Forced encryption on attachments

[Kim Sullivan]

Since upgrade to Utah, all our attachments are being encrypted.  In Tokyo and before there was a checkbox here to choose to encrypt.  That is now gone and none is not the default option.

ServiceNow support says this is OOB, but I can't believe this was intended. 

#encryption

#crypto

#attachments

[Alex Upmann1]

I have this same issue on my instance but when I follow the link to the knowledge article, I get a message saying my role doesn't grant me access to the article.  Now I can take that up with SN and my SN account manager but can you list the pertinent points from the article?

[Sadrudeen Ashra]

1. Elevate your role

 2. go to encrpt config table (sys_platform_encryption_configuration) and inactivate the table in which you don't want to encrypt
or

create a record with the table in which you don't want the encrypt attachment to happen

3. add this system property if it's not in your system, "com.glide.encryption.enable_attachment_key_ui" and set it to false.

[Trish Mac]

Hi @Kim Sullivan , I'm on Xanadu in DEV and TEST.  Xanadu is the FIRST time we've seen the Encrypt Attachments pop up and we were on Tokyo, then Vancouver and hadn't had this come up.  I tried your code change in the optional_attachment_encrypt UI macro and this didn't work for me.

My code looks like this:  

Thanks,

Trish

[SayaliK]

Hi @Kim Sullivan ,
Could you please assist with the Yokohama version? I've implemented the scripting changes you recommended, but the images are still being encrypted.

[Kim Sullivan]

Will you post your script so I can confirm?  Also, keep in mind, impersonating is not a good tool to test encryption.  Its better to use a local user and confirm that way.