--- sourceDocument: yokohama Combined Product Files sourceDocumentLink: https://www.servicenow.com/docs/r/yokohama/delta-xanadu-yokohama Release : - yokohama ft:locale : - en-US ft:publication_title : - yokohama Combined Product Files ft:clusterId : - delta3yx bundleId : - delta3yx --- # Combined Encryption Key Management release notes for upgrades from Xanadu to Yokohama # Combined Encryption Key Management release notes for upgrades from Xanadu to Yokohama {#ariaid-title1} Release version: Yokohama Updated October 8, 2026 ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 5 minutes to read Summarize ![AI sparkle icon](https://servicenow.com/docs/portal-asset/ai-sparkle-icon) Summarized using AI This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete. ## Summary of Combined Encryption Key Management Release Notes for Upgrades from Xanadu to Yokohama This consolidated guide provides essential information for ServiceNow customers upgrading Encryption Key Management from the Xanadu release family to the Yokohama release. It covers new features, important changes, activation instructions, and upgrade considerations to ensure a smooth transition and enhanced security. Show full answer Show less ## Important Upgrade Considerations * **3DES Deprecation:** Yokohama discontinues support for the GlideEncrypter API using 3DES encryption, following NIST recommendations. New Yokohama instances cannot use GlideEncrypter. Existing Yokohama instances still support 3DES, but its use can be disabled via a system property. * All base system scripts have been updated to use alternative encryption methods to prepare for the eventual full deprecation of 3DES. ## Key Features and Enhancements * **Code Signing Improvements (Xanadu):** A new plugin introduces roles and administrative features including signature migration jobs and a streamlined activation UI. Signing of scripts and attachments is restricted to trusted non-production instances or the standalone signing tool, enhancing Root of Trust security. * **Field Encryption Rebranding (Yokohama):** Column Level Encryption is now called Field Encryption Starter (FES), and Column Level Encryption Enterprise is renamed Field Encryption Enterprise (FEE). * **Access Observer:** A new tool to monitor and understand who accesses your encrypted data, aiding planning and troubleshooting. * **Migration Enhancements:** Improved workflow for migrating from Edge Encryption to Field Encryption ensures data remains encrypted throughout the process. * **Attachment Handling:** When Edge Encryption is enabled, multiple encrypted attachments can be downloaded together as a zip file using the new "Download All" button. * **Logging and UTF-8 Support (Xanadu):** Enhancements include improved readability in logging for Column Level Encryption and support for full UTF-8 characters, including emojis. ## Changes and Removals There were no feature removals or deprecations between Xanadu and Yokohama releases aside from the planned 3DES deprecation noted above. Yokohama does not introduce additional removals or deprecations. ## Activation and Licensing * The **Platform Encryption subscription bundle** encompasses Field Encryption Enterprise and Cloud Encryption in Yokohama (previously Column Level Encryption Enterprise in Xanadu). * Activation requires enabling the `com.glide.now.platform.encryption` plugin. * Post-purchase, administrators can activate Field Encryption Enterprise without technical assistance. ## Additional Notes * No new browser, accessibility, localization, or additional requirements were introduced for Encryption Key Management in the Yokohama release. * Improved dashboards migrated from the deprecated jRobin framework to the NEXT Experience View provide consistent monitoring and troubleshooting capabilities. ## What to Expect Upgrading to Yokohama provides enhanced encryption management capabilities, stronger security with 3DES deprecation preparations, improved administrative workflows especially around code signing and field encryption, and better tools for data access monitoring and migration. These updates help maintain compliance, simplify management, and ensure your encrypted data remains secure and manageable throughout your ServiceNow instance lifecycle. Consolidated page of all release notes for Encryption Key Management from Xanadu to Yokohama. ## How to use this page To help you prepare for your upgrade, we have combined the cross-family Encryption Key Management release notes onto one page. Read this summary of the new features, changes, and updated information for your product from Xanadu to Yokohama. Tip: If there were no updates for a release notes section in a certain family release, we included a short note for your reference. For example, if a product did not have any updates in Tokyo, the row says "No updates for this release." ## Important information for upgrading Encryption Key Management to Yokohama Before you upgrade to Yokohama, review these pre- and post-upgrade tasks and complete the tasks as needed. {#dfrn3-encryptionkeymanagement-summary__entry__2} | Release | Release notes | |-|-| | Xanadu | No updates for this release. | | Yokohama | Upgrade information : * The GlideEncrypter API uses the three-key Triple Data Encryption Standard (3DES) encryption standard which [NIST 800-131A Rev 2](https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-131Ar2.pdf) has recommended against using after 2023. The following changes are taking place in the Yokohama release in preparation for a full deprecation of GlideEncrypter/3DES in the future. * New Yokohama instances can't use GlideEncrypter. All base system scripts have been changed to use alternative encryption processes. * if you're upgrading your Yokohama instances, you can still use 3DES, but you can also disable 3DES usage with a system property. * Learn more about 3DES deprecation in [KB1704481](https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1704481). | [ ] ## New features Between your current release family and Yokohama, new features were introduced for Encryption Key Management. {#dfrn3-encryptionkeymanagement-summary__entry__8} | Release | Release notes | |-|-| | Xanadu | [New plugin available for Code Signing roles and administrative features](https://www.servicenow.com/docs/access?context=cs-role-landing&family=xanadu&ft:locale=en-US) : Activate the plugin to access the new roles and administration features. The new plugin creates signature migration jobs, new code signing roles, and a new code signing administration page. | | Yokohama | [Column Level Encryption is now Field Encryption](https://www.servicenow.com/docs/access?context=column-level-encryption-landing&family=yokohama&ft:locale=en-US) : Column Level Encryption has been rebranded to Field Encryption Starter (FES), while Column Level Encryption Enterprise is now Field Encryption Enterprise (FEE). [Access observer](https://www.servicenow.com/docs/access?context=access-observer&family=yokohama&ft:locale=en-US) : Use access observer to understand the people and processes that access data on your instance. [Improved migration process from Edge Encryption to Field Encryption](https://www.servicenow.com/docs/access?context=column-level-encryption-landing&family=yokohama&ft:locale=en-US) : Use the new process for migration from Edge Encryption to Field Encryption (formerly Column Level Encryption). This improved workflow ensures that your data migrates from Edge Encryption to Field encryption without spending time in an unencrypted state. | [ ] ## Changes Between your current release family and Yokohama, some changes were made to existing Encryption Key Management features. {#dfrn3-encryptionkeymanagement-summary__entry__14} | Release | Release notes | |-|-| | Xanadu | [Changes to Code Signing requirements](https://www.servicenow.com/docs/access?context=code-signing-landing&family=xanadu&ft:locale=en-US) : As a part of improving security around Root of Trust, signing of script and attachments records can only be done on your trusted non-production instance or using the standalone signing tool. The exception is notarization, which can still be performed in the protected production instance. [Enhancement requests for the Code Signing Standalone signing tool](https://www.servicenow.com/docs/access?context=sa-code-signing-tool&family=xanadu&ft:locale=en-US) : Updates to Code Signing enable your administrators to work with keystores, signature records, and records to be signed outside of the local system. [Improved activation process for Code Signing](https://www.servicenow.com/docs/access?context=config-code-signing&family=xanadu&ft:locale=en-US) : Activate Code signing with a new UI page that is designed to streamline the activation process. [Download All Button for Multiple Attachments is available when Edge Encryption is enabled](https://www.servicenow.com/docs/access?context=c_EdgeEncryptionOverview&family=xanadu&ft:locale=en-US) : By using the download all functionality, you can now download multiple documents into a zip file when you also enable Edge Encryption. [Edge Encryption jRobin dashboards have been migrated to NEXT Experience](https://www.servicenow.com/docs/access?context=code-signing-reference&family=xanadu&ft:locale=en-US) : View troubleshooting and performance on dashboards that were migrated from the deprecated jRobin framework. These dashboards display the same information that was available in previous versions. [Column Level Encryption Enterprise is installable by administrators after purchase](https://www.servicenow.com/docs/access?context=activate-platform-encryption&family=xanadu&ft:locale=en-US) : After purchasing Column Level Encryption Enterprise, your administrator can typically activate the product without needing technical assistance. [Support for full string UTF-8 in Column Level Encryption](https://www.servicenow.com/docs/access?context=set-encrypted-field-config&family=xanadu&ft:locale=en-US) : CLE supports encryption and decryption of the full range of UTF-8 characters, including emoji. [Improved readability for Column Level Encryption logging](https://www.servicenow.com/docs/access?context=code-signing-reference&family=xanadu&ft:locale=en-US) : With the improved system, node, application, and audit logging, your administrators can analyze and troubleshoot their CLE or CLEE implementation. | | Yokohama | No updates for this release. | [ ] ## Removed Between your current release family and Yokohama, some Encryption Key Management features or functionality were removed. {#dfrn3-encryptionkeymanagement-summary__entry__20} | Release | Release notes | |-|-| | Xanadu | No updates for this release. | | Yokohama | No updates for this release. | [ ] ## Deprecations Between your current release family and Yokohama, some Encryption Key Management features or functionality were deprecated. {#dfrn3-encryptionkeymanagement-summary__entry__26} | Release | Release notes | |-|-| | Xanadu | No updates for this release. | | Yokohama | No updates for this release. | [ ] ## Activation information Review information on how to activate Encryption Key Management. {#dfrn3-encryptionkeymanagement-summary__entry__32} | Release | Release notes | |-|-| | Xanadu | The Platform Encryption subscription bundle is a group commercial entitlement that includes Column Level Encryption Enterprise, Cloud Encryption, and Database Encryption. Column Level Encryption Enterprise is the unlimited license of Column Level Encryption. The Enterprise plugin is available with the activation of the com.glide.now.platform.encryption plugin. For details, see [Encryption and Key Management subscription bundle](https://www.servicenow.com/docs/access?context=encryption-sku&family=xanadu&ft:locale=en-US). | | Yokohama | Activation information : The Platform Encryption subscription bundle is a group commercial entitlement that includes Field Encryption Enterprise and Cloud Encryption. Field Encryption Enterprise is the unlimited license of Field Encryption. The Enterprise plugin is available with the activation of the com.glide.now.platform.encryption plugin. For details, see [Encryption and Key Management subscription bundle](https://www.servicenow.com/docs/access?context=encryption-sku&family=yokohama&ft:locale=en-US). | [ ] ## Additional requirements If any additional requirements were introduced or changed for Encryption Key Management we have noted them here. {#dfrn3-encryptionkeymanagement-summary__entry__38} | Release | Release notes | |-|-| | Xanadu | No updates for this release. | | Yokohama | No updates for this release. | [ ] ## Browser requirements If any specific browser requirements were introduced or changed for Encryption Key Management we have noted them here. {#dfrn3-encryptionkeymanagement-summary__entry__44} | Release | Release notes | |-|-| | Xanadu | No updates for this release. | | Yokohama | No updates for this release. | [ ] ## Accessibility information Review details on accessibility information for Encryption Key Management, such as specific requirements or compliance levels. {#dfrn3-encryptionkeymanagement-summary__entry__50} | Release | Release notes | |-|-| | Xanadu | No updates for this release. | | Yokohama | No updates for this release. | [ ] ## Localization information If there are specific localization considerations for Encryption Key Management we have noted them here. {#dfrn3-encryptionkeymanagement-summary__entry__56} | Release | Release notes | |-|-| | Xanadu | No updates for this release. | | Yokohama | No updates for this release. | [ ] ## Highlight information If there are specific highlight considerations for Encryption Key Management we have noted them here. {#dfrn3-encryptionkeymanagement-summary__entry__62} | Release | Release notes | |-|-| | Xanadu | * Start using Code Signing's improved activation process. You can use the new Code Signing UI page for a faster, streamlined activation. * Administer Column Level Encryption with new Column Level Encryption APIs, roles, and administration features. Column Level Encryption logging has been enhanced for improved readability. * Download all encrypted attachments as a zip file by using the new Download All button. See [Key Management Framework](https://www.servicenow.com/docs/access?context=encryption&family=xanadu&ft:locale=en-US) for more information. | | Yokohama | * Column Level Encryption has been rebranded and redesigned to now be called Field Encryption. * Use Access Observer to help plan for and troubleshoot Field Encryption implementations. * Edge Encryption administrators can use the new process to migrate from Edge Encryption to Field Encryption. See [Key Management Framework](https://www.servicenow.com/docs/access?context=encryption&family=yokohama&ft:locale=en-US) for more information. | [ ]