--- sourceDocument: brazil Combined Product Files sourceDocumentLink: https://www.servicenow.com/docs/r/delta-yokohama-brazil Release : - brazil ft:locale : - en-US ft:publication_title : - brazil Combined Product Files ft:clusterId : - delta3by bundleId : - delta3by --- # Combined Encryption Key Management release notes for upgrades from Yokohama to Brazil # Combined Encryption Key Management release notes for upgrades from Yokohama to Brazil {#ariaid-title1} Release version: Brazil Updated October 8, 2026 ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 5 minutes to read Summarize ![AI sparkle icon](https://servicenow.com/docs/portal-asset/ai-sparkle-icon) Summarized using AI This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete. ## Summary of Combined Encryption Key Management Release Notes for Upgrades from Yokohama to Brazil This consolidated guide assists ServiceNow customers in preparing for upgrading Encryption Key Management from Yokohama through to Brazil releases. It highlights important upgrade tasks, new features, changes, and deprecations, ensuring a smooth transition and continued compliance with evolving encryption standards. Show full answer Show less ## Important Upgrade Considerations * **3DES Deprecation:** Starting from Yokohama and Zurich releases, the GlideEncrypter API's use of the three-key Triple Data Encryption Standard (3DES) is being phased out in compliance with NIST 800-131A Rev 2 recommendations. * New instances in Yokohama and Zurich cannot use GlideEncrypter with 3DES; upgrades retain 3DES but offer options to disable it via system properties. * In Zurich, GlideEncrypter was updated to use AES256-GCM encryption through the Key Management Framework, enhancing security. * Customers should review and complete pre- and post-upgrade tasks to ensure compatibility and security compliance. ## New Features in Brazil Release * **Unified Secrets Gateway API:** Introduced to centralize secrets management with alias groups, identity-based access control, multilayer authorization, and detailed audit logging, improving security and governance. ## Activation Information The Platform Encryption subscription bundle, available from Yokohama through Brazil, includes Field Encryption Enterprise (an unlimited license for Field Encryption) and Cloud Encryption. Activation requires enabling the `com.glide.now.platform.encryption` plugin. ## Key Highlights Across Releases * **Field Encryption:** Formerly known as Column Level Encryption, it has been redesigned and rebranded to improve usability. Tools like Access Observer help plan and troubleshoot implementations. * **Migration Support:** Edge Encryption administrators can migrate to Field Encryption using new streamlined processes. * **Audit Logging:** Changes to Key Management and Field Encryption are now tracked in the Sys Audits table for better compliance and monitoring. * **Enhanced Data Protection:** The Brazil release enhances encryption with NIST 800-57-based key lifecycle management and FIPS 140-2-L3 level key protection. ## Additional Notes * No updates, removals, deprecations, browser requirements, accessibility, or localization changes were introduced between Yokohama and Brazil beyond those specified. ServiceNow customers upgrading Encryption Key Management should focus on the transition from 3DES to AES256-GCM encryption, leverage the new Unified Secrets Gateway API for improved secrets management, and ensure proper activation of encryption subscriptions to maintain robust data protection aligned with industry standards. Consolidated page of all release notes for Encryption Key Management from Yokohama to Brazil. ## How to use this page To help you prepare for your upgrade, we have combined the cross-family Encryption Key Management release notes onto one page. Read this summary of the new features, changes, and updated information for your product from Yokohama to Brazil. Tip: If there were no updates for a release notes section in a certain family release, we included a short note for your reference. For example, if a product did not have any updates in Tokyo, the row says "No updates for this release." ## Important information for upgrading Encryption Key Management to Brazil Before you upgrade to Brazil, review these pre- and post-upgrade tasks and complete the tasks as needed. {#dfrn3-encryptionkeymanagement-summary__entry__2} | Release | Release notes | |-|-| | Yokohama | Upgrade information : * The GlideEncrypter API uses the three-key Triple Data Encryption Standard (3DES) encryption standard which [NIST 800-131A Rev 2](https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-131Ar2.pdf) has recommended against using after 2023. The following changes are taking place in the Yokohama release in preparation for a full deprecation of GlideEncrypter/3DES in the future. * New Yokohama instances can't use GlideEncrypter. All base system scripts have been changed to use alternative encryption processes. * if you're upgrading your Yokohama instances, you can still use 3DES, but you can also disable 3DES usage with a system property. * Learn more about 3DES deprecation in [KB1704481](https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1704481). | | Zurich | Upgrade information : * In previous releases, the GlideEncrypter API used the three-key Triple Data Encryption Standard (3DES) encryption standard, which [NIST 800-131A Rev 2](https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-131Ar2.pdf) has recommended against using after 2023. The following changes are taking place in the Zurich release in preparation for a full deprecation of GlideEncrypter/3DES in the future: * New Zurich instances can't use GlideEncrypter. All base system scripts have been changed to use alternative encryption processes. * if you're upgrading your Zurich instances, you can still GlideEncrypter, which has been updated to use AES256-GCM encryption via the Key Management Framework. * Learn more about 3DES deprecation in [KB1704481](https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1704481). | | Australia | No updates for this release. | | Brazil | No updates for this release. | [ ] ## New features Between your current release family and Brazil, new features were introduced for Encryption Key Management. {#dfrn3-encryptionkeymanagement-summary__entry__12} | Release | Release notes | |-|-| | Yokohama | No updates for this release. | | Zurich | No updates for this release. | | Australia | No updates for this release. | | Brazil | Added Unified Secrets Gateway API for secrets security : Use the new Unified Secrets Gateway API to organize and control access to secrets through centralized alias groups, identity-based access control, multi-layer authorization, and comprehensive audit logging. | [ ] ## Changes Between your current release family and Brazil, some changes were made to existing Encryption Key Management features. {#dfrn3-encryptionkeymanagement-summary__entry__22} | Release | Release notes | |-|-| | Yokohama | No updates for this release. | | Zurich | No updates for this release. | | Australia | No updates for this release. | | Brazil | No updates for this release. | [ ] ## Removed Between your current release family and Brazil, some Encryption Key Management features or functionality were removed. {#dfrn3-encryptionkeymanagement-summary__entry__32} | Release | Release notes | |-|-| | Yokohama | No updates for this release. | | Zurich | No updates for this release. | | Australia | No updates for this release. | | Brazil | No updates for this release. | [ ] ## Deprecations Between your current release family and Brazil, some Encryption Key Management features or functionality were deprecated. {#dfrn3-encryptionkeymanagement-summary__entry__42} | Release | Release notes | |-|-| | Yokohama | No updates for this release. | | Zurich | No updates for this release. | | Australia | No updates for this release. | | Brazil | No updates for this release. | [ ] ## Activation information Review information on how to activate Encryption Key Management. {#dfrn3-encryptionkeymanagement-summary__entry__52} | Release | Release notes | |-|-| | Yokohama | Activation information : The Platform Encryption subscription bundle is a group commercial entitlement that includes Field Encryption Enterprise and Cloud Encryption. Field Encryption Enterprise is the unlimited license of Field Encryption. The Enterprise plugin is available with the activation of the com.glide.now.platform.encryption plugin. For details, see [Encryption and Key Management subscription bundle](https://www.servicenow.com/docs/access?context=encryption-sku&family=yokohama&ft:locale=en-US). | | Zurich | Activation information : The Platform Encryption subscription bundle is a group commercial entitlement that includes Field Encryption Enterprise and Cloud Encryption. Field Encryption Enterprise is the unlimited license of Field Encryption. The Enterprise plugin is available with the activation of the com.glide.now.platform.encryption plugin. For details, see [Encryption and Key Management subscription bundle](https://www.servicenow.com/docs/access?context=encryption-sku&family=zurich&ft:locale=en-US). | | Australia | No updates for this release. | | Brazil | Platform Encryption subscription bundle : The Platform subscription bundle is a group commercial entitlement that includes and . is the unlimited license of . The Enterprise plugin is available with the activation of the com.glide.now.platform.encryption plugin. For details, see [Encryption and Key Management subscription bundle](https://www.servicenow.com/docs/access?context=encryption-sku&version=brazil&pubname=brazil-platform-security&ft:locale=en-US). | [ ] ## Additional requirements If any additional requirements were introduced or changed for Encryption Key Management we have noted them here. {#dfrn3-encryptionkeymanagement-summary__entry__62} | Release | Release notes | |-|-| | Yokohama | No updates for this release. | | Zurich | No updates for this release. | | Australia | No updates for this release. | | Brazil | No updates for this release. | [ ] ## Browser requirements If any specific browser requirements were introduced or changed for Encryption Key Management we have noted them here. {#dfrn3-encryptionkeymanagement-summary__entry__72} | Release | Release notes | |-|-| | Yokohama | No updates for this release. | | Zurich | No updates for this release. | | Australia | No updates for this release. | | Brazil | No updates for this release. | [ ] ## Accessibility information Review details on accessibility information for Encryption Key Management, such as specific requirements or compliance levels. {#dfrn3-encryptionkeymanagement-summary__entry__82} | Release | Release notes | |-|-| | Yokohama | No updates for this release. | | Zurich | No updates for this release. | | Australia | No updates for this release. | | Brazil | No updates for this release. | [ ] ## Localization information If there are specific localization considerations for Encryption Key Management we have noted them here. {#dfrn3-encryptionkeymanagement-summary__entry__92} | Release | Release notes | |-|-| | Yokohama | No updates for this release. | | Zurich | No updates for this release. | | Australia | No updates for this release. | | Brazil | No updates for this release. | [ ] ## Highlight information If there are specific highlight considerations for Encryption Key Management we have noted them here. {#dfrn3-encryptionkeymanagement-summary__entry__102} | Release | Release notes | |-|-| | Yokohama | * Column Level Encryption has been rebranded and redesigned to now be called Field Encryption. * Use Access Observer to help plan for and troubleshoot Field Encryption implementations. * Edge Encryption administrators can use the new process to migrate from Edge Encryption to Field Encryption. See [Key Management Framework](https://www.servicenow.com/docs/access?context=encryption&family=yokohama&ft:locale=en-US) for more information. | | Zurich | * See the changes to the Key Management and Field Encryption records that are now logged on the Sys Audits \[sys_audit\] table. * The GlideEncrypter API has been updated and now uses AES256-GCM encryption via the Key Management Framework. * Enable or disable GlideEncrypter by using the glide.security.glideencrypter.allow system property. See [Key Management Framework](https://www.servicenow.com/docs/access?context=encryption&family=zurich&ft:locale=en-US) for more information. | | Australia | No updates for this release. | | Brazil | The ServiceNow® application protects your data by using encryption and tightly controlled key access. It provides National Institute of Standards and Technology (NIST) 800-57-based key life-cycle management and FIPS 140-2-L3 key protection. was enhanced and updated in the Brazil release. See [Key Management Framework](https://www.servicenow.com/docs/access?context=encryption&version=brazil&pubname=brazil-platform-security&ft:locale=en-US) for more information. | [ ]