---
sourceDocument: Brazil Platform security
sourceDocumentLink: https://www.servicenow.com/docs/r/platform-security

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Baseline version 2.0

# New hardening settings for baseline version 2.0 {#ariaid-title1}

Release version: Brazil  
Updated September 10, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
New hardening settings have been released with Security Center baseline version 2.0.

* [Ensure archive table ACLs are checked](https://www.servicenow.com/docs/22l9SYX0Un6MNjyTXa256g "The glide.security.enable_archive_table_acls property controls whether access control lists (ACLs) of the original table, the table the archive table was created from, are evaluated to false.")
* [Enforce application scope restrictions \[New in Security Center 1.3 and removed in 1.5\]](DoIb72flb8Q8iGCbeczkNw "Use the glide.record.legacy_cross_scope_access_policy_in_script property to control the permissions of scoped apps.")
* [Enable the hardened java security manager](https://www.servicenow.com/docs/Yb48YvEw1UuFX7xylgS0WA "The glide.security.manager property contains the Java classname of the current Java security manager.")
* [Verify certificate revocation](https://www.servicenow.com/docs/Q0C0t0Cp1lD~UHmARXQooQ "The com.glide.communications.httpclient.verify_revoked_certificate property checks certificate revocation during the Transport Layer Security (TLS) handshake to ensure that security checks aren't bypassed.")
* [Clear pasteboard when app backgrounds](https://www.servicenow.com/docs/wIJzr4hjUq0Z5FNe2NZF0g "The glide.sg.clear_pasteboard_when_backgrounded property controls if text copied from ServiceNow mobile app is kept in the clipboard and pasteboard after the app is in background mode. If it is not set to the recommended value of true, then sensitive information may be disclosed to the Android or iOS clipboard where it can be exposed to other applications on the device.")
* [Enable protected tables plugin](https://www.servicenow.com/docs/eAJlkJ5DstyVlU33V2T~Xg "Use the com.glide.security.protected_table.enabled property to prevent higher privilege users from tampering with log tables.")
* [Enforce strict elevate privilege](https://www.servicenow.com/docs/ZkmW43fyZHk0CLYCh~Ij9g "Use the glide.security.strict_elevate_privilege property to control whether roles marked as privileged must be manually elevated for the user to be granted the role's capabilities.")
* [Limit integrations' active session life span](https://www.servicenow.com/docs/tLc1cbCxthpB88zR0SmpOQ "Use the glide.integrations.active.session.life_span property to enforce the maximum lifespan on active integration HTTP sessions, regardless of session inactivity.")
* [Proactively invalidate sessions after defined durations](https://www.servicenow.com/docs/as9g6ufH_gkhY5wStTI7Mw "The glide.active.session.timeout.invalidate.session property controls whether a timed-out session is proactively invalidated before the Tomcat server processes it.")
* [Enable MID audit log](https://www.servicenow.com/docs/LMa0BCXVUxbQcUKcguGZKQ "The MID Server command audit log records details such as the command name, command hash, name of credential used, and execution status.")
* [Use of secure insert multiple operation within import set API](https://www.servicenow.com/docs/Jy8PlMdEI5pP512Eia5~AQ "Use the com.glide.import_set_api.insert_multiple_optimize property to control whether GlideRecordSecure or GlideRecord is used for the Insert Multiple operation within the Import Set API.")
* [Enforce OCSP check on network error](https://www.servicenow.com/docs/uM6zGKep7fFGAoTvnrC95g "Learn how to configure the com.glide.communications.httpclient.ocsp_allow_network_error property to prevent bad actors from bypassing Online Certificate Status Protocol (OCSP) checks.")
* [Enforce security rules to sharing dashboards](https://www.servicenow.com/docs/PCKXF5ejue7WsKH10C6EaA "Use the glide.cms.dashboards.sharing_with_secure_search property to control whether users can share dashboards.")
* [Restrict oauth parameters to POST body](https://www.servicenow.com/docs/y1SUCOWjqtiCqGk~9PrdQw "Use the glide.oauth.allow.parameters.in.post.body.only property restricts OAuth credentials to POST request bodies when set to true.")
* [Limit attachment size in training and prediction flows for GraphQL endpoints \[New in Security Center 1.3 and updated in 1.5\]](qLnmuj8P4wqlsilxAj5Nkw "The glide.platform_ml_di.max_attachment_size_graphql property controls the maximum allowed size limit for returning attachments in GraphQL endpoints of training or prediction flows.")
* [Disable GlideRecord scope fencing legacy behavior](https://www.servicenow.com/docs/LuDiSg77tE8SZZIJ~3aFGg "The glide.record.legacy_cross_scope_access_policy_in_script property disables scope fencing allowing scoped apps to access global script interfaces. It was created as a patch to GlideRecord's cross scope access.")
* [Required JMS connection factories](https://www.servicenow.com/docs/MzSp2BKxOHC1_UT6CbVHyA "The mid.property.jms.command.allowed_factory_names property controls the Java Messaging Service (JMS) connection factories that the MID Server can use.")
* [Limit attachment size in training and prediction flows \[New in Security Center 1.3 and updated in 1.5\]](Y5OCnxdLvChi03FAT_o82A "The glide.platform_ml_di.max_attachment_size property controls the maximum allowed size limit for returning attachments in training and prediction flows.")
* [Log session audit events](https://www.servicenow.com/docs/VpH0CHD8P4d3VnRFWhSVbA "Use a system property to enable creations of session audit events")
* [Require write access to access service catalog add item page](https://www.servicenow.com/docs/6weC0jpjMcN3uZGSTAzr5g "Use the glide.sc.request.add_item_write_access property to prevent unauthorized operations from being performed on catalog items.")
* [Define active session timeout exception roles](https://www.servicenow.com/docs/bgNHFMrq9sCochevvjX8MQ "Use a system property to exempt roles from active session timeout limits.")
* 
* [Enforce scoped ACL access for information request playbooks \[New in Security Center 1.3 and updated in 1.5\]](zhv1qByuqK~uM7LaDmXY5w "Use the glide.enforce_security_scope.sn_gsm_info_req property to control access to playbook data for the Information Request playbooks feature.")
* 
* [Ensure dashboards creation/deletion requires access check \[New in Security Center 1.3 and updated in 2.0\]](ZY952Oq0I4y2WMnZlTSt1g "The glide.processors.check_access_before_process system property enables access control list (ACL) enforcement for creating or deleting dashboards when a user is logged in.")
* [Enforce device encryption and passcode requirements \[New in Security Center 1.3\]](55t6VVKB~tvW5Vn~fW9Tbg "The glide.sg.device_encryption_enabled property enforces the Federal Information Processing Standard (FIPS 140-2) Encryption. Mobile device encryption and passcode ensure that an unauthorized user can't access the content of a device even if the device is physically obtained.")
* [Validate file MIME type in AttachmentCreator web service](https://www.servicenow.com/docs/ert8WNdv4ojnRWvdkV~FSA "The glide.attachment.enforce_security_validation property determines whether Multipurpose internet Mail Extensions (MIME) files undergo validation.")
* [Verify certificate revocation](https://www.servicenow.com/docs/Q0C0t0Cp1lD~UHmARXQooQ "The com.glide.communications.httpclient.verify_revoked_certificate property checks certificate revocation during the Transport Layer Security (TLS) handshake to ensure that security checks aren't bypassed.")
* [Check impersonation on ACL evaluation in HR App \[New in Security Center 1.3 and updated in 1.5\]](lPdQIrkEp3OGoFR6HB69Vw "Use the sn_hr_core.impersonateCheck property to prevent a user from impersonating another user and accessing their HR information.")
* [Require CAPTCHA for guest walk-up experience in customer service application](https://www.servicenow.com/docs/TXNfScvW9ZXV5e1T5~EfkQ "The CAPTCHA for the Guest Walk-up experience prevents unauthenticated guest users to create bookings by requiring users to complete a CAPTCHA verification.")
* [Require Authentication on Event Management HTTP Processor \[New in Security Center 1.3, Updated in 1.5, and removed in 2.0\]](Cs9cMiPou~_2TkuWmJGcZQ "Learn how to establish secure basic authentication for inbound Amazon Simple Notification Service (SNS) requests when the Event Management plugin (com.glideapp.itom.snac) is enabled.")
* [Limit guest's active session life span](https://www.servicenow.com/docs/D_nC27wS3_Oad6BghSQnYQ "Use the glide.guest.active.session.life_span property to control the duration of an active guest's HTTP sessions.")
* [Disallow target cloning \[New in Security Center 1.3\]](nom1pFL7EOqk6TOqcmXePA "Configure the glide.db.clone.allow_clone_target property to prevent your instance from being used as a clone target.")
* [Set safe content security policy for SVG files](https://www.servicenow.com/docs/JBsscxriEDSwlv6az9bF4g "The com.glide.csp.self_script_src_svg property adds the script-src none directive to the HTTP Content-Security-Policy header when Scalable Vector Graphics (SVGs) are accessed through the Translation Memory Index (IIX) file extension.")
* [Anti-CSRF token validation time](https://www.servicenow.com/docs/QkQCoMk7tCcB5xzcRtcJ_A "The glide.security.csrf_previous.time_limit property specifies the time in seconds for a secure token to expire.")
* [Restrict knowledge bases access](https://www.servicenow.com/docs/vp_pBmTJWccMoLrqIgYTcg "The glide.knowman.block_access_with_no_user_criteria property is used to control the read/write access of users on knowledge based articles.")
* [Enforce scope security for public sector digital services \[New in Security Center 1.3\]](WPEwP9w89T5SN_bIKNzycA "Use the glide.enforce_security_scope.sn_gsm property to control how the application data from the Public Sector Digital Services application is accessed.")
* [Restrict HR case updates from personal emails](https://www.servicenow.com/docs/gQSx10pKmxJSzul0s0GRuw "Use the sn_hr_core.restrict_guest_email property to control whether a user can respond back to a HR case with their personal email.")
* [Limit UI active session life span](https://www.servicenow.com/docs/w2qrlyyHi2mymPqwEtZD6g "The glide.ui.active.session.life_span property enforces max lifespan on active authenticated HTTP sessions irrespective of inactive timeout.")
* [Enforce secure referrer policy](https://www.servicenow.com/docs/YmVoFmzf9Gm5yMdfGFLfpQ "Use the com.glide.security.referrerpolicy property to ensure that the Referrer-Policy HTTP header sends the appropriate level of data to each ServiceNow page to help prevent data leaks.")
{#new-hardening-settings__ul_qtt_q55_zyb}