---
sourceDocument: Australia Conversational Interfaces
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/de-DE/conversational-interfaces

 Release :

    - australia

ft:locale :

    - de-DE

ft:publication_title :

    - Australia Conversational Interfaces

ft:clusterId :

    - convint

bundleId :

    - convint

workflow :

    - Platform


---

# Workflow Studio scoped application requirements for secure inputs

# Workflow Studio scoped application requirements for secure inputs {#ariaid-title1}

* Freigeben Version: Australia
* 
* Aktualisiert 12. März 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 Minute Lesedauer

Adhere to the following scoped application requirements to implement secure (password2)
inputs in your Virtual Agent topics.
You can add secure inputs to Virtual Agent topics in two ways:

* [Create a secure custom input control](https://servicenow-prod.fluidtopics.net/I6BBNeSyKcLz1exAhlXqzw "Build a custom input or response control that topic authors can use in topics or topic blocks. In Virtual Agent conversations, an input control gathers information from end users, while a response control displays information to end users.") that uses a Workflow Studio action or subflow with secure (password2 type) inputs.
* Add an [Action utility node](https://servicenow-prod.fluidtopics.net/bX~o3mJkRshG9DPstpWyhA "Use the Action utility in a Virtual Agent topic to select the flow action properties that the node should create. The Action utility integrates Virtual Agent with the ServiceNow Workflow Studio product.") to a topic that refers to a Workflow Studio action or subflow that has a single password2 field as an input.
{#va-fd-app-reqs-secure-inputs__ul_k4t_tjn_hsb}  
The [Key Management Framework](https://www.servicenow.com/docs/access?context=understanding-kmf&version=australia&pubname=australia-platform-security&ft:locale=en-US) (KMF) must be installed and configured for your instance. The scoped application that uses the secure fields must also have the following:

* A sys_kmf_crypto_module record, with a related Symmetric Key Wrapping/Unwrapping sys_kmf_module_crypto_spec record
* A sys_kmf_crypto_caller_policy record with the following properties:  
  * Policy name: \<modify the auto-generated name\>
  * Crypto module: com_glide_cs_glideencrypter
  * Type: Scope
  * Target Scope: \<your application's scope\>
  * Application: \<the name of your scoped application\>
  * Active: true
  * Result: Track
  {#va-fd-app-reqs-secure-inputs__ul_msx_lpn_hsb}
* A Workflow Studio action or subflow that accepts one or more password2 input fields
* A [Script step](https://www.servicenow.com/docs/access?context=javascript-step-action-designer&version=australia&pubname=australia-build-workflows&ft:locale=en-US) in the Workflow Studio action that unwraps the password2/KMF passwords as follows:

      var op = new 
      sn_kmf_ns.KMFCryptoOperation("global.com_glide_cs_glideencrypter","SYMMETRIC_UNWRAPPING").withAlgorithm("AES").withOutputFormat("KMFNONE");
      var old_pw_clear_data = op.doOperation(inputs.old_pw);
      var new_pw_clear_data = op.doOperation(inputs.new_pw);
      var new_pw_confirmed_clear_data = op.doOperation(inputs.new_pw_confirmed);

{#va-fd-app-reqs-secure-inputs__ul_i2j_cln_hsb}

For more information about password2 encryption with KMF, see [Password2 encryption with KMF](https://www.servicenow.com/docs/access?context=password-2way-encrypted-fields&version=australia&pubname=australia-platform-security&ft:locale=en-US).