Edge Encryption system requirements
Summarize
Summary of Edge Encryption System Requirements
The Edge Encryption proxy application can be deployed on servers or virtual machines running Windows or Linux. Maintaining specific system and Java requirements is crucial for optimal performance and compatibility with ServiceNow environments.
Show less
Key Features
- Java Requirements: Must run Java 11.0.6 or later; Java 8 is no longer supported. Enable AES 256-bit encryption specifically.
- Proxy Server Configuration: Minimum of 4 GB RAM (6 GB recommended) and a 3 GHz (4-core preferred) CPU. Ensure the host has at least 1 GB more RAM than the proxy server.
- Supported Systems: Windows Server 2012, 2016, 2019, and 64-bit Linux with 32-bit GNU C library installed.
- Version Synchronization: Keep the Edge Encryption proxy version aligned with your ServiceNow instance version for compatibility and feature access.
- Network Requirements: Ensure proper firewall, network access, and instance access, allowing communication over TCP port 443.
- Database System Requirements: Use Oracle MySQL versions 5.7 or 8.0, with a minimum of 16 GB RAM and 2 GHz CPU. Configuring a high availability cluster is recommended.
Key Outcomes
Adhering to these requirements ensures that the Edge Encryption proxy operates efficiently, supports secure data encryption and tokenization, and integrates seamlessly with your ServiceNow environment. This setup minimizes downtime during upgrades and enhances data security across your applications.
You can run the Edge Encryption proxy application on servers or virtual machines that run on Microsoft Windows or Linux operating systems. For optimum performance, ensure that your configuration meets these requirements.
Java requirements
Support for OpenJDK
The ServiceNow AI Platform supports OpenJDK version 11.
Proxy server minimum configuration
4 GB of RAM per proxy server (6 GB is recommended for most deployments).
Note:The proxy server host requires at least 1 GB of RAM more than the proxy server. The proxy server host needs the extra 1 GB for operating system services. For example, if you configure a proxy server to use 4 GB of RAM, you must install at least 5 GB of RAM on the proxy server host.Because the proxy server requires at least 4 GB of memory, 32-bit JREs and 32-bit operating systems are no longer supported starting with the London release.
- 3 or more GHz CPU (4-core CPU preferred for optimum performance).
- Multiple proxy servers behind a load balancer. The number of proxy servers you need depends on the number of application nodes, the number of simultaneous users, and the number of servers needed for failover. See Sizing your Edge Encryption environment for more information.
- Ability to run concurrently with other services, depending on the server utilization and resource availability.
Proxy server supported systems
| Supported System | Description |
|---|---|
| Windows Server 2012, 2012-R2, 2016, and 2019 editions |
|
| Linux |
On 64-bit Linux systems, you must install the 32-bit GNU C
library (glibc). The installation command for CentOS is |
Proxy server version requirements
Keep your Edge Encryption proxy version in sync with your ServiceNow instance version (same major release, for example Tokyo). To eliminate downtime during the upgrade process, the Edge Encryption proxy is backwards compatible. However it is important to upgrade as soon as possible to avoid ensure users can access new features and important bug fixes.
Proxy server connection requirements
| Network Privilege | Description |
|---|---|
| Firewall access | Configure any firewalls between the proxy server and the client devices to allow a connection. If your network uses a DeMilitarized Zone (DMZ) to add an extra layer of security to your Local Area Network (LAN), and if your network security protocols limit port access from within the network to the DMZ, you might have to deploy a proxy server to a machine within the DMZ. |
| Network access | Configure each client to enable the proxy server to connect with it. If network security prevents you from configuring new machines that can connect to the clients, install the proxy server on an existing machine with connection privileges. |
| Instance access | Ensure that the proxy server has network access to the instance. Make sure that you configure the proxy server network to allow traffic over TCP port 443. |
| Network account | Install the proxy server with either a local or domain administrator. |
Order-preserving and tokenization database system requirements
Order-preserving encryption and encryption patterns require that you configure an Oracle MySQL database for the Edge Encryption proxy server. Order-preserving encryption allows any comparison operation to be directly applied on encrypted data, without first decrypting the data. Encryption patterns let you replace string patterns with tokens (called tokenization) before they are sent to and stored in the database. Because of the size of the MySQL database, use a dedicated proxy server to run the order-preserving and tokenization database.
| MySQL Database | Requirement |
|---|---|
| Version | MySQL database versions 5.7 and 8.0 Note: MySQL versions 5.5 and 5.6 are no longer tested and have reached the end of support. |
| OS | 64-bit systems |
| CPU | 2 or more GHz CPU (4-core CPU preferred for optimum performance) |
| RAM | 16 GB |
| Disk | Storage Area Network (SAN) or local storage (RAID 10 recommended) |
| Size | Determined by the number of potential records multiplied by the record size. See Calculate the order-preserving and tokenization database size. |
| Configuration | High availability cluster. If you are unsure of how to configure your MySQL server, contact MySQL for configuration information. |