---
sourceDocument: Australia Platform security
sourceDocumentLink: https://www.servicenow.com/docs/r/australia/platform-security

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Test an external key definition

# Test an external key definition {#ariaid-title1}

Release version: Australia  
Updated March 12, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Test your external encryption key to use in External Key Management Service (EKMS).

## Before you begin

Roles required: admin, security_admin, and sn_kmf.cryptographic_manager

To test an external key definition, there must be one configured in EKMS. See [Configure an external key definition](https://www.servicenow.com/docs/GNYZbE4hI81WogXdBJRjiw "Configure your external encryption key to use in External Key Management Service (EKMS).").

## Procedure

1. Navigate to AllSystem SecurityField EncryptionEKMS Configurations.
2. Select the EKMS integration.
3. Select Test EKMS Config.

## Result

The following validation message displays when the external key is properly configured in EKMS: Validation passed for the configuration. You have successfully wrapped and unwrapped the test key in EKMS.

If the test fails, the validation message shows as failed indicating the operation that was unsuccessful. Go back through the configuration process to correct the issue and run the test again. See [Configure an external key definition](https://www.servicenow.com/docs/GNYZbE4hI81WogXdBJRjiw "Configure your external encryption key to use in External Key Management Service (EKMS).").
**Related tasks**   

* [Create a cryptographic module with external key wrapping](https://www.servicenow.com/docs/0jl83kS7Ey61YmoBIkMvjg "Create a cryptographic module that uses external Amazon Web Services Key Management System (AWS KMS) key wrapping to encrypt ServiceNow data.")
* [Create Encrypted Field Configurations](https://www.servicenow.com/docs/LrJ3Hf40r26dNUMShsEvRw "Configure specific fields to be encrypted using your External Key Management Service (EKMS) cryptographic module with external Amazon Web Services Key Management System (AWS KMS) key wrapping.")
* [Set up Module Access Policies](https://www.servicenow.com/docs/yP8ydWgSMIloOWt9PkqvHw "Configure module access policies in External Key Management Service (EKMS) to control who can view encrypted data in clear text.")

*[\>]: and then