{"revision":"c10276e953456835cdbb1f3a60d58ae1980be353","document":{"id":30094,"path":"it-operations-management/discovery-and-service-mapping-patterns/f5-certificate-discovery.md","title":"F5 certificate discovery","bundle":null,"doc_type":null,"release":"australia","body":"\n# F5 certificate discovery\n\nThe ServiceNow® Discovery application uses **The F5-SSH-SSL Certification** pattern extension to find all associated certificates on F5 load balancers that use IPv4 addresses, IPv6 addresses, or both.\n\nThe **The F5-SSH-SSL Certification** pattern extension is part of the **F5 load balancer** and **F5 load balancer SSH** patterns that discover [F5 BIG-IP load balancer](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/it-operations-management/itom-visibility/c_LoadBalancerF5BIGIP.md). The **The F5-SSH-SSL Certification** pattern extension discovers F5 load balancer instances running on the hosts via SNMP/SSH, and then discovers certifications used by the running node of the load balancer.\n\n**Note:** For load balancers running IPv6, only SSH is supported.\n\n## Request apps on the Store\n\nVisit the [ServiceNow Store](https://store.servicenow.com/sn_appstore_store.do#!/store/home) to view all the available apps, and for information about submitting requests to the store. For cumulative release notes information for all released apps, see the [ServiceNow Store version history release notes](https://www.servicenow.com/docs/r/store-release-notes/sn-store-release-notes.html).\n\nFor details on system requirements and family compatibility, view the application listing on the [ServiceNow Store](https://store.servicenow.com/sn_appstore_store.do#!/store/home) website.\n\n## IPv6 support limitations\n\n-   F5 SNMP is not supported.\n-   MID Server cannot run REST APIs with IPv6.\n\n    To run discovery with F5 REST, see [KB0864769](https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB0864769).\n\n\n## Prerequisites\n\n-   **Verify the applications are up to date**\n    -   Discovery and Service Mapping Patterns\n    -   CMDB CI Class Models\n-   **Verify the configuration of F5 load balancer**\n    -   Ensure that F5 load balancer instances are up and running.\n    -   Make sure the host \\(that has the F5 instance running on it\\) can discover successfully with the Discovery user credentials.\n-   **Verify the configuration of Discovery**\n\n    Ensure that the Discovery user added in the ServiceNow AI Platform instance can run the following commands:\n\n<table id=\"table_h4p_1p3_2nb\"><thead><tr><th>\n\nCommand\n\n</th><th>\n\nDescription\n\n</th></tr></thead><tbody><tr><td>\n\n`modify`\n\n</td><td>\n\nModifies the TMSH components. You can modify one or more property settings in multiple components.The `modify` command uses the following option: `display-threshold pager`\n\n</td></tr><tr><td>\n\n`display_threshold`\n\n</td><td>\n\nAllows you to re-enable a `display-threshold` in your script.\n\n</td></tr><tr><td>\n\n`list`\n\n</td><td>\n\nDisplays components that you have permission to view or are passed as arguments.The `list` command looks for the following arguments:\n\n-   `ssl-cert`\n-   `certificate-key-size`\n-   `checksum`\n-   `create-time`\n-   `expiration-string`\n-   `issuer`\n-   `subject`\n-   `version`\n-   `fingerprint`\n-   `serial-number`\n-   `subject-alternative-name`\n-   `size`\n\n\n</td></tr></tbody>\n</table>-   **Verify the configuration of the patterns**\n\n    Make sure that the **F5-SSH-SSL Certification** shared library is added to the extension section of the **F5 Load Balancer** and **F5 Load Balancer SSH** patterns, in order to collect the certification attributes.\n\n\n## F5 certificate discovery class model\n\n\\[Omitted image \"F5cert-classmodel.png\"\\] Alt text: F5 certification discovery class model\n\n## Data collected by Discovery during horizontal discovery\n\nThe discovered data includes the following tables and fields.\n\n|Table and field|Description|\n|---------------|-----------|\n|Base Configuration Item Cluster \\[cmdb\\]|\n|Serial number|Serial Number associated with the CI.|\n|Configuration Item \\[cmdb\\_ci\\]|\n|operational\\_status|Operational status of the cluster node.|\n|Unique Certificate \\[cmdb\\_ci\\_unique\\_certificate\\]|\n|fingerprint|Hash value of the certificate.|\n|fingerprint algorithm|Algorithm used to hash the certificate.|\n|subject common name|Identifies the hostname/domain associated with the certificate.|\n|subject distinguished name|Identifying information of the subject.|\n|issuer distinguished name|Distinguished name of the issuer.|\n|comments| |\n|renewal tracking|Indicates whether to create any priority 1 or priority 3 tasks for the expiring certificates.|\n|issuer common name|Common name of the issuer.|\n|valid From|Validity start period of the certificate.|\n|serial Number|Serial Number associated with the CI.|\n|subject country|The subject's two letter country code.|\n|subject organization|Subject’s organization.|\n|Version|X.509 version of the certificate.|\n|Issuer|Entity that signed and issued the certificate.|\n|subject organizational unit|Subject's organizational unit.|\n|subject alternative name|List of fully qualified domain names secured by the certificate.|\n|valid to|Validity end period of the certificate.|\n|name| |\n|State|Lifecycle states of the certificate.|\n|root issuer|Root entity that signed and issued the immediate certificate.|\n|key size|Size of the key used by the signing algorithm.|\n|subject locality|Subject's locality.|\n|subject state|Subject's state.|\n\n## CI relationships\n\nThe **The F5-SSH-SSL Certification** pattern extension does not create any CI relationships.\n\n**Parent Topic:**[Available on-premise discovery patterns](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/it-operations-management/discovery-and-service-mapping-patterns/available-patterns.md)\n\n"}}