--- sourceDocument: brazil Combined Product Files sourceDocumentLink: https://www.servicenow.com/docs/r/delta-zurich-brazil Release : - brazil ft:locale : - en-US ft:publication_title : - brazil Combined Product Files ft:clusterId : - delta3bz bundleId : - delta3bz --- # Combined Encryption release notes for upgrades from Zurich to Brazil # Combined Encryption release notes for upgrades from Zurich to Brazil {#ariaid-title1} Release version: Brazil Updated October 8, 2026 ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 6 minutes to read Summarize ![AI sparkle icon](https://servicenow.com/docs/portal-asset/ai-sparkle-icon) Summarized using AI This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete. ## Summary of Combined Encryption Release Notes for Upgrades from Zurich to Brazil This consolidated guide assists ServiceNow customers in preparing for upgrades of the Encryption product family from the Zurich release through to Brazil. It highlights new features, changes, deprecations, and important upgrade requirements across multiple releases to ensure a smooth transition and maintain data security compliance. Show full answer Show less ## Important Upgrade Considerations * **Java Version Requirements:** Upgrading Edge Encryption proxy to Brazil requires Java 21 or later. Earlier releases such as Yokohama through Australia require Java 17, but Brazil mandates Java 21 for installation and upgrade. * **Minimum Patch Levels:** Scheduled upgrades to Brazil must be performed from Zurich Patch 13 (ZP13), Australia Patch 6 (AP6), or later to ensure compatibility. * **3DES Deprecation:** The GlideEncrypter API no longer supports 3DES encryption as per NIST 800-131A Rev 2. The default encryption algorithm is now AES via the Key Management Framework (KMF). This applies from Zurich onward, requiring review of existing encryption keys and configurations. * **Column Level Encryption Upgrade:** Column Level Encryption was upgraded to KMF-CLE in Zurich due to 3DES deprecation, necessitating attention during upgrades. ## New Features Across Releases * **Zurich:** Introduced row conditions for Field Encryption, enabling encryption rules to be applied dynamically at the row level within columns. * **Australia:** Enhanced Field Encryption Enterprise administration interface for streamlined key rotation, policy updates, encryption status monitoring, and audit access. Added External Key Management Service (EKMS) integration to manage keys externally, improving security and simplifying rekeying after clone or restore operations. * **Brazil:** Edge Encryption proxy now supports Java 21, offering improved security and performance. Both Java 21 and Java 17.0.3+ are supported for Edge Encryption versions 21.x and 17.x respectively. ## Key Changes * **Zurich:** Field Encryption Enterprise API updates allow encryption of attachments using any of the three available Encryption APIs instead of requiring a specific one. * **Australia:** User interface improvements for Field Encryption and Field Encryption Enterprise include updated layouts, enhanced key rotation, policy management, and audit detail access. * **Brazil:** No functional changes were introduced in this release. ## Deprecations and Removals * **Deprecation:** Starting with Zurich, 3DES encrypted string keys are deprecated, and KMF is the supported format. * **Removals:** No features or functionalities were removed from Zurich through Brazil releases. ## Activation and Licensing * **Zurich:** Platform Encryption subscription bundle includes Field Encryption Enterprise and Cloud Encryption, activated via the com.glide.now.platform.encryption plugin. * **Australia and Brazil:** Activation of Platform Encryption with External Key Management Service requires the com.glide.encryption.externalkms plugin and a separate subscription. ## Practical Implications for ServiceNow Customers * Ensure Java versions comply with the stated requirements before upgrading Edge Encryption proxies to avoid upgrade failures. * Review and update encryption keys and algorithms to move away from deprecated 3DES toward AES with KMF for enhanced security and compliance. * Leverage new administration features and EKMS integration to simplify encryption management and key lifecycle operations. * Utilize row-level encryption policies introduced in Zurich to refine data protection at a granular level. * Plan upgrades according to minimum patch requirements and activation prerequisites to ensure feature availability and support. By following these guidelines and understanding the enhancements and requirements between Zurich and Brazil releases, ServiceNow customers can maintain robust data encryption, meet regulatory standards, and benefit from improved security operations. Consolidated page of all release notes for Encryption from Zurich to Brazil. ## How to use this page To help you prepare for your upgrade, we have combined the cross-family Encryption release notes onto one page. Read this summary of the new features, changes, and updated information for your product from Zurich to Brazil. Tip: If there were no updates for a release notes section in a certain family release, we included a short note for your reference. For example, if a product did not have any updates in Tokyo, the row says "No updates for this release." ## Important information for upgrading Encryption to Brazil Before you upgrade to Brazil, review these pre- and post-upgrade tasks and complete the tasks as needed. {#dfrn3-encryption-summary__entry__2} | Release | Release notes | |-|-| | Zurich | Upgrade information : For the GlideEncrypter API, NIST 800-131A Rev 2 has recommended against using the Triple Data Encryption Standard (3DES) encryption. The following changes are taking place in the Zurich release with the official removal of 3DES encryption for GlideEncrypter. * The GlideEncrypter API defaults to using the Key Management Framework (KMF) based algorithm, Advanced Encryption Standard (AES), for encryption and decryption operations for upgraded instances only. * For instances created with the Zurich release or later, this API isn't supported. * Learn more about 3DES deprecation in [KB1704481](https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1704481). In the Zurich release, Column Level Encryption has received a required upgrade to Key Management Framework Column Level Encryption (KMF-CLE) due to the platform-wide deprecation of 3DES. For more information about this upgrade, see KB1700704. | | Australia | No updates for this release. | | Brazil | Important information for upgrading to Brazil : * If you're using scheduled upgrade to upgrade your Edge Encryption proxy from a pre-Brazil release to Brazil, you must meet the following requirements before you attempt the upgrade: * Upgrade the Java version to Java 21 or later. * Ensure you're on Zurich Patch 13 (ZP13) or Australia Patch 6 (AP6) or later. If you're on an earlier version, scheduled upgrade will not work. * If you're using command-line upgrade, you must upgrade the Java version to Java 21 or later. * Java 17 is required to install Edge Encryption on versions Yokohama through Australia. Prior to upgrading to Brazil, you must upgrade to Java 21. See [Installing Edge Encryption](https://www.servicenow.com/docs/access?context=c_InstallEdgeEncryptionProxy&family=brazil&ft:locale=en-US) for installation details. | [ ] ## New features Between your current release family and Brazil, new features were introduced for Encryption. {#dfrn3-encryption-summary__entry__10} | Release | Release notes | |-|-| | Zurich | [Encrypt data using Row Conditions](https://www.servicenow.com/docs/access?context=encrypt-data-using-row-conditions&family=zurich&ft:locale=en-US) : Use row conditions for Field Encryption to define encryption rules for rows within a specific column, based on dynamic conditions. | | Australia | [Manage Field Encryption Enterprise with an enhanced Administration interface](https://www.servicenow.com/docs/access?context=now-platform-encryption&family=australia&ft:locale=en-US) : Configure encryption settings, monitor key usage, and streamline administration for Field Encryption and Field Encryption Enterprise with the following features: * Simplify key rotation and policy updates. * Access encryption status and audit details. * Navigate improved layouts for faster configuration. [Integrate External Key Management Service (EKMS) with Encryption Modules](https://www.servicenow.com/docs/access?context=ekms-external-key-management&family=australia&ft:locale=en-US) : Configure and manage encryption keys externally through EKMS integration with an enhanced encryption framework, which enables you to: * Hold encryption keys outside the instance for improved security. * Perform key rotation and revocation with automated security tasks. * Manage EKMS configurations and enforce the immutability of critical fields after they're active. * Simplify rekeying following instance clone and restore operations. * Monitor key state transitions, encrypted cache, and node-to-node communication. * Access UI improvements for configuration visibility and error handling. * Benefit from telemetry and performance-tested operations. | | Brazil | Edge Encryption proxy now supports Java 21 : Install and run the Edge Encryption proxy on systems with Java 21.0 or later. You can now use newer Java versions for enhanced security and performance benefits. Current supported versions are Java 21.0 or later in the 21.x version series, and Java 17.0.3 or later in the 17.x version series. For installation details, see [Installing Edge Encryption](https://www.servicenow.com/docs/access?context=c_InstallEdgeEncryptionProxy&family=brazil&ft:locale=en-US). | [ ] ## Changes Between your current release family and Brazil, some changes were made to existing Encryption features. {#dfrn3-encryption-summary__entry__18} | Release | Release notes | |-|-| | Zurich | [Field Encryption Enterprise](https://www.servicenow.com/docs/access?context=now-platform-encryption&family=zurich&ft:locale=en-US) API : Use all three Encryption APIs to encrypt on attachments, without needing to use any one specific API. | | Australia | [Field Encryption user interface changes](https://www.servicenow.com/docs/access?context=now-platform-encryption&family=australia&ft:locale=en-US) : The new Field Encryption and Field Encryption Enterprise UI includes updates to key rotation and policies, access to encryption status and audit details, and changes to layouts. | | Brazil | No updates for this release. | [ ] ## Removed Between your current release family and Brazil, some Encryption features or functionality were removed. {#dfrn3-encryption-summary__entry__26} | Release | Release notes | |-|-| | Zurich | No updates for this release. | | Australia | No updates for this release. | | Brazil | No updates for this release. | [ ] ## Deprecations Between your current release family and Brazil, some Encryption features or functionality were deprecated. {#dfrn3-encryption-summary__entry__34} | Release | Release notes | |-|-| | Zurich | [Prepare your instance for GlideEncrypter deprecation](https://www.servicenow.com/docs/access?context=check-3des&family=zurich&ft:locale=en-US) : Encrypted string keys 3DES format is no longer supported. Key Management Framework (KMF) is the supported format. | | Australia | No updates for this release. | | Brazil | No updates for this release. | [ ] ## Activation information Review information on how to activate Encryption. {#dfrn3-encryption-summary__entry__42} | Release | Release notes | |-|-| | Zurich | Activation information : The Platform Encryption subscription bundle is a group commercial entitlement that includes Field Encryption Enterprise and Cloud Encryption. Field Encryption Enterprise is the unlimited license of Field Encryption. The Enterprise plugin is available with the activation of the com.glide.now.platform.encryption plugin. For details, see the [Encryption and Key Management subscription bundle](https://www.servicenow.com/docs/access?context=encryption-sku&family=zurich&ft:locale=en-US). | | Australia | Activation information : Platform Encryption is available with activation of the com.glide.encryption.external_kms, which requires a separate subscription. For details, see [Encryption and Key Management subscription bundle](https://www.servicenow.com/docs/access?context=encryption-sku&family=australia&ft:locale=en-US). | | Brazil | Activation information : Platform Encryption Key Management Framework is available with activation of the com.glide.encryption.external_kms, which requires a separate subscription. For details, see [Encryption and Key Management subscription bundle](https://www.servicenow.com/docs/access?context=encryption-sku&version=australia&pubname=australia-platform-security&ft:locale=en-US). | [ ] ## Additional requirements If any additional requirements were introduced or changed for Encryption we have noted them here. {#dfrn3-encryption-summary__entry__50} | Release | Release notes | |-|-| | Zurich | No updates for this release. | | Australia | No updates for this release. | | Brazil | No updates for this release. | [ ] ## Browser requirements If any specific browser requirements were introduced or changed for Encryption we have noted them here. {#dfrn3-encryption-summary__entry__58} | Release | Release notes | |-|-| | Zurich | No updates for this release. | | Australia | No updates for this release. | | Brazil | No updates for this release. | [ ] ## Accessibility information Review details on accessibility information for Encryption, such as specific requirements or compliance levels. {#dfrn3-encryption-summary__entry__66} | Release | Release notes | |-|-| | Zurich | No updates for this release. | | Australia | No updates for this release. | | Brazil | No updates for this release. | [ ] ## Localization information If there are specific localization considerations for Encryption we have noted them here. {#dfrn3-encryption-summary__entry__74} | Release | Release notes | |-|-| | Zurich | No updates for this release. | | Australia | No updates for this release. | | Brazil | No updates for this release. | [ ] ## Highlight information If there are specific highlight considerations for Encryption we have noted them here. {#dfrn3-encryption-summary__entry__82} | Release | Release notes | |-|-| | Zurich | * Use row conditions for Field Encryption to define encryption rules for rows within a specific column, based on dynamic conditions. * Use any of the three Field Encryption APIs to encrypt attachments. See [Encryption](https://www.servicenow.com/docs/access?context=encryption-landing&family=zurich&ft:locale=en-US) for more information. | | Australia | * ManageField Encryption and Field Encryption Enterprise using the redesigned user interface. * Enhance data security with the newly added External Key Management Service (EKMS) integration, enabling you to store encryption keys outside the instance for enhanced security. See [Encryption](https://www.servicenow.com/docs/access?context=encryption-landing&family=australia&ft:locale=en-US) for more information. | | Brazil | The ServiceNow® Encryption application protects your sensitive data and helps you meet regulatory requirements and standards. Encryption provides multiple solutions to safeguard your instance, including Key Management Framework, Field Encryption, Cloud Encryption, Edge Encryption, Database Encryption, and certificate management. | [ ]