How to encrypt catalog variable at database level

[nehasingh98]

Hi,

I have to encrypt the catalog variable, can some one tell me the steps.

[Runjay Patel · Accepted solution]

Hi @nehasingh98 ,

Follow below steps.

1. Navigate to your variable for which you want to apply the encryption.
2. change/select the "Type" as "Masked".
3. Select the checkbox "Use Encryption" under type specification tab.
4. 

-------------------------------------------------------------------------

If you found my response helpful, please consider selecting "Accept as Solution" and marking it as "Helpful." This not only supports me but also benefits the community.

Regards
Runjay Patel - ServiceNow Solution Architect
YouTube: https://www.youtube.com/@RunjayP
LinkedIn: https://www.linkedin.com/in/runjay

-------------------------------------------------------------------------

[Ravi Chandra_K]

Hello @nehasingh98 

as Runjay mentioned, use Masked variable.

Please refer below article:

https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB0681163

Please mark the answer as helpful and correct if helped. 

Kind Regards,

Ravi Chandra  

[ChristianHCABO]

This shows how to properly configure the field... but doesn't explain how to address something that was initially created incorrectly.

.
How about when a catlaog field (variable) was used for a period of time, but now needs to be encrypted. Was set as 'masked' or single line text. But now needs to use encryption, and has a records on sc_item_option that will need to be 'sanitzed' or 'scrubbed' so that they do not expose PII or bank account numbers as an example.
.
How do we correct this? I've tried GlideEncryptor and KMF without any success. Even after creating a MAP in Key Management Framework for cm_clude_sc_encrypter (I'll consent it might not be configured correctly).
.
I've managed to encrypt with GlideEncryptor and KMF (prior to trying to configure KMF with a map) and can get encrypted data... but I cannot get it to work as it should  work natively with 'check_catalog_masked' role.