Column Level Encryption Issue

[BalakrishnaJ]

Hi All,

I am working on column level encryption, I have two table documents and applicants, while document table is not extended from any table and encryption is working on save/update records. But while coming to applicant table which is extended from the consumer table. while saving/updating the record it is converting to encryption but unable to decrypt. I have using same module and same role both table.  CLE plugin we didn't purchase.

Pls suggest your solutions

[Ankur Bawiskar]

@BalakrishnaJ 

can you share screenshot with admin how user is able to see decrypted value?

also share screenshot with other user to whom it should be seen

[Tanushree Maiti]

Hi @BalakrishnaJ 

• Because the Applicant table extends consumers, it inherits the base table's read/write ACLs (Access Control Lists). The decryption will fail if the user lacks explicit Read permissions . refer: https://www.servicenow.com/community/developer-forum/extended-table-not-accessible/td-p/3239359
• Ensure that the Cryptographic Module is available for cross-scope access if your document table and Applicant table in different scope, or adjust the Application scope permissions of your role
• Clear the Instance cache by typing cache.do in the Application Navigator filter. Log out, log back in, and test decryption again.

Refer: Encrypting columns (fields) using "Column Level Encryption"

[BalakrishnaJ]

Read and write acl available to child table also, user can read and write table records, but while doing encryption it was unable to decrypt after saving the record.