---
sourceDocument: Brazil Platform security
sourceDocumentLink: https://www.servicenow.com/docs/r/platform-security
Release :
- brazil
ft:locale :
- en-US
ft:publication_title :
- Brazil Platform security
ft:clusterId :
- psec
bundleId :
- psec
workflow :
- Platform
---
# Configure properties for customer-supplied key
# Configure properties for customer-supplied key {#ariaid-title1}
Release version: Brazil
Updated September 10, 2026
 1 minute to read
Review the system properties for the ephemeral public wrapping key that your instance uses to unwrap customer-supplied keys.
## Before you begin
Role required: sn_kmf.admin or sn_kmf.cryptographic manager
## About this task
You must wrap your symmetric data encryption key with a ServiceNow ephemeral public wrapping key before you can upload it to your instance.
When your key is uploaded to your instance, the instance unwraps it using the private side of the public key.
You can use system properties on your instance to define key padding, ephemeral key pair size, and a key validity period for this ephemeral public key.
{#configure-properties-for-customer-supplied-key__table_tzk_j4k_f2c__entry__3}
| System Property | Description | Default value |
|-|-|-|
| glide.kmf.ephemeral_key.key_padding | Key padding scheme for the ephemeral key. | OAEPWithSHA256AndMGF1Padding OAEP SHA256, but SHA1 is supported. |
| glide.kmf.ephemeral.key_size | Key size of the ephemeral key pair. | 4096 4096 bits, but 2048 bits are also supported. |
| Glide.kmf.ephemeral_key.key_validity_period | Period for which the ephemeral key pair is valid. | 02:00:00 2 Hours |
[ ]
{#configure-properties-for-customer-supplied-key__table_tzk_j4k_f2c}
## Procedure
Contact ServiceNow Support to change any of these properties.
Note:
These system properties aren't visible to admins, and don't appear in the System properties \[sys_properties\] list. Use the table above to see their default values.
## What to do next
Once your properties are configured to your needs, proceed to [Wrap your customer-supplied key](https://www.servicenow.com/docs/PLGQEXQsQeeQKZLLwfixUA "Wrap your symmetric data encryption key with an ephemeral public wrapping key before you can upload it to your instance.").