{"revision":"c10276e953456835cdbb1f3a60d58ae1980be353","document":{"id":29481,"path":"it-operations-management/discovery/certificate-routing-policy-field-values.md","title":"Certificate Routing Policy form for ACME","bundle":null,"doc_type":null,"release":"australia","body":"\n# Certificate Routing Policy form for ACME\n\nFill in the Certificate Routing Policy form to set up the routing policy for ACME.\n\n\n
\n\nField\n\n\n\nDescription\n\n
\n\nName\n\n\n\nName of the routing policy.\n\n
\n\nCertificate Authority\n\n\n\nCertificate Authority \\(CA\\) used to create, renew, or revoke certificates. The available options are:- DigiCert\n- Entrust\n- Let's Encrypt\n- EJBCA\n- Sectigo Public ACME\n- Sectigo Universal ACME\n\n**Note:** If you added an ACME-compatible CA, it is listed here as a CA type. For more information, see [Add ACME-compatible certificate authorities](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/it-operations-management/discovery/add-acme-compatible-certificate-authorities.md).\n\n
\n\nCertificate Authority API URL\n\n\n\nFor DigiCert CA, the API URL to handle automated processes and revocation flows.\n\n
\n\nAssignment Group\n\n\n\nGroup to which a manual certificate task is assigned.\n\n
\n\nDNS Challenge Action\n\n\n\nFlow designer option to resolve DNS challenges automatically \\(for example, base script - **ACME DNS Challenge - GoDaddy**\\).**Note:** You can also create a new action similar to the base script to support any other DNS provider. The flow\\_designer role or action\\_designer role is required for this action.\n\nIf **None** is selected, then the new or renew certificates are done using ACME manual flow of DNS challenge.\n\n
\n\nCredential Alias\n\n\n\nCredential alias linked to the CA credential.\n\n
\n\nVault Type\n\n\n\nExternal vault provider to use for private key storage with this routing policy. When set to HashiCorp Vault, the system stores private keys in the HashiCorp vault during automated certificate operations.\n\n
\n\nCertificate Purpose\n\n\n\nIndicates whether the certificate request is for an internal or external purpose.\n\n
\n\nCertificate Format\n\n\n\nFormat in which the certificate is generated. The available options are: PEM, DER, and PKCS12. The default value is PEM.\n\n
\n\nPKCS12 Password Vault Reference\n\n\n\nReference to the PKCS\\#12 key store password stored in your external vault. For HashiCorp Vault, enter the full path to the secret. This field is required when the Certificate Format field is set to PKCS12.\n\n
\n\nPKCS12 Password Vault Key\n\n\n\nName of the key within the vault secret that holds the PKCS\\#12 key store password. This field is required when the Certificate Format field is set to PKCS12 and the Vault Type field is set to HashiCorp Vault.\n\n
\n\nAllow validity override\n\n\n\nFor DigiCert ACME, Sectigo Public ACME, and Sectigo Universal ACME CAs, option to include a custom certificate validity period in the ACME order sent to the CA. When selected, the system sends the requested validity period \\(notAfter\\) to the CA. When cleared, the system omits the validity period and the CA applies its default validity. This check box is selected by default.**Note:** Clear this check box if the CA profile rejects client-requested validity.\n\n
\n\nTask Approval Group\n\n\n\nGroup to which the task approval is assigned.\n\n
\n\nDNS Task Assignment Group\n\n\n\nGroup to which the DNS challenge for this task is assigned.\n\n
\n\nMid Server\n\n\n\nMID Server for certificate actions.\n\n
\n\n**Note:**\n\nThe **Organization**, **Organizational Unit**, **Locality**, **State**, **Country**, and **Email Address** fields accept comma-separated values. The **Subject Common Name** and **Subject Alternative Name** fields take regex expressions. The regex format has the following restrictions:\n\n- Shouldn’t contain commas.\n- Shouldn’t start or end with a forward slash \\(/\\).\n\n
**Parent Topic:**[Certificate Inventory and Management reference](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/it-operations-management/discovery/cert-invt-mgmt-references.md)\n\n"}}