--- sourceDocument: brazil Combined Product Files sourceDocumentLink: https://www.servicenow.com/docs/r/delta-australia-brazil Release : - brazil ft:locale : - en-US ft:publication_title : - brazil Combined Product Files ft:clusterId : - delta3ba bundleId : - delta3ba --- # Combined Key Management release notes for upgrades from Australia to Brazil # Combined Key Management release notes for upgrades from Australia to Brazil {#ariaid-title1} Release version: Brazil Updated October 8, 2026 ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 4 minutes to read Summarize ![AI sparkle icon](https://servicenow.com/docs/portal-asset/ai-sparkle-icon) Summarized using AI This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete. ## Summary of Combined Key Management release notes for upgrades from Australia to Brazil This consolidated release notes page provides ServiceNow customers with essential information about Key Management upgrades from the Australia release to the Brazil release. It includes new features, changes, upgrade considerations, and activation details to help plan and execute upgrades effectively. If no changes occurred in a specific release, this is clearly noted to avoid confusion. Show full answer Show less ## Important Upgrade Information Before upgrading to Brazil, review and complete any pre- and post-upgrade tasks outlined for Key Management. Notably, Australia release prepared for the deprecation of the GlideEncrypter API's legacy 3DES encryption by replacing it with AES256-GCM via the Key Management Framework (KMF). New Australia instances no longer support GlideEncrypter, but existing instances retain updated AES256-GCM support. Brazil release does not introduce further upgrade-specific changes. ## New Features Introduced from Australia to Brazil * **SHA512 Support:** GlideDigest now supports creating and verifying message digests using the SHA512 cryptographic hash function, enhancing cryptographic strength. * **Offline Key Exchange:** Administrators can share module keys between on-premise instances offline, facilitating cloning and synchronization of instances. * **JWT Signing and Verification:** JSON Web Token operations are now integrated as part of the KMFCryptoOperation class, streamlining cryptographic workflows. * **Centralized Crypto Management Console:** A new console provides a centralized view and management of certificates, improving lifecycle tracking and visibility. * **Clone and Restore Support for On-Premise Instances:** Enhanced support for cloning, restoring, and migrating between commercial and on-premise instances. * **Certificate Revocation List (CRL) Validation:** Support for CRL alongside OCSP offers robust certificate revocation checking with automatic fallback mechanisms. The Brazil release itself did not add additional new features beyond those introduced in Australia. ## Key Changes * **Streamlined Cryptographic Module Creation:** The workflow for creating cryptographic modules has been updated for improved speed and usability. * **SecurityUtils API Enhancements:** Added methods to sanitize and escape inputs to better prevent cross-site scripting (XSS) attacks. No changes were introduced in the Brazil release. ## Removed and Deprecated Features There were no removals or deprecations of Key Management features between Australia and Brazil releases. ## Activation Information Activation of Key Management features requires the Platform Encryption subscription bundle, which includes Field Encryption Enterprise and Cloud Encryption. The Enterprise plugin is enabled via the `com.glide.now.platform.encryption` plugin. This provides an unlimited license for Field Encryption and is necessary for leveraging encryption capabilities. ## Additional Notes * No additional requirements, browser requirements, accessibility, or localization changes were introduced in these releases. * Highlights include the support for SHA512 in GlideDigest, offline module key sharing, and integrated JWT cryptographic operations through KMFCryptoOperation. ServiceNow customers upgrading Key Management from Australia to Brazil can expect enhanced cryptographic capabilities, improved management workflows, and stronger security controls without disruption from removals or deprecations. Consolidated page of all release notes for Key Management from Australia to Brazil. ## How to use this page To help you prepare for your upgrade, we have combined the cross-family Key Management release notes onto one page. Read this summary of the new features, changes, and updated information for your product from Australia to Brazil. Tip: If there were no updates for a release notes section in a certain family release, we included a short note for your reference. For example, if a product did not have any updates in Tokyo, the row says "No updates for this release." ## Important information for upgrading Key Management to Brazil Before you upgrade to Brazil, review these pre- and post-upgrade tasks and complete the tasks as needed. {#dfrn3-keymanagement-summary__entry__2} | Release | Release notes | |-|-| | Australia | Upgrade information : * In pre-Zurich releases, the GlideEncrypter API used the three-key Triple Data Encryption Standard (3DES) encryption standard, which [NIST 800-131A Rev 2](https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-131Ar2.pdf) has recommended against using after 2023. The following changes are taking place in the Australia release in preparation for a full deprecation of GlideEncrypter/3DES in the future: * New Australia instances can't use GlideEncrypter. All base system scripts have been changed to use alternative encryption processes. * if you're upgrading your Australia instances, you can still GlideEncrypter, which has been updated to use AES256-GCM encryption via the Key Management Framework. * Learn more about 3DES deprecation in [KB1704481](https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1704481). | | Brazil | No updates for this release. | [ ] ## New features Between your current release family and Brazil, new features were introduced for Key Management. {#dfrn3-keymanagement-summary__entry__8} | Release | Release notes | |-|-| | Australia | [Added SHA512 support for message digests](https://www.servicenow.com/docs/access?context=c_GlideDigestScopedAPI&family=australia&ft:locale=en-US) : GlideDigest has been updated to allow creation and verification of message digests using the SHA512 cryptographic hash function. Offline key exchange to share module keys between instances : Admins can share module keys between instances offline to facilitate instance clones between on-premise instances using KMF. [Sign and verify JSON web tokens (JWT) through KMFCryptoOperation](https://www.servicenow.com/docs/access?context=KMFCryptoOperationBothAPI&family=australia&ft:locale=en-US) : The signing and verification processes for JWTs are now integrated as operation types in the existing KMFCryptoOperation class. Centralized Crypto Management console : Use the new Crypto Management Console to streamline and track the certificate management lifecycle. The new console scans your instance for certificates and displays their details in a central location, Clone and restore support for on-premise instances : Support for cloning and restoring on-premise instances. Support has also been added from migrating a commercial instance to on-premise instances, and vice-versa. Certificate Revocation List (CRL) validation support : ServiceNow now supports Certificate Revocation List (CRL) validation for certificate revocation checks as an alternative to Online Certificate Status Protocol (OCSP), with automatic fallback when OCSP is unavailable. | | Brazil | No updates for this release. | [ ] ## Changes Between your current release family and Brazil, some changes were made to existing Key Management features. {#dfrn3-keymanagement-summary__entry__14} | Release | Release notes | |-|-| | Australia | [Updated workflow for creating cryptographic modules](https://www.servicenow.com/docs/access?context=create-cryptographic-module&family=australia&ft:locale=en-US) : Use the streamlined workflow designed for faster, easier creation of cryptographic modules. [SecurityUtils Enhancements](https://www.servicenow.com/docs/access?context=GlideSecurityUtilsScopedAPI&family=australia&ft:locale=en-US) : The SecurityUtils API has been enhanced to help prevent cross-site scripting attacks, including methods to sanitize and escape input. | | Brazil | No updates for this release. | [ ] ## Removed Between your current release family and Brazil, some Key Management features or functionality were removed. {#dfrn3-keymanagement-summary__entry__20} | Release | Release notes | |-|-| | Australia | No updates for this release. | | Brazil | No updates for this release. | [ ] ## Deprecations Between your current release family and Brazil, some Key Management features or functionality were deprecated. {#dfrn3-keymanagement-summary__entry__26} | Release | Release notes | |-|-| | Australia | No updates for this release. | | Brazil | No updates for this release. | [ ] ## Activation information Review information on how to activate Key Management. {#dfrn3-keymanagement-summary__entry__32} | Release | Release notes | |-|-| | Australia | Activation information : The Platform Encryption subscription bundle is a group commercial entitlement that includes Field Encryption Enterprise and Cloud Encryption. Field Encryption Enterprise is the unlimited license of Field Encryption. The Enterprise plugin is available with the activation of the com.glide.now.platform.encryption plugin. For details, see [Encryption and Key Management subscription bundle](https://www.servicenow.com/docs/access?context=encryption-sku&family=australia&ft:locale=en-US). | | Brazil | No updates for this release. | [ ] ## Additional requirements If any additional requirements were introduced or changed for Key Management we have noted them here. {#dfrn3-keymanagement-summary__entry__38} | Release | Release notes | |-|-| | Australia | No updates for this release. | | Brazil | No updates for this release. | [ ] ## Browser requirements If any specific browser requirements were introduced or changed for Key Management we have noted them here. {#dfrn3-keymanagement-summary__entry__44} | Release | Release notes | |-|-| | Australia | No updates for this release. | | Brazil | No updates for this release. | [ ] ## Accessibility information Review details on accessibility information for Key Management, such as specific requirements or compliance levels. {#dfrn3-keymanagement-summary__entry__50} | Release | Release notes | |-|-| | Australia | No updates for this release. | | Brazil | No updates for this release. | [ ] ## Localization information If there are specific localization considerations for Key Management we have noted them here. {#dfrn3-keymanagement-summary__entry__56} | Release | Release notes | |-|-| | Australia | No updates for this release. | | Brazil | No updates for this release. | [ ] ## Highlight information If there are specific highlight considerations for Key Management we have noted them here. {#dfrn3-keymanagement-summary__entry__62} | Release | Release notes | |-|-| | Australia | * GlideDigest has been updated to allow creation and verification of message digests using the SHA512 cryptographic hash function * Admins can share module keys between instances offline to facilitate instance clones between on-premise instances using KMF. * The signing and verification processes for JWTs are now integrated as operation types in the existing KMFCryptoOperation class. See [Key Management Framework](https://www.servicenow.com/docs/access?context=encryption&family=australia&ft:locale=en-US) for more information. | | Brazil | No updates for this release. | [ ]