--- sourceDocument: australia Combined Product Files sourceDocumentLink: https://www.servicenow.com/docs/r/australia/delta-xanadu-australia Release : - australia ft:locale : - en-US ft:publication_title : - australia Combined Product Files ft:clusterId : - delta3ax bundleId : - delta3ax --- # Combined Encryption release notes for upgrades from Xanadu to Australia # Combined Encryption release notes for upgrades from Xanadu to Australia {#ariaid-title1} Release version: Australia Updated October 8, 2026 ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 5 minutes to read Summarize ![AI sparkle icon](https://servicenow.com/docs/portal-asset/ai-sparkle-icon) Summarized using AI This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete. ## Summary of Combined Encryption Release Notes for Upgrades from Xanadu to Australia This consolidated release notes document assists ServiceNow customers in upgrading their Encryption capabilities from the Xanadu release through to Australia. It covers key new features, changes, deprecations, and important upgrade information relevant for these releases to help you prepare and execute your upgrade smoothly. Show full answer Show less ## Important Upgrade Information * **Zurich Release:** Deprecated support for the Triple Data Encryption Standard (3DES) in the GlideEncrypter API, replacing it with the Key Management Framework (KMF) using Advanced Encryption Standard (AES). This change means 3DES is no longer supported for encryption operations in upgraded instances. * Column Level Encryption was upgraded to Key Management Framework Column Level Encryption (KMF-CLE) due to 3DES deprecation. * **Australia Release:** No additional upgrade tasks or deprecations beyond Zurich noted. ## New Features * **Zurich:** Introduced row-level conditions for Field Encryption, allowing encryption rules to be applied dynamically to rows within a column based on specific conditions. * **Australia:** * Redesigned Administration interface for managing Field Encryption and Field Encryption Enterprise, simplifying key rotation, policy updates, and providing enhanced visibility into encryption status and audit details. * Integration with External Key Management Service (EKMS), enabling customers to store encryption keys outside the ServiceNow instance for improved security, automated key rotation and revocation, and better management of key lifecycles including clone and restore scenarios. ## Changes * **Zurich:** The Field Encryption Enterprise API was enhanced to support all three Encryption APIs for attachments, providing greater flexibility without requiring the use of any specific single API. * **Australia:** Updates to the Field Encryption user interface to improve key rotation, policy management, and access to encryption status and audit details. ## Deprecations * **Zurich:** The GlideEncrypter API's 3DES encrypted string keys are deprecated; only KMF format is supported going forward. * **Other releases:** No additional deprecations noted. ## Activation and Licensing * The Platform Encryption subscription bundle includes Field Encryption Enterprise and Cloud Encryption. * Zurich release requires activation of the `com.glide.now.platform.encryption` plugin for Field Encryption Enterprise. * Australia release requires activation of the `com.glide.encryption.externalkms` plugin for External Key Management Service integration, which requires a separate subscription. ## Additional Notes * No updates were reported for browser requirements, accessibility, localization, or highlight information across these releases. * Where no changes or updates occurred in a particular release for Encryption, the notes explicitly state "No updates for this release" to assist in tracking relevant changes. ## Practical Implications for ServiceNow Customers When upgrading from Xanadu to Australia, expect enhanced security capabilities and administration improvements, especially from Zurich onwards with the removal of legacy 3DES encryption and introduction of KMF. The Australia release further strengthens encryption management through its redesigned UI and EKMS integration, enabling better security governance and operational efficiency. Customers should plan to review and complete pre- and post-upgrade tasks related to encryption, particularly focusing on key management practices and API usage changes. Activation of appropriate plugins and subscriptions is required to access new features, especially for integrating external key management solutions. Consolidated page of all release notes for Encryption from Xanadu to Australia. ## How to use this page To help you prepare for your upgrade, we have combined the cross-family Encryption release notes onto one page. Read this summary of the new features, changes, and updated information for your product from Xanadu to Australia. Tip: If there were no updates for a release notes section in a certain family release, we included a short note for your reference. For example, if a product did not have any updates in Tokyo, the row says "No updates for this release." ## Important information for upgrading Encryption to Australia Before you upgrade to Australia, review these pre- and post-upgrade tasks and complete the tasks as needed. {#dfrn3-encryption-summary__entry__2} | Release | Release notes | |-|-| | Xanadu | No updates for this release. | | Yokohama | No updates for this release. | | Zurich | Upgrade information : For the GlideEncrypter API, NIST 800-131A Rev 2 has recommended against using the Triple Data Encryption Standard (3DES) encryption. The following changes are taking place in the Zurich release with the official removal of 3DES encryption for GlideEncrypter. * The GlideEncrypter API defaults to using the Key Management Framework (KMF) based algorithm, Advanced Encryption Standard (AES), for encryption and decryption operations for upgraded instances only. * For instances created with the Zurich release or later, this API isn't supported. * Learn more about 3DES deprecation in [KB1704481](https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1704481). In the Zurich release, Column Level Encryption has received a required upgrade to Key Management Framework Column Level Encryption (KMF-CLE) due to the platform-wide deprecation of 3DES. For more information about this upgrade, see KB1700704. | | Australia | No updates for this release. | [ ] ## New features Between your current release family and Australia, new features were introduced for Encryption. {#dfrn3-encryption-summary__entry__12} | Release | Release notes | |-|-| | Xanadu | No updates for this release. | | Yokohama | No updates for this release. | | Zurich | [Encrypt data using Row Conditions](https://www.servicenow.com/docs/access?context=encrypt-data-using-row-conditions&family=zurich&ft:locale=en-US) : Use row conditions for Field Encryption to define encryption rules for rows within a specific column, based on dynamic conditions. | | Australia | [Manage Field Encryption Enterprise with an enhanced Administration interface](https://www.servicenow.com/docs/access?context=now-platform-encryption&family=australia&ft:locale=en-US) : Configure encryption settings, monitor key usage, and streamline administration for Field Encryption and Field Encryption Enterprise with the following features: * Simplify key rotation and policy updates. * Access encryption status and audit details. * Navigate improved layouts for faster configuration. [Integrate External Key Management Service (EKMS) with Encryption Modules](https://www.servicenow.com/docs/access?context=ekms-external-key-management&family=australia&ft:locale=en-US) : Configure and manage encryption keys externally through EKMS integration with an enhanced encryption framework, which enables you to: * Hold encryption keys outside the instance for improved security. * Perform key rotation and revocation with automated security tasks. * Manage EKMS configurations and enforce the immutability of critical fields after they're active. * Simplify rekeying following instance clone and restore operations. * Monitor key state transitions, encrypted cache, and node-to-node communication. * Access UI improvements for configuration visibility and error handling. * Benefit from telemetry and performance-tested operations. | [ ] ## Changes Between your current release family and Australia, some changes were made to existing Encryption features. {#dfrn3-encryption-summary__entry__22} | Release | Release notes | |-|-| | Xanadu | No updates for this release. | | Yokohama | No updates for this release. | | Zurich | [Field Encryption Enterprise](https://www.servicenow.com/docs/access?context=now-platform-encryption&family=zurich&ft:locale=en-US) API : Use all three Encryption APIs to encrypt on attachments, without needing to use any one specific API. | | Australia | [Field Encryption user interface changes](https://www.servicenow.com/docs/access?context=now-platform-encryption&family=australia&ft:locale=en-US) : The new Field Encryption and Field Encryption Enterprise UI includes updates to key rotation and policies, access to encryption status and audit details, and changes to layouts. | [ ] ## Removed Between your current release family and Australia, some Encryption features or functionality were removed. {#dfrn3-encryption-summary__entry__32} | Release | Release notes | |-|-| | Xanadu | No updates for this release. | | Yokohama | No updates for this release. | | Zurich | No updates for this release. | | Australia | No updates for this release. | [ ] ## Deprecations Between your current release family and Australia, some Encryption features or functionality were deprecated. {#dfrn3-encryption-summary__entry__42} | Release | Release notes | |-|-| | Xanadu | No updates for this release. | | Yokohama | No updates for this release. | | Zurich | [Prepare your instance for GlideEncrypter deprecation](https://www.servicenow.com/docs/access?context=check-3des&family=zurich&ft:locale=en-US) : Encrypted string keys 3DES format is no longer supported. Key Management Framework (KMF) is the supported format. | | Australia | No updates for this release. | [ ] ## Activation information Review information on how to activate Encryption. {#dfrn3-encryption-summary__entry__52} | Release | Release notes | |-|-| | Xanadu | No updates for this release. | | Yokohama | No updates for this release. | | Zurich | Activation information : The Platform Encryption subscription bundle is a group commercial entitlement that includes Field Encryption Enterprise and Cloud Encryption. Field Encryption Enterprise is the unlimited license of Field Encryption. The Enterprise plugin is available with the activation of the com.glide.now.platform.encryption plugin. For details, see the [Encryption and Key Management subscription bundle](https://www.servicenow.com/docs/access?context=encryption-sku&family=zurich&ft:locale=en-US). | | Australia | Activation information : Platform Encryption is available with activation of the com.glide.encryption.external_kms, which requires a separate subscription. For details, see [Encryption and Key Management subscription bundle](https://www.servicenow.com/docs/access?context=encryption-sku&family=australia&ft:locale=en-US). | [ ] ## Additional requirements If any additional requirements were introduced or changed for Encryption we have noted them here. {#dfrn3-encryption-summary__entry__62} | Release | Release notes | |-|-| | Xanadu | No updates for this release. | | Yokohama | No updates for this release. | | Zurich | No updates for this release. | | Australia | No updates for this release. | [ ] ## Browser requirements If any specific browser requirements were introduced or changed for Encryption we have noted them here. {#dfrn3-encryption-summary__entry__72} | Release | Release notes | |-|-| | Xanadu | No updates for this release. | | Yokohama | No updates for this release. | | Zurich | No updates for this release. | | Australia | No updates for this release. | [ ] ## Accessibility information Review details on accessibility information for Encryption, such as specific requirements or compliance levels. {#dfrn3-encryption-summary__entry__82} | Release | Release notes | |-|-| | Xanadu | No updates for this release. | | Yokohama | No updates for this release. | | Zurich | No updates for this release. | | Australia | No updates for this release. | [ ] ## Localization information If there are specific localization considerations for Encryption we have noted them here. {#dfrn3-encryption-summary__entry__92} | Release | Release notes | |-|-| | Xanadu | No updates for this release. | | Yokohama | No updates for this release. | | Zurich | No updates for this release. | | Australia | No updates for this release. | [ ] ## Highlight information If there are specific highlight considerations for Encryption we have noted them here. {#dfrn3-encryption-summary__entry__102} | Release | Release notes | |-|-| | Xanadu | No updates for this release. | | Yokohama | No updates for this release. | | Zurich | * Use row conditions for Field Encryption to define encryption rules for rows within a specific column, based on dynamic conditions. * Use any of the three Field Encryption APIs to encrypt attachments. See [Encryption](https://www.servicenow.com/docs/access?context=encryption-landing&family=zurich&ft:locale=en-US) for more information. | | Australia | * ManageField Encryption and Field Encryption Enterprise using the redesigned user interface. * Enhance data security with the newly added External Key Management Service (EKMS) integration, enabling you to store encryption keys outside the instance for enhanced security. See [Encryption](https://www.servicenow.com/docs/access?context=encryption-landing&family=australia&ft:locale=en-US) for more information. | [ ]