---
sourceDocument: Australia Platform security
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/de-DE/platform-security

 Release :

    - australia

ft:locale :

    - de-DE

ft:publication_title :

    - Australia Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Encrypting fields and attachments

# Encrypting fields and attachments {#ariaid-title1}

* Freigeben Version: Australia
* 
* Aktualisiert 12. März 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 Minute Lesedauer

Once cryptographic modules are created, a security admin can define the encrypted fields configuration (EFC) and opt to encrypt a field or attachment on a table.

## How to encrypt fields {#field-encryption-key-management__section_rmd_zv4_tnb}

Hinweis:  
Encrypted fields aren't audited by design. This behavior isn't configurable.  
1. Specify the key source: ServiceNow generated keys or your customer-supplied keys (bring your own key) in System SecurityField Encryption Settings.
2. After specifying the key source, create a cryptographic module or use an existing cryptographic module. Start with [Create a cryptographic module](https://servicenow-prod.fluidtopics.net/Jy8yosmnoD7W9psp60zV_A "Create a cryptographic module to define the mechanisms used for cryptographic operations. After you create the module, you create a cryptographic specification, where you define an algorithm for encryption and generates a key.") for instructions.  
   Hinweis:  
   If you use customer-supplied keys, follow the directions in [Create cryptographic module for Field Encryption](https://servicenow-prod.fluidtopics.net/MZeItQD~5FExpCGP6lnh3A "Create a Field Encryption cryptographic module to define the mechanisms used for cryptographic operations.") and [Configure properties for customer-supplied keys](https://servicenow-prod.fluidtopics.net/Wg7gwmbhwjqas7ygpSOHmQ "If the Field Encryption Enterprise plugin is enabled, you can use system properties to define key padding, ephemeral key pair size, and a key validity period of your customer-supplied keys.").
3. Create an encrypted field configuration to define where the encryption is applied. Here, you specify the target table and choose whether to encrypt a column or attachments within the table. See [Set encrypted field configurations](https://servicenow-prod.fluidtopics.net/5r7MNQppGsCLg~EGaWMYHg "Configure which table columns or attachments that the system encrypts using a preconfigured cryptographic module.") to get started.

{#field-encryption-key-management__ol_lct_1w4_tnb}  
Hinweis:  
See [Field Encryption Enterprise examples](https://servicenow-prod.fluidtopics.net/PuFZlfG_gWPad0kLXSCToQ#kmf-walkthroughs-tutorials "These examples walk you through the encryption of fields and attachments using customer-supplied keys.") that illustrates how to encrypt fields and attachments using customer-supplied keys.
* **[Set encrypted field configurations](https://servicenow-prod.fluidtopics.net/5r7MNQppGsCLg~EGaWMYHg)**   
  Configure which table columns or attachments that the system encrypts using a preconfigured cryptographic module.
* **[Script access for cryptographic modules](https://servicenow-prod.fluidtopics.net/9UUwgJJufjtSdqkyEL~2KQ)**   
  Scripts can be run to access a cryptographic module policy for a cryptographic purpose.
* **[Schedule mass encryption, decryption, and rekeying jobs](https://servicenow-prod.fluidtopics.net/zFqhMZZDbYGjie6eyZ9avA)**   
  Schedule encryption, decryption, and rekeying jobs to run at a time that is best for your instance.
* **[Run mass encryption or decryption](https://servicenow-prod.fluidtopics.net/vHU5O5id8J_D4WlQfGNcBw)**   
  You can run mass encryption on encryption configurations, as well as a mass decryption to decrypt previously encrypted values.
* **[Upload attachments for encryption](https://servicenow-prod.fluidtopics.net/oQQa6FBSTvQP9ZObigNLaw)**   
  Protect sensitive files by encrypting record attachments using Field Encryption and Row Conditions.