{"revision":"c10276e953456835cdbb1f3a60d58ae1980be353","document":{"id":44061,"path":"security-management/install-and-configure-misp.md","title":"Install and configure the MISP integration for Security Operations","bundle":null,"doc_type":null,"release":"australia","body":"\n# Install and configure the MISP integration for Security Operations\n\nInstall and configure the MISP integration for Security Operations from the ServiceNow Store on your ServiceNow AI Platform instance so that you can start investigating security incidents using the MISP data.\n\n## Before you begin\n\nEnsure that you’ve installed the valid SSL certificates on the MISP server.\n\nRole required: sn\\_si.admin\n\n## Procedure\n\n1.  Download the MISP integration for Security Operations from the ServiceNow Store and install it.\n\n2.  Navigate to **Security Operations** &gt; **Integrations** &gt; **Integration Configurations**.\n\n3.  Search for the MISP -SIR/TI Integration tile and click **Configure**.\n\n4.  On the form, fill in the fields.\n\n<table id=\"table_kyc_qbg_pa1\"><thead><tr><th>\n\nField\n\n</th><th>\n\nDescription\n\n</th></tr></thead><tbody><tr><td>\n\nName\n\n</td><td>\n\nName for the MISP instance configuration.\n\n</td></tr><tr><td>\n\nMISP Server URL\n\n</td><td>\n\nURL for the MISP server that serves as the REST endpoint for the MISP server.\n\n</td></tr><tr><td>\n\nAPI Key\n\n</td><td>\n\nAPI key that is configured for your user account on the MISP server. The API key corresponds to the **Authkey** in the MISP server.\n\n</td></tr><tr><td>\n\nOn Premises Deployment\n\n</td><td>\n\nOption that you can select if your MISP server is deployed in an on-premise instance. When you select the **On Premises Deployment** option, you must use the MID Server to connect to the MISP server.\n\n</td></tr><tr><td>\n\nMID Application\n\n</td><td>\n\nString field that identifies the MID Application name that is used to communicate with MISP.This field is required when you select the **On Premises Deployment** option. For information on how to configure the MID server for your application, see [Configure a MID Server for each application](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/servicenow-platform/t_SpecifyMIDServerApplications.md)\n\n</td></tr></tbody>\n</table>5.  Click **Submit**.\n\n\n## Result\n\nAfter you successfully validate and submit the configuration, the MISP - SIR/TI Integration is saved on the Security Integrations page as a tile.\n\n**Parent Topic:**[MISP administration](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/misp-administration.md)\n\n**Related topics**  \n\n\n[Getting started with MISP integration for Security Operations]()\n\n[Review the MISP integration settings]()\n\n[Configure MISP sighting searches]()\n\n[Configure how an automatic event is created]()\n\n[MISP event data]()\n\n[Associated MISP events]()\n\n[MISP user information]()\n\n[Domain separation and MISP]()\n\n[Troubleshooting MISP integration]()\n\n"}}