Keyfactor simplifie la gestion de la PKI et des certificats d'entreprise avec de nouvelles intégrations ServiceNow

Aujourd'hui, les organisations souffrent d'une prolifération croissante des données. Les informations, les actifs et les processus provenant de différents fournisseurs sont répartis entre des applications, des équipes et des réseaux cloisonnés. De la sécurité aux ressources humaines en passant par le support client, aucune équipe n'est à l'abri.

This level of disconnection hinders workflows, decreases efficiency, creates blind spots, and ultimately stifles agility across the entire organization. 

To combat this digital spread, ServiceNow provides an intelligent digital transformation and IT automation platform designed to bring together an organization’s disparate systems into a single, cohesive interface. 

One specific challenge organizations face is certificate sprawl. Certificates are at the foundation of cybersecurity, establishing authentication and encryption for every connected device, workload, and application — including the rapid expansion of agentic AI. Just like a password, certificates need to be rotated regularly to ensure the highest levels of security. 

"Ensemble, nous aidons les clients à prévenir les pannes de certificats coûteuses, à renforcer la confiance numérique et à automatiser entièrement l'exécution des certificats dans toute l'entreprise. En unifiant la visibilité, les flux de travail et les informations de sécurité, les entreprises peuvent désormais gérer les certificats de manière aussi transparente que n'importe quel autre actif numérique, ce qui favorise la résilience, la conformité et la continuité des services." 

- Sree Subramaniam, Sr. Directeur de la gestion des produits, ServiceNow 

Les demandes croissantes exigent une gestion plus intelligente et évolutive

The ever-increasing number of certificate requests, renewals, and approvals across multiple platforms and vendors stretches security teams, who must keep track of all certificate statuses and workflows for approvals and follow-ups — all while handling an influx of requests for new certificates. 

This is a recipe for: 

• Expired certificates leading to service outages 
• Rogue teams setting up non-compliant certificate authorities (CAs) just to meet a deadline 
• Blind spots in security that can be exploited by bad actors 

As a leader in PKI and certificate lifecycle automation, Keyfactor is excited to announce multiple new integrations with the ServiceNow platform — from certificate discovery and issuance to lifecycle automation and vulnerability visibility. These integrations underscore Keyfactor’s commitment to simplifying PKI and certificate management by connecting it to the same operational platform organizations use to run IT, respond to incidents, and drive automation across the enterprise. 

Keyfactor Command et ServiceNow ITOM + ITSM

Keyfactor Command offre aux utilisateurs une visibilité complète, une orchestration et une automatisation de l'ensemble de leur PKI et de leur paysage de certificats à partir d'une seule plateforme. Grâce à sa nouvelle intégration dans la plateforme ServiceNow, les entreprises peuvent désormais gérer les cycles de vie des certificats à grande échelle - en automatisant les tâches lourdes de découverte, d'émission, de renouvellement et de révocation des autorités de certification (AC) publiques, privées et basées sur le cloud. 

These capabilities are powered by ServiceNow IT Operations Management (ITOM), enabling centralized control and continuous monitoring of certificates across hybrid environments. Keyfactor Command APIs allow operations teams to integrate certificate events and actions directly into the broader ServiceNow ecosystem, streamlining workflows and reducing risk. 

At the same time, the integration extends into ServiceNow IT Service Management (ITSM). Organizations can quickly publish certificate lifecycle actions — such as request, renewal, or revocation — as catalog items, giving users a familiar, self-service interface to request certificates with governance and approval built in.

When certificate issues do arise, expiration alerts can automatically trigger incidents, making it easy for help desks to respond, route, and resolve certificate-related service disruptions within the same workspace they already use. 

Together, these integrations bridge operations and service delivery — ensuring visibility, responsiveness, and control. 

Keyfactor EJBCA et ServiceNow ITOM

A la demande générale, ServiceNow a mis en place une intégration native entre la plateforme ITOM de ServiceNow et Keyfactor EJBCA Enterprise via le protocole ACME.

Now, organizations can save time and reduce human error by allowing systems and users to request, renew, and revoke certificates directly from EJBCA — the most widely used and trusted private PKI platform — through an intuitive and familiar interface. 

The integration is available with the Zurich release of ServiceNow. 

Réponse à la vulnérabilité de Keyfactor AgileSec Analytics et ServiceNow

Keyfactor AgileSec Analytics is a cryptographic discovery and analysis solution that empowers enterprises to quickly scan systems, build an inventory of cryptographic assets, detect hidden vulnerabilities, and proactively monitor cryptographic health. Through integration with ServiceNow Vulnerability Response, customers can automatically detect and track cryptographic vulnerabilities, escalate them to the right teams, and ensure remediation stays on track—all from within the ServiceNow platform. 

Pour en savoir plus et voir une démonstration de l'intégration d'AgileSec, consultez cet article de blog.

Bientôt disponible : Connecteur Keyfactor Command et Service Graph

Prochainement, les clients de ServiceNow auront une vision encore plus claire de l'état de tous leurs certificats - actifs, révoqués et même expirés - directement dans la CMDB.

Using Keyfactor Command APIs, ServiceNow ITOM will automatically discover and ingest certificates from CAs, endpoints, networks, and cloud platforms, importing certificate metadata into the ServiceNow CMDB where it can be visualized alongside other managed assets and services. 

This expanded visibility helps organizations take control of certificate sprawl and enforce consistent management policies — without losing sight of the bigger picture.