Set-SIServiceNowCredential
Store the ServiceNow connection in the Key Vault
Purpose
Stores the ServiceNow instance URL and the integration account's credential in the SecurityInsight Key Vault.
When to run it
When the ServiceNow connector is set up, or its password changes.
Who may run it
| Kind | Role | Scope | Why |
|---|---|---|---|
| azureRbac | Key Vault Secrets Officer | the SecurityInsight Key Vault | to write the secrets |
What it changes
| Where | Action | What | Permission / role | Scope | Why | Undo |
|---|---|---|---|---|---|---|
| Key Vault secrets | update | the ServiceNow instance URL, user and password secrets | the SecurityInsight Key Vault | the connector reads them here; the password never goes into configuration | restore the previous secret versions |
What it only reads
- the vault
Parameters
| Parameter | Required | Default | What it does |
|---|---|---|---|
| -Instance | yes | e.g. https://acme.service-now.com -- scheme included, no trailing path. | |
| -User | yes | ||
| -Password | no | Omit to be prompted without echo. Accepting a plaintext string parameter would put the password in the shell history and in any transcript this session is writing. | |
| -VaultName | no | Override the vault. Normally resolved from the SI config. |
Preview with -WhatIf
Shows which secrets it would set; nothing is written.
Undo
Restore the previous secret versions.
Network
It connects to: *.blob.core.windows.net, *.queue.core.windows.net, *.table.core.windows.net, *.vault.azure.net, 169.254.169.254, api.loganalytics.io, graph.microsoft.com, invardia.com, login.microsoftonline.com, management.azure.com, monitor.azure.com, outlook.office.com, outlook.office365.com, storage.azure.com, vault.azure.net
Download and run
Run these lines in PowerShell: the first downloads the script into the current folder, the second runs it.
Invoke-WebRequest https://invardia.com/support/si/Set-SIServiceNowCredential.ps1 -OutFile Set-SIServiceNowCredential.ps1
.\Set-SIServiceNowCredential.ps1 -Instance <Instance> -User <User>To check the download first, compare its SHA-256 with the published one:
SHA-256 c6222f2894d6a34992e97bb77c2e17565d56d6101602d90556dbcfa46f8fcdb4
Checksums: SHA256SUMS.txt · Version 3.0.79
Before you run it, compare the file's SHA-256 with its line in SHA256SUMS.txt.
Every parameter: Get-Help .\Set-SIServiceNowCredential.ps1 -Full · Source: Set-SIServiceNowCredential.ps1
Every script, identity and permission for your security review: SecurityInsight