Understanding Certificate Ownership Attestation Tasks and the Policy Processor Scheduled JobIssue <!-- /*NS Branding Styles*/ --> .ns-kb-css-body-editor-container { p { font-size: 12pt; font-family: Lato; color: var(--now-color--text-primary, #000000); } span { font-size: 12pt; font-family: Lato; color: var(--now-color--text-primary, #000000); } h2 { font-size: 24pt; font-family: Lato; color: var(--now-color--text-primary, black); } h3 { font-size: 18pt; font-family: Lato; color: var(--now-color--text-primary, black); } h4 { font-size: 14pt; font-family: Lato; color: var(--now-color--text-primary, black); } a { font-size: 12pt; font-family: Lato; color: var(--now-color--link-primary, #00718F); } a:hover { font-size: 12pt; color: var(--now-color--link-primary, #024F69); } a:target { font-size: 12pt; color: var(--now-color--link-primary, #032D42); } a:visited { font-size: 12pt; color: var(--now-color--link-primary, #00718f); } ul { font-size: 12pt; font-family: Lato; } li { font-size: 12pt; font-family: Lato; } img { display: ; max-width: ; width: ; height: ; } } The Certificate Ownership Attestation Policy Processor scheduled job may generate CMDB attestation tasks for certificate owners. Administrators and certificate owners may need clarification regarding: Why the scheduled job executed.Why CMDB attestation tasks were created.Which certificate CIs are selected.What actions are available to the certificate owner.What happens after selecting Attest, Reject, or Request Reassignment.How due dates, SLAs, overdue tasks, and notifications are handled. Release<!-- /*NS Branding Styles*/ --> .ns-kb-css-body-editor-container { p { font-size: 12pt; font-family: Lato; color: var(--now-color--text-primary, #000000); } span { font-size: 12pt; font-family: Lato; color: var(--now-color--text-primary, #000000); } h2 { font-size: 24pt; font-family: Lato; color: var(--now-color--text-primary, black); } h3 { font-size: 18pt; font-family: Lato; color: var(--now-color--text-primary, black); } h4 { font-size: 14pt; font-family: Lato; color: var(--now-color--text-primary, black); } a { font-size: 12pt; font-family: Lato; color: var(--now-color--link-primary, #00718F); } a:hover { font-size: 12pt; color: var(--now-color--link-primary, #024F69); } a:target { font-size: 12pt; color: var(--now-color--link-primary, #032D42); } a:visited { font-size: 12pt; color: var(--now-color--link-primary, #00718f); } ul { font-size: 12pt; font-family: Lato; } li { font-size: 12pt; font-family: Lato; } img { display: ; max-width: ; width: ; height: ; } } All Resolution<!-- /*NS Branding Styles*/ --> .ns-kb-css-body-editor-container { p { font-size: 12pt; font-family: Lato; color: var(--now-color--text-primary, #000000); } span { font-size: 12pt; font-family: Lato; color: var(--now-color--text-primary, #000000); } h2 { font-size: 24pt; font-family: Lato; color: var(--now-color--text-primary, black); } h3 { font-size: 18pt; font-family: Lato; color: var(--now-color--text-primary, black); } h4 { font-size: 14pt; font-family: Lato; color: var(--now-color--text-primary, black); } a { font-size: 12pt; font-family: Lato; color: var(--now-color--link-primary, #00718F); } a:hover { font-size: 12pt; color: var(--now-color--link-primary, #024F69); } a:target { font-size: 12pt; color: var(--now-color--link-primary, #032D42); } a:visited { font-size: 12pt; color: var(--now-color--link-primary, #00718f); } ul { font-size: 12pt; font-family: Lato; } li { font-size: 12pt; font-family: Lato; } img { display: ; max-width: ; width: ; height: ; } } The Certificate Ownership Attestation Policy Processor is an out-of-box scheduled job that evaluates the active Certificate Ownership Attestation policy. The process flow is: Certificate Ownership Attestation Policy ↓ Policy Processor Scheduled Job ↓ Eligible Certificate CIs Identified ↓ CMDB Attestation Tasks Created ↓ Certificate Owner Reviews and Submits Certificate CI Selection Certificate CIs are selected based on the conditions configured in the attestation policy. These conditions may include certificates that are: Not retiredNot self-signedNot CA certificatesAssigned to an owner The exact criteria depend on the policy filter configured in the instance. Available Owner Actions The certificate owner can review each CI and select: Attest: Confirms that the user is the correct owner.Reject: Indicates that the user cannot confirm ownership.Request Reassignment: Indicates that another user should own the certificate. The task should be submitted after all listed CIs are reviewed. Effect of Attest or Reject Selecting Attest or Reject only records the attestation response. These actions do not automatically: Renew or retire the certificateChange the ownership fieldModify the certificate CIReassign the certificate Any required follow-up must be handled separately by the appropriate CMDB, PKI, security, or governance team. Incorrectly Submitted Response If the task has not yet been submitted, the user may be able to change the response from the review page. If the task has already been submitted, the recorded response should be reviewed by the appropriate governance team for corrective action. Due Date and SLA The generated task may contain a due date and an SLA due date. If the task is not completed on time, it generally remains open and becomes overdue. If an SLA is attached, the SLA may breach based on the configured SLA definition. The system does not automatically attest, reject, close, retire, or modify the certificate CI when the task becomes overdue. Notifications The initial attestation notification is sent to the assigned owner based on the configured process. SLA warning, breach, rejection, or governance-team notifications depend on the notification, SLA, flow, or workflow configuration in the instance. Additional notifications can be configured according to the organization’s internal process.