---
sourceDocument: Australia Platform security
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/de-DE/platform-security

 Release :

    - australia

ft:locale :

    - de-DE

ft:publication_title :

    - Australia Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Encrypt attachments using standard encryption

# Encrypt attachments using standard encryption {#ariaid-title1}

* Freigeben Version: Australia
* 
* Aktualisiert 12. März 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 3 Minuten Lesedauer

You can encrypt attachments for specific tables.

All attachments to a table use the same encryption type. Encrypted attachments are not searched
when performing a text search. Only the standard encryption types are allowed for attachments.
The order preserving or equality preserving encryption types are not allowed.  
For a session bypassing the Edge Encryption proxy:

* On a record with attachment encryption activated:
  * The user can see that there are attachments and the attachment names.
  * The user cannot add new attachments.
  {#c_EncryptingAttachments__ul_hkw_d45_xr}
* On a record without attachment encryption activated:
  * The user can open and download existing attachments.
  * The user can add new attachments.
  {#c_EncryptingAttachments__ul_v1c_k45_xr}
{#c_EncryptingAttachments__ul_cns_qn5_xr}

For a session using the encryption proxy, the user can open and download existing attachments
and add new attachments.

## Configure attachment encryption {#ariaid-title2}

Select the tables whose attachments are to be encrypted and identify the encryption
type.

### Vorbereitungen

Role required: security_admin

### Prozedur

1. Navigate to AllEdge Encryption ConfigurationEdge Encryption ConfigurationsCreate New.
2. Fill in the fields on the form, as appropriate.  
   {#t_ConfigureAttachmentEncryption__table_nb5_jkf_4r__entry__2}

   | Field | Description |
   |-|-|
   | Table | Select a table whose attachments are to be encrypted. |
   | Type | Whether to encrypt a table column or attachments for the table. Select Attachment. |
   | Column | The table field to be encrypted. This field appears when the Type is Column, and not when Type is Attachment. |
   | Encryption type | The encryption type to use. For attachments, only Standard AES128 and Standard AES256 are allowed. |
   [Tabelle : 1. Edge Encryption configuration]

   {#t_ConfigureAttachmentEncryption__table_nb5_jkf_4r}
3. Click Submit.

### Nächste Maßnahme

After the encryption record has been added, you can create an attachment encryption job to encrypt existing attachments. If you do not run an attachment encryption job, the system encrypts new attachments when you attach them.  
Hinweis:  
If you mark the edge_encryption_clear_attachment_allowed attribute as True in the table's Collection Dictionary entry, unencrypted attachments are added to a table using Edge Encryption to encrypt attachments. If enabling this attribute, you should setup an 'Attachment Encryption Job so that any unencrypted attachments added will be encrypted.

## Schedule an attachment encryption job {#ariaid-title3}

You can schedule a job to find and encrypt any unencrypted attachments for a
specified table, using the default encryption key configured for the table.

### Vorbereitungen

Role required: security_admin

### Prozedur

1. Navigate to Edge Encryption ConfigurationEncryption ConfigurationsAll.
2. Click the table you want to schedule an encryption job for.
3. Under Related Links, click Schedule Mass Encryption Job.  
   The Scheduled Encryption Job form is shown with all fields populated. The
   bottom of the form shows records for previous job executions.
4. Fill in the fields on the form, as appropriate.  
   {#t_RunAttachmentEncryption__table_xss_4g2_zs__entry__2}

   | Field | Value |
   |-|-|
   | Name | Enter a descriptive name. |
   | Active | Clear this check box if you want to deactivate this job. |
   | Job Type | Select Attachment Encryption. |
   | Table | Select a table. |
   | Run | Select the period between job executions. |
   | Starting | Enter the date and time to run the job for the first time. |
   [ ]

   {#t_RunAttachmentEncryption__table_xss_4g2_zs}
5. Click the menu icon in the form header and select Save.
6. To see an estimated count of records to be updated, click Estimate Record Count.
7. To run the job immediately, click Execute Now.

## Schedule an attachment decryption job {#ariaid-title4}

You can schedule a job to decrypt any encrypted attachments for a specified table, to
store clear attachments in the instance.

### Vorbereitungen

Hinweis:  
You must mark the encryption record for the table as inactive (clear the Active box) before the decryption job runs, otherwise, nothing happens.

Role required: security_admin

### Prozedur

1. Navigate to Edge Encryption ConfigurationEncryption ConfigurationsAll.
2. Click the table with the attachments that you want to decrypt.
3. Under Related Links, click Schedule Mass Attachment Decryption Job.  
   The Scheduled Encryption Job form is shown with all fields populated. The
   bottom of the form shows records for previous job executions.
4. Fill in the fields on the form, as appropriate.  
   {#t_RunAttachmentDecryptionJob__table_xss_4g2_zs__entry__2}

   | Field | Value |
   |-|-|
   | Name | Enter a descriptive name. |
   | Job Type | Select Attachment Decryption. |
   | Active | Clear the check mark if you want to deactivate this job. |
   | Table | Select a table. |
   | Run | Select the period between job executions. |
   | Starting | Enter the date and time to run the job for the first time. |
   [ ]

   {#t_RunAttachmentDecryptionJob__table_xss_4g2_zs}
5. Click the menu icon in the form header and select Save.
6. To see an estimated count of records to be updated, click Estimate Record Count.
7. To run the job immediately, click Execute Now.