Expired certificates Incident creation for Certificate Inventory and Management SummaryIncidents for Expired certificates are created in two ways: 1) Discovery property "glide.discovery.certs.enable_incident_creation_for_expired_certificates" The scheduled job "Certificate Notification" which runs daily calls a script include "CertificateTaskNotifier" which executes the Subflow "Certificate Notification" and within the Subflow if the certificate is found to be expired and the system property for incident creation is true (glide.discovery.certs.enable_incident_creation_for_expired_certificates), then the incident is created if one for that specific certificate CI does not already exist. https://<instance-name>.service-now.com/nav_to.do?uri=sys_properties.do?sys_id=a16442523b6233000fd4cedf34efc484 https://<instance-name>.service-now.com/nav_to.do?uri=sys_trigger.do?sys_id=12618c981b3ff81038c05240604bcb17 https://<instance-name>.service-now.com/sys_script_include.do?sys_id=c2da33fb5b330010fadbd643b881c717 2) Scheduled job "Certificate Event Notification" It runs daily and creates event's if there are any expired certificates or any certificates that would be expiring in the next 60 days in "cmdb_ci_certificate" table, which in turn creates Alerts and incidents. https://<instance-name>.service-now.com/nav_to.do?uri=sys_trigger.do?sys_id=9a618c981b3ff81038c05240604bcb13 Event rule: Certificate Expired/Expiring Events https://<instance-name>.service-now.com/nav_to.do?uri=em_match_rule.do?sys_id=27adfbd1c74f401005e626b1c7c260be