yokohama IT Operations Management

ft:clusterId :

    - itom

bundleId :

    - itom

workflow :

    - Technology


---

# MID Web Server and agent mTLS Authentication

# MID Web Server and agent mTLS Authentication {#ariaid-title1}

* Release version: Yokohama
* 
* Updated January 30, 2025
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

Mutual authentication using the Transport Layer Security protocol (mTLS) is a secure, certificate-based authentication scheme. With mTLS, the server (the MID Web Server extension) and the client (the agent) authenticate each other.

TLS authentication occurs when a client (such as a web browser) authenticates the server it's accessing by validating the certificate presented by the server. The client verifies that the certificate (or certificate chain) is
signed by a trusted certificate authority (CA). The client must have access to a bundle of CA certificates, which it uses to validate the server certificate.

When mTLS is configured, the client presents a certificate or certificate chain to the server,
and the server authenticates the client in the same way that the client authenticates the server
(mutual authentication).

In addition to verifying the certificate signature, some TLS implementations also check the revocation status of the certificate. In these cases, the Online Certificate Status
Protocol (OCSP) is used. In this protocol, the verifying party sends a request to the OCSP responder set up by the CA that issued the presented certificate. (The responder's address is typically embedded in the CA-issued
certificates). The response indicates whether the presented certificate is revoked.

Before enabling mTLS, you must first create keys and certificates, install the .pem file on your MID Server, and connect the agent to your MID Server.
* **[Create keys and certificates](https://servicenow-prod.fluidtopics.net/7khjURV6QwpOY6NpnvGsyA)**   
  Create keys and certificates in your root directory to enable Transport Layer Security (TLS) setup. TLS setup is necessary before you can configure mTLS on the MID Web Server and agent.
* **[Set up the MID Web Server with a .pem file](https://servicenow-prod.fluidtopics.net/zEhh1LCUgaECAkon8NCNuw)**   
  Install the .pem file into the MID unified keystore and set up the MID Web Server to enable configuring mTLS on your MID Web Server and agent.
* **[Connect the agent to the MID Web Server using TLS](https://servicenow-prod.fluidtopics.net/56b64d1EAbWq9r8eRitIIw)**   
  Connect the agent to the MID Web Server to enable configuring mTLS on your MID Web Server and agent.
* **[Configure mTLS authentication for a MID Web Server](https://servicenow-prod.fluidtopics.net/zgZd4l4Sj1MUzveZwd7CmQ)**   
  Enhance security in your MID Web Server extension by enabling mTLS authentication.
* **[Connect the agent to the MID Server using mTLS](https://servicenow-prod.fluidtopics.net/ZMhnE1YVvmuFaQJw8FpPjA)**   
  Before configuring mTLS authentication on the agent, you must run a series of commands that enable configuring Transport Layer Security (TLS) authentication.

**Related tasks**   

* [Configure the MID Web Server extension](https://servicenow-prod.fluidtopics.net/_6TI0U~gdVg0W_7HIWP7AA "The MID Web Server is a MID Server extension that enables developing REST APIs to send events and metrics to the MID Server. The extension is leveraged by other MID Server extensions, such as Metric Intelligence, MID WebService Event Listener, and the Agent Client Collector websocket endpoint extension.")
* [Configure mTLS authentication for a MID Web Server](https://servicenow-prod.fluidtopics.net/zgZd4l4Sj1MUzveZwd7CmQ "Enhance security in your MID Web Server extension by enabling mTLS authentication.")