Is Instance_level_glide_encrypter a system property and where is it in the instance?

[Rain Vaine]

Hello experts,

For the processing of 3DES deprecation, they stated that there is a mandatory configurations to be in place. Based on the lists, there is a step - "Check if “Instance_level_glide_encrypter” KMF password2 sub-module MAPs is set to track. ". I tried looking for Instance_level_glide_encrypter in the system property but I cannot find it and I also tried looking for more information about that topic but I cannot seem to find it.
Does anyone of you know what is Instance_level_glide_encrypter and what does it do?

Regards,
Vaine

[Maik Skoddow · Accepted solution]

Hi @Rain Vaine 

this is not a system property but a crypto module. Go to table sys_kmf_crypto_module and check whether the module "instance_level_glide_encrypter" is set to "Track":

 Maik

[Rain Vaine]

Hello Maik,
Thanks your answer I think it was very helpful but just to add, how were able to see those records?
When I tried accessing it in our instance I cannot find those records even though I have elevated myself to security admin it stills show me this security restraints message:

Regards,
Vaine

[Maik Skoddow]

Hi @Rain Vaine 

you need special roles for working with the KMF. Refer to the following page as a starting point: https://docs.servicenow.com/bundle/vancouver-platform-security/page/administer/key-management-framew...

At the end of that page there is a link to the roles page where the assignment is explained.

Maik

[Rain Vaine]

Hello, 
Thanks for the resources, I would try it in our instance. But just to be sure, does assigning the role have any impact on the instance? Can I just try to assign this role then remove it afterwards?

Regards,
Vaine