Search for	Example	Results
A single word	`cat`	Topics that contain the word "cat". You will also find its grammatical variations, such as "cats".
A phrase. You can specify that the search results contain a specific phrase.	`"cat food"` (quotation marks)	Topics that contain the literal phrase "cat food" and all its grammatical variations. Without the quotation marks, the query is equivalent to specifying an OR operator, which finds topics with one of the individual words instead of the phrase.

Search for	Operator	Example
Two or more words in the same topic	`AND` `and` `+` (plus symbol) `&` (ampersand)	`cat AND dog` `"cat food"+milk` `"cat food"&"dog food"`
Either word in a topic	`OR` `or` `\|` (pipe)	`cat OR dog` `cat \| dog`
Topics that do not contain a specific word or phrase	`NOT` `not` `!` (exclamation point)	`NOT cat` `! dog`
Topics that contain one string and do not contain another	`^` (caret)	`cat ^ mouse`
A combination of search types	`( )` parentheses	`cat + (dog \| mouse)` `cat \| dog + (! mouse)`

Universal DiscoveryContent Pack 27.00 (CP27)

Integrate > Third Party Integrations > ServiceNow Integration Using Enhanced Generic Adapter > Push Integration with ServiceNow > How to Enable Web Services Security (WS-Security, WSS) for Push Integration

How to Enable Web Services Security (WS-Security, WSS) for the Push Integration

To enable WSS for the UCMDB-ServiceNow push integration, do the following:

Create a Java KeyStore (JKS) with your certificate
1. Make sure that Java is installed on your machine and the Java bin directory is in your PATH.
2. Use the keytool embedded in Java to create a JKS as follows.
  keytool -genkey -keyalg RSA -alias <your keystore alias> -keystore <the keystore file that you want to create> -storepass <your keystore password> -validity <the number of days that your certificate should be valid> -keysize 2048
3. The system will ask you some questions, you just fill in with arbitrary values.
4. A JKS file is created. It is a Java Keystore that contains your new certificate and the public and private keys.
Extract the certificate to a PEM file
1. Use the keytool to extract the certificate from the Keystore and save it in PEM format as follows.
  keytool -exportcert -alias <the alias for your certificate in Keystore> -keypass <your key password> -keystore <your created keystore file name>-storepass <your keystore password> -rfc -file <the file name that you want to create in PEM format>
2. A file with the .pem extension is created. This file contains your certificate in PEM format.
3. Navigate to the directory where the .pem certificate is exported and run the following command:
  type <your created PEM file name>
Configure WSS on the ServiceNow side
1. Go to Inbound SOAP Web Service Security.
2. Follow 3.1 Enabling WS-Security Verification.
  
  Note Take into account step 3.1.1 if you are using MID Server, ODBC Driver, Remote Update Sets, and high availability cloning SOAP interfaces because they cannot use SOAP WSS authentication due to technical implications. You need to allow them to bypass the WSS authentication requirements by marking their user accounts as internal integration users.
3. Follow 3.2 WS Security Profiles.
  1. Create a WSS profile for x.509 Token Profile.
    
    In the WS Security Profile window, make sure that the following fields are configured as follows:
    
    In the Type field, select X509.
    
    In the X509 Certificate field, select the PEM file that you created in step 2.
  2. Create a WSS profile for Username Token Profile.
    
    In the WS Security Profile window, make sure that the following fields are configured as follows:
    
    In the Type field, select Username.
    
    In the Profile action field, select Specify user to authenticate.
4. (Optional) You may want to restrict all SOAP requests to use WSS when these requests come into your instance. To do so, go to System Web Services > Properties module, and select the check box under Require WS-Security header verification for all incoming SOAP requests.

Configure the integration point on the UCMDB side

In the Adapter Properties section, enter the following required properties.

Field	Value
WSSKeystoreAlias	The WSS Keystore alias that you created in step 1.
WSSKeystoreFile	The path (including the file name) of the WSS Keystore file that you created in step 1.
WSSKeystoreKeypass	The key password of WSS Keystore that you created in step 1.
WSSKeystoreStorepass	The WSS Keystore password that you created in step 1.
WSSKeystoreType	jks
WSSPassword	The password of WSS Username Token Profile that you created in step 3.
WSSUsername	The user name of WSS Username Token Profile that you created in step 3.

For more details, see Create the integration point.

Activate logging on the ServiceNow side

Refer to 3.4 Enabling WS-Security Logging.

Send Help Center feedback