---
sourceDocument: Australia ServiceNow AI Platform Capabilities
sourceDocumentLink: https://www.servicenow.com/docs/r/australia/servicenow-platform

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia ServiceNow AI Platform Capabilities

ft:clusterId :

    - platcap

bundleId :

    - platcap

workflow :

    - Platform


---

# Enable encryption at rest

# Enable encryption at rest for a Hermes topic {#ariaid-title1}

Release version: Australia  
Updated June 26, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Enable encryption at rest on a Hermes topic to help protect message data stored on broker disks from unauthorized access.

## Before you begin

* The Cloud Encryption plugin must be installed. Because this plugin requires a subscription, contact your ServiceNow® administrator. To verify whether the Cloud Encryption plugin is active, navigate to AllSystem Plugins, search for ServiceNow® Cloud Encryption, and confirm that the status is active.
* At least one service that uses Hermes must be activated, for example, Stream Connect.

{#enable-encryption-at-rest-for-hermes__ul_q4h_vrp_tjc}

Role required: hermes_admin

## Procedure

1. Navigate to AllHermes Messaging ServiceTopics.
2. Select the topic name to open the topic record.
3. Select Enable Encryption.  
   The selected topic is encrypted and the button changes to Disable Encryption.
4. **Optional:** In the topic record, verify in the Kafka Topic Override Configurations related list that the snc.hermes.encryption.enable property value is set to true.
{#enable-encryption-at-rest-for-hermes__steps_lq5_xd3_qjc}
**Related concepts**   

* [Activating the Hermes Messaging Service](https://www.servicenow.com/docs/Wn0WmZBuS78D4YUGjqucLQ "The Hermes Messaging Service is enabled when the Glide Hermes Message Queue plugin (com.glide.hermes) is activated.")
* [Restricting access to Hermes](https://www.servicenow.com/docs/rulzUx61_ZZ_JgS2lddTdg "Restrict access to Hermes by IP address.")  
**Related tasks**   

* [Set up a secure connection to the Hermes Messaging Service](https://www.servicenow.com/docs/Mw~3jpA8CErRU~xiSqp_nA "Secure your Kafka topics by generating a ServiceNow instance-signed certificate.")
* [Revoke a Hermes certificate](https://www.servicenow.com/docs/f146dyZmUbqRITNEGVRODQ "Revoke a ServiceNow instance-signed certificate so that it can't be used in secure connections to the Hermes Messaging Service.")

*[\>]: and then