Combined Encryption Key Management release notes for upgrades from Zurich to Australia

Consolidated page of all release notes for Encryption Key Management from Zurich to Australia.

How to use this page

To help you prepare for your upgrade, we have combined the cross-family Encryption Key Management release notes onto one page. Read this summary of the new features, changes, and updated information for your product from Zurich to Australia.

Tip:

If there were no updates for a release notes section in a certain family release, we included a short note for your reference. For example, if a product did not have any updates in Tokyo, the row says "No updates for this release."

Important information for upgrading Encryption Key Management to Australia

Before you upgrade to Australia, review these pre- and post-upgrade tasks and complete the tasks as needed.

Release	Release notes
Zurich	In previous releases, the GlideEncrypter API used the three-key Triple Data Encryption Standard (3DES) encryption standard, which NIST 800-131A Rev 2 has recommended against using after 2023. The following changes are taking place in the Zurich release in preparation for a full deprecation of GlideEncrypter/3DES in the future: New Zurich instances can’t use GlideEncrypter. All base system scripts have been changed to use alternative encryption processes. if you’re upgrading your Zurich instances, you can still GlideEncrypter, which has been updated to use AES256-GCM encryption via the Key Management Framework. Learn more about 3DES deprecation in KB1704481.
Australia	No updates for this release.

New features

Between your current release family and Australia, new features were introduced for Encryption Key Management.

Release	Release notes
Zurich	Keep track of Field Encryption and Key Management changes By default, the changes to the records on these tables are now logged to the Sys Audits [sys_audit] table: Encrypted Field Configurations [sys_platform_encryption_configuration] Module Access Policies [sys_kmf_crypto_caller_policy] Cryptographic Modules [sys_kmf_crypto_module] For details on accessing the Sys Audits [sys_audit] table, see Review.
Australia	No updates for this release.

Changes

Between your current release family and Australia, some changes were made to existing Encryption Key Management features.

Release	Release notes
Zurich	Updates to GlideEncrypter functionality The GlideEncrypter API has been updated to use AES256-GCM encryption via the Key Management Framework. If needed, your instance can be changed to use legacy 3DES encryption, but this task can only be done by ServiceNow support. Disable GlideEncrypter on your instance GlideEncrypter can be enabled or turned off using the glide.security.glideencrypter.allow system property. This property is unavailable on new Zurich instances, but administrators with the security_admin role can edit this property in upgraded instances. When this system property is set to false, users see this error when attempting to run GlideEncrypter. Unsupported call to GlideEncrypter. Details: GlideEncrypter is deprecated and now returns null, please refer KB1320986
Australia	No updates for this release.

Removed

Between your current release family and Australia, some Encryption Key Management features or functionality were removed.

Release	Release notes
Zurich	No updates for this release.
Australia	No updates for this release.

Deprecations

Between your current release family and Australia, some Encryption Key Management features or functionality were deprecated.

Release	Release notes
Zurich	No updates for this release.
Australia	No updates for this release.

Activation information

Review information on how to activate Encryption Key Management.

Release	Release notes
Zurich	The Platform Encryption subscription bundle is a group commercial entitlement that includes Field Encryption Enterprise and Cloud Encryption. Field Encryption Enterprise is the unlimited license of Field Encryption. The Enterprise plugin is available with the activation of the com.glide.now.platform.encryption plugin. For details, see Encryption and Key Management subscription bundle.
Australia	No updates for this release.

Additional requirements

If any additional requirements were introduced or changed for Encryption Key Management we have noted them here.

Release	Release notes
Zurich	No updates for this release.
Australia	No updates for this release.

Browser requirements

If any specific browser requirements were introduced or changed for Encryption Key Management we have noted them here.

Release	Release notes
Zurich	No updates for this release.
Australia	No updates for this release.

Accessibility information

Review details on accessibility information for Encryption Key Management, such as specific requirements or compliance levels.

Release	Release notes
Zurich	No updates for this release.
Australia	No updates for this release.

Localization information

If there are specific localization considerations for Encryption Key Management we have noted them here.

Release	Release notes
Zurich	No updates for this release.
Australia	No updates for this release.

Highlight information

If there are specific highlight considerations for Encryption Key Management we have noted them here.

Release	Release notes
Zurich	See the changes to the Key Management and Field Encryption records that are now logged on the Sys Audits [sys_audit] table. The GlideEncrypter API has been updated and now uses AES256-GCM encryption via the Key Management Framework. Enable or disable GlideEncrypter by using the glide.security.glideencrypter.allow system property. See Key Management Framework for more information.
Australia	No updates for this release.