--- sourceDocument: zurich Combined Product Files sourceDocumentLink: https://www.servicenow.com/docs/r/zurich/delta-xanadu-zurich Release : - zurich ft:locale : - en-US ft:publication_title : - zurich Combined Product Files ft:clusterId : - delta3zx bundleId : - delta3zx --- # Combined Encryption release notes for upgrades from Xanadu to Zurich # Combined Encryption release notes for upgrades from Xanadu to Zurich {#ariaid-title1} Release version: Zurich Updated October 8, 2026 ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 3 minutes to read Summarize ![AI sparkle icon](https://servicenow.com/docs/portal-asset/ai-sparkle-icon) Summarized using AI This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete. ## Summary of Combined Encryption release notes for upgrades from Xanadu to Zurich This consolidated guide provides essential information for ServiceNow customers upgrading Encryption features from the Xanadu through Yokohama releases to the Zurich release. It highlights new features, changes, deprecations, and important upgrade tasks to ensure a smooth transition to Zurich. Show full answer Show less ## Important Upgrade Information * The Zurich release officially removes Triple Data Encryption Standard (3DES) support in the GlideEncrypter API, following NIST 800-131A Rev 2 guidelines. * GlideEncrypter now defaults to Advanced Encryption Standard (AES) using the Key Management Framework (KMF) for encryption and decryption on upgraded instances. * Instances created with Zurich or later do not support the GlideEncrypter API. * Column Level Encryption has been upgraded to Key Management Framework Column Level Encryption (KMF-CLE) due to the platform-wide 3DES deprecation. * Preparation for GlideEncrypter deprecation requires migration from 3DES encrypted string keys to KMF format keys. ## New Features * Row Conditions for Field Encryption: Define dynamic encryption rules at the row level within specific columns, enhancing granular control over encrypted data. ## Changes * Field Encryption Enterprise API now supports all three Encryption APIs for encrypting attachments, removing the need to use a specific API. ## Deprecations and Removals * No new feature removals in Zurich, but 3DES encryption is deprecated and unsupported going forward. ## Activation and Licensing * The Platform Encryption subscription bundle includes Field Encryption Enterprise and Cloud Encryption. * Activation of Field Encryption Enterprise requires enabling the `com.glide.now.platform.encryption` plugin. ## Additional Notes * No updates or changes were made in the Xanadu or Yokohama releases for Encryption features, browser requirements, accessibility, localization, or highlight information. ## Practical Impact for ServiceNow Customers When upgrading to Zurich, customers should plan to migrate away from 3DES encryption to AES with KMF to maintain compliance and platform compatibility. The introduction of row-level encryption conditions enables more flexible data security policies. The enhanced Field Encryption Enterprise API simplifies attachment encryption. Ensuring the necessary plugins are activated will provide full access to these updated Encryption capabilities. Consolidated page of all release notes for Encryption from Xanadu to Zurich. ## How to use this page To help you prepare for your upgrade, we have combined the cross-family Encryption release notes onto one page. Read this summary of the new features, changes, and updated information for your product from Xanadu to Zurich. Tip: If there were no updates for a release notes section in a certain family release, we included a short note for your reference. For example, if a product did not have any updates in Tokyo, the row says "No updates for this release." ## Important information for upgrading Encryption to Zurich Before you upgrade to Zurich, review these pre- and post-upgrade tasks and complete the tasks as needed. {#dfrn3-encryption-summary__entry__2} | Release | Release notes | |-|-| | Xanadu | No updates for this release. | | Yokohama | No updates for this release. | | Zurich | Upgrade information : For the GlideEncrypter API, NIST 800-131A Rev 2 has recommended against using the Triple Data Encryption Standard (3DES) encryption. The following changes are taking place in the Zurich release with the official removal of 3DES encryption for GlideEncrypter. * The GlideEncrypter API defaults to using the Key Management Framework (KMF) based algorithm, Advanced Encryption Standard (AES), for encryption and decryption operations for upgraded instances only. * For instances created with the Zurich release or later, this API isn't supported. * Learn more about 3DES deprecation in [KB1704481](https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1704481). In the Zurich release, Column Level Encryption has received a required upgrade to Key Management Framework Column Level Encryption (KMF-CLE) due to the platform-wide deprecation of 3DES. For more information about this upgrade, see KB1700704. | [ ] ## New features Between your current release family and Zurich, new features were introduced for Encryption. {#dfrn3-encryption-summary__entry__10} | Release | Release notes | |-|-| | Xanadu | No updates for this release. | | Yokohama | No updates for this release. | | Zurich | [Encrypt data using Row Conditions](https://www.servicenow.com/docs/access?context=encrypt-data-using-row-conditions&family=zurich&ft:locale=en-US) : Use row conditions for Field Encryption to define encryption rules for rows within a specific column, based on dynamic conditions. | [ ] ## Changes Between your current release family and Zurich, some changes were made to existing Encryption features. {#dfrn3-encryption-summary__entry__18} | Release | Release notes | |-|-| | Xanadu | No updates for this release. | | Yokohama | No updates for this release. | | Zurich | [Field Encryption Enterprise](https://www.servicenow.com/docs/access?context=now-platform-encryption&family=zurich&ft:locale=en-US) API : Use all three Encryption APIs to encrypt on attachments, without needing to use any one specific API. | [ ] ## Removed Between your current release family and Zurich, some Encryption features or functionality were removed. {#dfrn3-encryption-summary__entry__26} | Release | Release notes | |-|-| | Xanadu | No updates for this release. | | Yokohama | No updates for this release. | | Zurich | No updates for this release. | [ ] ## Deprecations Between your current release family and Zurich, some Encryption features or functionality were deprecated. {#dfrn3-encryption-summary__entry__34} | Release | Release notes | |-|-| | Xanadu | No updates for this release. | | Yokohama | No updates for this release. | | Zurich | [Prepare your instance for GlideEncrypter deprecation](https://www.servicenow.com/docs/access?context=check-3des&family=zurich&ft:locale=en-US) : Encrypted string keys 3DES format is no longer supported. Key Management Framework (KMF) is the supported format. | [ ] ## Activation information Review information on how to activate Encryption. {#dfrn3-encryption-summary__entry__42} | Release | Release notes | |-|-| | Xanadu | No updates for this release. | | Yokohama | No updates for this release. | | Zurich | Activation information : The Platform Encryption subscription bundle is a group commercial entitlement that includes Field Encryption Enterprise and Cloud Encryption. Field Encryption Enterprise is the unlimited license of Field Encryption. The Enterprise plugin is available with the activation of the com.glide.now.platform.encryption plugin. For details, see the [Encryption and Key Management subscription bundle](https://www.servicenow.com/docs/access?context=encryption-sku&family=zurich&ft:locale=en-US). | [ ] ## Additional requirements If any additional requirements were introduced or changed for Encryption we have noted them here. {#dfrn3-encryption-summary__entry__50} | Release | Release notes | |-|-| | Xanadu | No updates for this release. | | Yokohama | No updates for this release. | | Zurich | No updates for this release. | [ ] ## Browser requirements If any specific browser requirements were introduced or changed for Encryption we have noted them here. {#dfrn3-encryption-summary__entry__58} | Release | Release notes | |-|-| | Xanadu | No updates for this release. | | Yokohama | No updates for this release. | | Zurich | No updates for this release. | [ ] ## Accessibility information Review details on accessibility information for Encryption, such as specific requirements or compliance levels. {#dfrn3-encryption-summary__entry__66} | Release | Release notes | |-|-| | Xanadu | No updates for this release. | | Yokohama | No updates for this release. | | Zurich | No updates for this release. | [ ] ## Localization information If there are specific localization considerations for Encryption we have noted them here. {#dfrn3-encryption-summary__entry__74} | Release | Release notes | |-|-| | Xanadu | No updates for this release. | | Yokohama | No updates for this release. | | Zurich | No updates for this release. | [ ] ## Highlight information If there are specific highlight considerations for Encryption we have noted them here. {#dfrn3-encryption-summary__entry__82} | Release | Release notes | |-|-| | Xanadu | No updates for this release. | | Yokohama | No updates for this release. | | Zurich | * Use row conditions for Field Encryption to define encryption rules for rows within a specific column, based on dynamic conditions. * Use any of the three Field Encryption APIs to encrypt attachments. See [Encryption](https://www.servicenow.com/docs/access?context=encryption-landing&family=zurich&ft:locale=en-US) for more information. | [ ]