{"revision":"c10276e953456835cdbb1f3a60d58ae1980be353","document":{"id":20034,"path":"impact/validate-instance-connection.md","title":"Validate your instance connection","bundle":null,"doc_type":null,"release":"australia","body":"\n# Validate your instance connection\n\nValidate the connection between registered instances to confirm that authentication and My SN Instances configuration are correct before enabling integrations.\n\n## Before you begin\n\nMy SN Instances registration and authentication must be complete before validating. See [Register your instance](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/impact/register-your-instance.md) and either [Configure the Basic authentication method](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/impact/configure-basic-auth-method.md) or [Configure the OAuth authentication method development instance](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/impact/configure-oauth-auth-method.md).\n\nRole required: `sn_se.scan_engine_admin`\n\n## Procedure\n\n1.  Navigate to **ALL** > **Impact** > **Configuration** > **Scan Engine Properties** > **My SN Instances**.\n\n2.  Open the instance record to validate.\n\n3.  Select **Validate Connection**.\n\n    Connection Status updates to `Connection valid`.\n\n\n## What to do next\n\nIf validation fails, resolve the root cause before retrying. Retrying without fixing the root cause can trigger the account lockout policy. Work through the following checks in order:\n\n1.  The integration user password was set using `setDisplayValue()` on this instance.\n2.  The authentication record password was re-entered in the UI on this instance.\n3.  Both roles — `sn_se.scan_engine_admin` and `sn_se.internal_rest_integration` — are explicitly assigned to the integration user on this instance.\n4.  The instance URL is exactly `https://instancename.service-now.com` with no `www.`, trailing slash, or path.\n5.  Any pending Scan Engine scripting scope request in Key Management Framework access policies has been approved, and you have logged out and back in before retrying.\n    1.  Assign the system administrator role the Key Management admin role\n    2.  Assign the sn\\_kmf.cryptographic\\_manager role to the system admin.\n    3.  Navigate to **All** > **Key Management** > **Module Access Policies**.\n    4.  Search for Scan Engine in the Script Table Target script: Script Include: ScanEngineApiUtil\\[Omitted image \"scan-engine-kmf-reject-map-fix.png\"\\] Alt text: Scan Engine in the Script Table Target script Script Include: ScanEngineApiUtil\n    5.  Open the record and set the Result to **Track**.\n\nIf the account has been locked out, see [Recover from account lockout](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/impact/recover-from-account-lockout.md).\n\n**Parent Topic:**[Register your instance](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/impact/register-your-instance.md)\n\n"}}