Skip to content
Release: Australia · Updated: 2026-03-12 · Official documentation · View source

Upload Java KeyStore certificate

Upload a Java KeyStore certificate and specify the password that's sent in Moveworks encrypted email.

Before you begin

Ensure you have the encrypted email from Moveworks to set up secure connection.

You can generate a self-signed JWT certificate (valid for 2 years) for use with Moveworks for Web. For more information, see JWT Certificate Generation Guide (Mac and Windows)

Note: You must have purchased Moveworks and implemented it for the self-signing to work.

Role required: admin or OAuth admin

About this task

Certificate authentication creates encrypted communication between your ServiceNow instance and the Moveworks platform. You must upload the JKS certificate file and configure the keystore password in both the certificate record and JWT key provider.

Procedure

  1. Navigate to All > System Definition > Certificates.

  2. Search for moveworks JKS in the certificate list.

  3. Open the certificate record and upload the certificate file.

    1. Select the Manage Attachments (
Image omitted: attachment-icon.png
No alternative text supplied

) icon. 2. Upload your moveworks JKS file. 4. Enter the password in the Key Store Password field.

Image omitted: mw-jks-certificate.png
Validate Stores and certificates
**Note:** This password you receive from Moveworks team.
  1. Select Validate Stores and Certificates.

    The system validates the certificate with no errors and displays Valid key_store message.

    Note: Contact Moveworks support for troubleshooting.

  2. Navigate to System Definition > JWT Providers.

    1. In the Signing configuration field, verify if Moveworks JWT Provider is selected.

    2. Select the info icon (

Image omitted: info-icon.png
preview icon\), select **Open Record** in the pop-up, and select Global scope.
Image omitted: mw-jws-key.png
movdworks JWT key password
3.  In the Moveworks JWT key window, enter the same **Key Store Password** in the **Signing Key** field.
  1. Select Save or Update.

    For more information, see Partner-Specific ServiceNow Updates.

Result

Certificate authentication is configured. JWT tokens can now be generated for secure communication between ServiceNow and Moveworks services.

What to do next

Proceed to add bot ID to complete the Moveworks AI assistant setup.

Related topics

Moveworks for Employee Center reference