Code Signing release notes
The Code Signing (CS) application validates scripts and code that runs on your instance. Code Signing was enhanced and updated in the Zurich release.
Code Signing highlights for the Zurich release
Zurich Patch 4
- Code Signing OOB Apps Signatures plugin
- Use this plugin (com.glide.code_signing.oob_apps_signatures) to install build time signatures for all relevant records in trued-up ServiceNow® Store application versions.
- Use Code Signing Guardrails to improve checks during the signing process to create more secure workflows.
- Use the Code Signing Migration workflow to identify the signatures that are created with expired or inactive certificates and re-assign them to the appropriate records automatically.
- Revoke Code Signing certificates securely using a quorum-based approval policy to prevent unauthorized use.
- Monitor and manage your Code Signing environment with the new Health and Status dashboard.
- The restructured navigation panel and the renamed pages provide improved accessibility and streamlined functionality.
New in the Zurich release
- Code Signing Installation using Plugin
-
Customer administrators can now install the Code Signing plugin directly from the ServiceNow Plugin portal without the need to contact the Customer Service and Support team to enable the Code Signing framework. This enhancement supports self-service deployment and simplifies the installation process.
- Quorum Controlled Certificate Revocation
- Revoke Code Signing certificates using a quorum-based control policy. Revoke certificates to help prevent them from being used to verify signatures. A quorum-based approval flow promotes added security by requiring approvals from multiple stakeholders, to help prevent unintended or unauthorized certificate revocations.
- Code Signing Health and Status Dashboard
- The new Code Signing Health and Status dashboard provides a centralized, user-friendly interface to monitor the overall health and configuration of your code signing environment. It highlights configuration settings, displays the status of essential components, and offers actionable guidance to help resolve issues effectively.
UI changes
- Coral theme
- Coral is now the default theme for new portal, web, and mobile experiences with Next Experience or Core UI enabled. This theme provides a fresh look and feel, featuring brand-neutral illustrations to enhance your user experience. A dark theme option is available for web and mobile experiences.
Changed in this release
- Enhanced Code-Signing Verification for ACC Framework Table
- You can now generate KMF signature files for tables that extend Agent Client Collector Configuration (
sn_agent_configuration_file) and Agent Client Collector Plugin (sn_agent_asset). This enhancement allows attachments from the tables to successfully pass code-signing verification and be downloaded to the MID Server when code signing is enabled.
Activation information
Code Signing is a ServiceNow AI Platform feature that is available with activation of the Code Signing (com.glide.code_signing_enterprise) plugin. For details, see Configuring Code Signing.