---
title: Upload Java KeyStore certificate
description: Upload a Java KeyStore certificate and specify the password that you set when you generate it.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/employee-service-management/employee-experience-foundation/mw-upload-jks-cert.html
release: australia
product: Employee Experience Foundation
classification: employee-experience-foundation
topic_type: task
last_updated: "2026-03-12"
reading_time_minutes: 1
breadcrumb: [ServiceNow Otto Chat Integration, Unified Employee Experience, Employee Service Management]
---

# Upload Java KeyStore certificate

Upload a Java KeyStore certificate and specify the password that you set when you generate it.

## Before you begin

Generate a self-signed JWT certificate \(valid for 2 years\) to use with the Embedded AI Assistant. For more information, see [JWT Certificate Generation Guide \(Mac and Windows\)](https://docs.moveworks.com/ai-assistant/ai-assistant-web-surfaces/moveworks-for-web/moveworks-for-web-installation-servicenow#jwt-certificate-generation-guide-mac--windows). The guide creates a `.jks` file to upload to ServiceNow and a `.crt` file to upload to Moveworks

**Note:** You must purchase Moveworks and implement it for the self-signing to work.

Role required: admin or OAuth admin

## About this task

Certificate authentication creates encrypted communication between your ServiceNow instance and the Moveworks platform. You must upload the JKS certificate file and configure the keystore password in both the certificate record and JWT key provider.

## Procedure

1.  Navigate to **All** > **System Definition** > **Certificates**.

2.  Search for **moveworks JKS** in the certificate list.

3.  Open the certificate record and upload the certificate file.

    1.  Select the **Manage Attachments** \(\[Omitted image "attachment-icon.png"\]\) icon.
    2.  Upload the `moveworks.jks` file that you generated.
4.  Enter the password in the **Key Store Password** field.

    \[Omitted image "mw-jks-certificate.png"\] Alt text: Validate Stores and certificates

    **Note:** This is the password that you set when you generated the certificate.

5.  Select **Validate Stores and Certificates**.

    The system validates the certificate with no errors and displays `Valid key_store` message.

    **Note:** [Contact Moveworks support](https://help.moveworks.com/docs/support#how-to-contact-moveworks-support) for troubleshooting.

6.  Navigate to **System Definition** > **JWT Providers**.

    1.  In the Signing configuration field, verify if `Moveworks JWT Provider` is selected.

    2.  Select the info icon \(\[Omitted image "info-icon.png"\] Alt text: preview icon\), select **Open Record** in the pop-up, and select Global scope.

        \[Omitted image "mw-jws-key.png"\] Alt text: Moveworks JWT key password

    3.  In the Moveworks JWT key window, enter the same **Key Store Password** in the **Signing Key** field.

7.  Select **Save** or **Update**.

    For more information, see [Partner-Specific ServiceNow Updates](https://docs.moveworks.com/ai-assistant/getting-started/labs/partner-demo-guide/employeeworks-installation-guide-errata#partner-specific-servicenow-updates).


## Result

Certificate authentication is configured. JWT tokens can now be generated for secure communication between ServiceNow and Moveworks services.

## What to do next

Upload the `.crt` file to Moveworks in the **Webchat Credentials** field under **Chat Platforms** > **Web Chatbot** > **Authentication**. Proceed to add bot ID to complete the Moveworks AI assistant setup.

**Related topics**  


[ServiceNow Otto Chat Integration reference](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/employee-service-management/employee-experience-foundation/mw-ec-integration-reference.md)