Turn off Attachment Encryption

Aaron Duncan
Mega Sage

Our instances now have the full instance encrypted, and I'm trying to disable the separate encryption for our attachments. 

In the Cryptographic Module, I have global.attachment_encryption with the following values.

AaronDuncan_0-1733154765659.png

 

I need help in figuring out how to decrypt the data, as I'm afraid it's encrypted separately from the rest of the instance. 

I've attempted to use an Encryption Job to decrypt the attachement table, but on the decryption options, it doesn't show any tables I can select.

4 REPLIES 4

Mike Salem
ServiceNow Employee
ServiceNow Employee

Hi @Aaron Duncan - was that cryptographic module created by you or someone in your organization (not ServiceNow)? Also, can send look at the Encrypted Field Configurations (EFCs) and see if there is an EFC of type=attachment for a specific table?

Aaron Duncan
Mega Sage

It was created by either myself or a partner when we implemented ServiceNow at our Company. 

AaronDuncan_0-1733170882712.png

 

ShengXiang
Tera Contributor

I have managed to follow this solution https://www.servicenow.com/community/itsm-forum/forced-encryption-on-attachments/m-p/2626254 for manual escalation but was not successful with my REST API case creation.

Aaron Duncan
Mega Sage

@Mike Salem were you able to find anything on this?