Column Level encryption

[vijir]

Hello, 

Can someone please assist in clarifying these queries on CLE?

1. Platform encryption - Is it the same as CLE Enterprise?

2. CLE standard provides max of 5 modules to create [Field encryption Module], which means max 5 keys can be generated. I tried to associate the same module for multiple fields in the same table or different table. Does it work in this way? 

3. Below is the sample screenshot when 'description' is encrypted. The field is visible to the me as I have the role. I thought the value will not be readable and I need to use the key to decrypt it. But the value is plain text and can still be exported or printed. How can I see the encrypted value behind this? I tried to print the value of this field from bg script, I still don't see the encrypted (cyphertext) value. Does it mean that if a sql query is run in the db, the value is encrypted?

4. Can the user without the role load the data to encrypted fields via import set and REST?

5. Are the sys_ tables available in CLE enterprise by default (in CLE Standard - we can enable encryption for sys_user for example by adding an attribute to collection).

[vijir · Accepted solution]

I have posted this question in the 'Now platform' Forum. Hence closing the thread here.

[SK Chand Basha]

Hi @vijir 

ServiceNow Platform Encryption

In the CLE what are fields you are encrypting on Database Level majorly use to prevent from cyber attacks . In the above example you did on Description field you have created  a custom role (ex:- Info_reader) if the logged in user has role they can see the field where you can finds Encrypted icon. If the logged user doesn't have role the discription field disappear it is not available for that user (Here impersonation doesn't work while testing)

Yes, CLE provides less keys but you can use same module multiple times where you can create 'n' field encryptions with one module.