Combined Code Signing release notes for upgrades from Xanadu to Zurich

zurich Combined Product Files

Release

zurich

ft:locale

en-US

ft:publication_title

zurich Combined Product Files

ft:clusterId

delta3zx

bundleId

delta3zx

Combined Code Signing release notes for upgrades from Xanadu to Zurich

Release version: Zurich

Updated July 20, 2026

4 minutes to read

Summarize

Summarized using AI

Summary of Combined Code Signing release notes for upgrades from Xanadu to Zurich

This consolidated release notes document provides ServiceNow customers with key information about Code Signing features, changes, and upgrade guidance spanning from the Xanadu through Zurich releases. It is designed to help you prepare for upgrading your Code Signing framework with clear visibility into new capabilities, enhancements, and operational instructions relevant to your environment.

Show full answer Show less

Important Upgrade Information

No updates or removals occurred in Code Signing functionality for the Xanadu, Yokohama, or Zurich releases.
Pre- and post-upgrade tasks should be reviewed and completed as needed before upgrading to Zurich.
Code Signing activation continues to require enabling the com.glide.codesigningenterprise plugin via the ServiceNow AI Platform.

New Features Introduced in Zurich

Self-Service Plugin Installation: Administrators can now install the Code Signing plugin directly from the ServiceNow Plugin portal without contacting support, simplifying deployment.
Quorum Controlled Certificate Revocation: Certificates can be revoked using a multi-stakeholder quorum approval process, enhancing security by preventing unintended or unauthorized revocations.
Code Signing Health and Status Dashboard: A centralized dashboard provides real-time monitoring, configuration insights, and actionable guidance for managing your Code Signing environment efficiently.

Enhancements and Changes

Guardrails Check Enhancements (Yokohama): Improved signature verification processes and performance optimizations, including clearer log file naming for easier management.
Update Set Size Limit: Update sets are now capped at 10,000 records to improve system performance and user experience.
Instance Naming Updates: Trusted non-production and protected production instances have been renamed to trusted and protected instances respectively, aligning terminology with customer usage.
Enhanced Code-Signing Verification for ACC Framework Tables (Zurich): Support added for generating KMF signature files for Agent Client Collector tables, enabling attachments to pass verification and download to MID Servers when code signing is active.

Additional Operational Highlights

Zurich Patch 4 introduces the com.glide.codesigning.oobappssignatures plugin to install build-time signatures for ServiceNow Store applications, ensuring integrity for out-of-the-box apps.
The Code Signing Migration workflow helps identify and reassign signatures created with expired or inactive certificates, maintaining signature validity across your environment.
Navigation and page naming have been restructured for improved accessibility and usability within the Code Signing interface.

What to Expect

By upgrading to Zurich and utilizing these enhancements, ServiceNow customers can expect a more secure, manageable, and user-friendly Code Signing environment. The new dashboard and quorum-based revocation policy strengthen security controls, while self-service plugin installation and improved guardrails streamline administrative workflows.

Consolidated page of all release notes for Code Signing from Xanadu to Zurich.

How to use this page

To help you prepare for your upgrade, we have combined the cross-family Code Signing release notes onto one page. Read this summary of the new features, changes, and updated information for your product from Xanadu to Zurich.

Tip:

If there were no updates for a release notes section in a certain family release, we included a short note for your reference. For example, if a product did not have any updates in Tokyo, the row says "No updates for this release."

Important information for upgrading Code Signing to Zurich

Before you upgrade to Zurich, review these pre- and post-upgrade tasks and complete the tasks as needed.


Release	Release notes
Xanadu	No updates for this release.
Yokohama	No updates for this release.
Zurich	No updates for this release.

New features

Between your current release family and Zurich, new features were introduced for Code Signing.


Release	Release notes
Xanadu	No updates for this release.
Yokohama	No updates for this release.
Zurich	Code Signing Installation using Plugin Customer administrators can now install the Code Signing plugin directly from the ServiceNow Plugin portal without the need to contact the Customer Service and Support team to enable the Code Signing framework. This enhancement supports self-service deployment and simplifies the installation process. Quorum Controlled Certificate Revocation Revoke Code Signing certificates using a quorum-based control policy. Revoke certificates to help prevent them from being used to verify signatures. A quorum-based approval flow promotes added security by requiring approvals from multiple stakeholders, to help prevent unintended or unauthorized certificate revocations. Code Signing Health and Status Dashboard The new Code Signing Health and Status dashboard provides a centralized, user-friendly interface to monitor the overall health and configuration of your code signing environment. It highlights configuration settings, displays the status of essential components, and offers actionable guidance to help resolve issues effectively.

Changes

Between your current release family and Zurich, some changes were made to existing Code Signing features.


Release	Release notes
Xanadu	No updates for this release.
Yokohama	Enhancements to the guardrails check The Code Signing Guardrails check has been improved to enhance signature verification, resulting in more secure workflows. In addition, multiple optimizations have been implemented to improve the performance benchmarks of the Guardrails scan, and log files now feature a more intuitive naming convention, which simplifies file identification within your system. Generate update sets with a maximum size of 10,000 records Code Signing now enforces limits on large update sets to improve the user experience. The maximum size for an update set is 10,000 records. Naming updates for trusted and production instances The trusted non-production instance has been renamed to trusted instance, and the protected production instance has been renamed to protected instance. These naming updates have been made to better align with customer usage.
Zurich	Enhanced Code-Signing Verification for ACC Framework Table You can now generate KMF signature files for tables that extend Agent Client Collector Configuration (`sn_agent_configuration_file`) and Agent Client Collector Plugin (`sn_agent_asset`). This enhancement allows attachments from the tables to successfully pass code-signing verification and be downloaded to the MID Server when code signing is enabled.

Removed

Between your current release family and Zurich, some Code Signing features or functionality were removed.


Release	Release notes
Xanadu	No updates for this release.
Yokohama	No updates for this release.
Zurich	No updates for this release.

Deprecations

Between your current release family and Zurich, some Code Signing features or functionality were deprecated.


Release	Release notes
Xanadu	No updates for this release.
Yokohama	No updates for this release.
Zurich	No updates for this release.

Activation information

Review information on how to activate Code Signing.


Release	Release notes
Xanadu	No updates for this release.
Yokohama	Code Signing is a ServiceNow AI Platform feature that is available with activation of the Code Signing (com.glide.code_signing_enterprise) plugin. For details, see Configuring Code Signing.
Zurich	Code Signing is a ServiceNow AI Platform feature that is available with activation of the Code Signing (com.glide.code_signing_enterprise) plugin. For details, see Configure.

Additional requirements

If any additional requirements were introduced or changed for Code Signing we have noted them here.


Release	Release notes
Xanadu	No updates for this release.
Yokohama	No updates for this release.
Zurich	No updates for this release.

Browser requirements

If any specific browser requirements were introduced or changed for Code Signing we have noted them here.


Release	Release notes
Xanadu	No updates for this release.
Yokohama	No updates for this release.
Zurich	No updates for this release.

Accessibility information

Review details on accessibility information for Code Signing, such as specific requirements or compliance levels.


Release	Release notes
Xanadu	No updates for this release.
Yokohama	No updates for this release.
Zurich	No updates for this release.

Localization information

If there are specific localization considerations for Code Signing we have noted them here.


Release	Release notes
Xanadu	No updates for this release.
Yokohama	No updates for this release.
Zurich	No updates for this release.

Highlight information

If there are specific highlight considerations for Code Signing we have noted them here.


Release	Release notes
Xanadu	No updates for this release.
Yokohama	Use Code Signing Guardrails to improve checks during the signing process to create more secure workflows. See Code Signing for more information.
Zurich	Zurich Patch 4 Code Signing OOB Apps Signatures plugin Use this plugin (com.glide.code_signing.oob_apps_signatures) to install build time signatures for all relevant records in trued-up ServiceNow® Store application versions. Use Code Signing Guardrails to improve checks during the signing process to create more secure workflows. Use the Code Signing Migration workflow to identify the signatures that are created with expired or inactive certificates and re-assign them to the appropriate records automatically. Revoke Code Signing certificates securely using a quorum-based approval policy to prevent unauthorized use. Monitor and manage your Code Signing environment with the new Health and Status dashboard. The restructured navigation panel and the renamed pages provide improved accessibility and streamlined functionality.