---
sourceDocument: Brazil Platform security
sourceDocumentLink: https://www.servicenow.com/docs/r/platform-security

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Baseline version 6.0

# New hardening settings for baseline version 6.0 {#ariaid-title1}

Release version: Brazil  
Updated September 10, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
New hardening settings have been released with Security Center baseline version 6.0.

* [Enforce application specific ACLs only for application data](https://www.servicenow.com/docs/5cUvq1ceqhp6S1BCJb6xRQ "Avoid unauthorized or undesired access to application data by enforcing application-specific access control lists (ACLs) only for application data.")
* [Disable legacy JQuery UI usage](https://www.servicenow.com/docs/qpGZc~yHXZ_IMsA3qY_3lQ "Avoid the introduction of unpatched vulnerabilities in the library by disabling legacy JQuery UI usage.")
* [Display recommendations for high risk UI pages](https://www.servicenow.com/docs/lgIcJGaKnJ_h~corSZwb3g "Decrease the likelihood of authorization errors, and unintended information disclosure by displaying recommendations for high risk UI pages.")
* [Enforce current password policy compliance requirements on login](https://www.servicenow.com/docs/xoHG1WK5ATB7tLBqI5fD_g "Reduce the risk of brute force account login by enforcing current password policy compliance requirements on login.")
* [Prevent Users From Accepting Warning To Bypass CSRF Validation \[Updated in Security Center 1.3 and 1.5\]](sEpPLBRpmtxl6n1x7p1Zog "Use the glide.security.csrf.strict.validation.mode property to enable CSRF token strict validation. If the CSRF token doesn't match, it prevents resubmission of the request.")
* [Require Minimum and Maximum Password Length](https://www.servicenow.com/docs/eFV_75PP3UrH0n92W~e6ng "Set minimum and maximum password lengths to avoid compliance issues and reduce the risk of a successful brute force attack")
* [Limit session length for high assurance sessions](https://www.servicenow.com/docs/L9aLDzDsHqBPfaUgzboR7A "Reduce the risk of account takeover in high assurance sessions by limiting session length")
* [Disable deprecated TLS versions](https://www.servicenow.com/docs/XGv2Mos2rCs2P89ph327_g "Avoid loss or leakage of sensitive data by disabling deprecated TLS versions.")
* [Disable local login for users with Single Sign-On (SSO) enabled](https://www.servicenow.com/docs/G1HcEZmVOn~77lmeZAw84w "Update user records to disable local login for users with Single Sign-On (SSO) enabled.")
* [Reduce allowed bypasses for multifactor setup](https://www.servicenow.com/docs/fOvrG7B6LzPrOGpaCALrwA "Decrease the window of time an account is at risk of compromise by reducing allowed bypasses for multifactor setup.")
* [Prevent impersonating user from viewing application data](https://www.servicenow.com/docs/mPhCbGaatfKfdvQHxCbdAw "Use system properties to prevent an impersonating user from viewing application data.")
* [Prevent verbose HTTP request logging](https://www.servicenow.com/docs/pNSkJndcRi5aZvP26~yXGw "Help prevent access to sensitive information by reducing verbose HTTP request logging.")
* [Enable relay state in SAML requests to prevent replay attacks](https://www.servicenow.com/docs/OULWLXcMlM8S9CCQYJrpwQ "Reduce the risk of replay attacks by enabling relay state in SAML requests to help prevent replay attacks.")
* [Minimize failed login attempts for high assurance sessions](https://www.servicenow.com/docs/PRr_rWoyxRlux4yG3zQQKQ "Decrease the likelihood of a brute force attack by minimizing failed login attempts for high assurance sessions.")
* [Apply continuous authentication policies to mobile sessions](https://www.servicenow.com/docs/fRNYTE5wlO6l6VP11E8UtA "Reduce the risk of session hijacking by applying continuous authentication policies to mobile sessions.")
* [Disable use of TripleDES/3DES encryption algorithm](https://www.servicenow.com/docs/FloComwmvK_hpNxNZtl_Sg "Avoid the security risks of outdated encryption methods by disabling the use of the TripleDES/3DES encryption algorithm.")
{#new-hardening-settings-for-baseline-six__ul_f4q_lgv_bfc}