---
sourceDocument: Brazil IT Operations Management
sourceDocumentLink: https://www.servicenow.com/docs/r/it-operations-management

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil IT Operations Management

ft:clusterId :

    - itom

bundleId :

    - itom

workflow :

    - Technology


---

# Configuring the discovery of cryptographic assets

# Configuring the discovery of cryptographic assets {#ariaid-title1}

Release version: Brazil  
Updated September 10, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Configuring the discovery of cryptographic assets involves setting up certificate and cloud discovery.

Cryptographic Asset Compliance inventories the assets that ServiceNow
[Certificate Inventory and Management](https://www.servicenow.com/docs/18rx6Oipso8pms1aZVuQ4w "With Certificate Inventory and Management, you can discover, conduct an inventory, and proactively manage all TLS certificates. Certificate Inventory and Management supports IPv6, providing comprehensive coverage for your certificate management needs.") and ServiceNow
[Discovery](https://www.servicenow.com/docs/Smzl3xy7DdEgCkn84_DN3w "ServiceNow Discovery is an automated process that continuously scans and identifies all the components within the IT infrastructure. It plays a crucial role in maintaining an accurate and up-to-date CMDB 360 with the information it finds.") discovers rather than running discovery of cryptographic assets itself.  
You must configure the discovery of cryptographic assets:

* Certificate discovery in [Certificate Inventory and Management](https://www.servicenow.com/docs/18rx6Oipso8pms1aZVuQ4w "With Certificate Inventory and Management, you can discover, conduct an inventory, and proactively manage all TLS certificates. Certificate Inventory and Management supports IPv6, providing comprehensive coverage for your certificate management needs.") to catalog certificates (on-premises and URL-based). For more information, see [Visibility to TLS certificates](https://www.servicenow.com/docs/a_1VxKi6aa6Rjp5YX5RW_Q "The Certificate Inventory and Management application allows Discovery to automatically scan for certificates on specific ports through your existing CI-based Discovery schedules. In addition, you can create Discovery schedules to scan for specific URLs.").
* Cloud discovery in [Discovery](https://www.servicenow.com/docs/Smzl3xy7DdEgCkn84_DN3w "ServiceNow Discovery is an automated process that continuously scans and identifies all the components within the IT infrastructure. It plays a crucial role in maintaining an accurate and up-to-date CMDB 360 with the information it finds.") to catalog keys from AWS KMS and Azure Key Vault. For more information, see [Discovery for cloud environment](https://www.servicenow.com/docs/BzjO3f8xri1nIEbxqReYnA "ITOM Visibility cloud discovery solutions enable you to collect detailed information about your cloud-based infrastructure and your resources in major cloud service providers: Amazon Web Services (AWS), Microsoft Azure, Google Cloud Platform (GCP), IBM Cloud Platform, Oracle Cloud Infrastructure (OCI), and Alibaba Cloud.").
{#set-up-cryptographic-asset-discovery__ul_etk_qtd_1kc}

After discovery is set up, a scheduled job syncs discovered assets into Cryptographic Asset Compliance periodically.

## Onboarding from the Home page {#set-up-cryptographic-asset-discovery__section_ocg_ltd_1kc}

The Home page includes a guided onboarding that helps you configure cloud and certificate discovery. The banner is collapsible and is displayed until the discovery of all
cryptographic assets is configured.

The Certificates card indicates whether certificate discovery is configured by displaying either the Setup required or Configured states.  
The Keys card indicates whether cloud discovery is configured by displaying the following states.

* Setup required: Cloud discovery is not configured for AWS KMS and Azure Key Vault.
* Partially configured: Cloud discovery is configured for either AWS KMS or Azure Key Vault.
* Configured: Cloud discovery is configured for both AWS KMS and Azure Key Vault.
{#set-up-cryptographic-asset-discovery__ul_hdr_nwd_1kc}