---
sourceDocument: Australia Platform security
sourceDocumentLink: https://www.servicenow.com/docs/r/australia/platform-security

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Configure and upload your customer supplied key

# Configure and upload your customer supplied key {#ariaid-title1}

Release version: Australia  
Updated March 12, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
You can use your own customer-supplied key instead of using the ServiceNow® system-generated keys.

## Before you begin

Role required: security_admin  and sn_kmf.cryptographic_manager  or sn_kmf.admin

If you're NOT supplying your own keys, you don't need to perform this procedure. To create a cryptographic module with ServiceNow® keys, go to [Create a cryptographic module](https://www.servicenow.com/docs/c2M~jmt1xxwHi5RBTn8xXQ "Create a cryptographic module to define the mechanisms used for cryptographic operations. After you create the module, you create a cryptographic specification, where you define an algorithm for encryption and generates a key.") or [Create cryptographic module for Field Encryption](https://www.servicenow.com/docs/2p828yCazOg3N~lx2B5tMg "Create a Field Encryption cryptographic module to define the mechanisms used for cryptographic operations.").  
Note:  
This procedure only applies to Field Encryption Enterprise functionality. See [Activate Field Encryption](https://www.servicenow.com/docs/gI~GwWu18NZGxVUYlH9adg "Activate either Field Encryption Starter or Field Encryption Enterprise.") for more information.  
Important:  
You can't revoke a customer supplied key.

## Procedure

1. Navigate to AllSystem SecurityField EncryptionField Encryption Experience.
2. Select View module details on the Field Encryption module.
3. Select Encryption Keys and Select and Continue for the Bring-your-own Key option.
4. Select Download wrapping key and Next.
5. Follow the required online steps and select the I completed the online steps box followed by Done and continue to the next step.
6. Upload the wrapped encryption key and the import token downloaded with the wrapped key, enter a name for the encryption key, and select Complete provisioning.

## What to do next

Now that you have finished configuring your cryptographic module with your customer-supplied key, move on to [Create a module access policy](https://www.servicenow.com/docs/TDX4ZBtW4gnm2mZdPW1G_A "Create module access policies to decide which users and scripts can access data encrypted by a cryptographic module.")

*[\>]: and then