---
sourceDocument: Australia Platform security
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/de-DE/platform-security

 Release :

    - australia

ft:locale :

    - de-DE

ft:publication_title :

    - Australia Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Set Automatic Token Cleanup for Token Credentials \[New in Security Center 2.0\]

# Set Automatic Token Cleanup for Token Credentials \[New in Security Center 2.0\] {#ariaid-title1}

* Freigeben Version: Australia
* 
* Aktualisiert 12. März 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 Minute Lesedauer

Use the com.snc.platform.security.token.auth.cleanup property to ensure that expired API keys and HMAC secrets are deleted, thereby limiting the potential for token reuse.
If the com.snc.platform.security.token.auth.cleanup property is set to the insecure value of false, expired API keys and HMAC secrets will not be deleted, creating a potential for token reuse. If a token
was expired due to leakage or compromise, its reuse could expose the instance to anyone possessing the leaked token.

Expired tokens are retained for the number of days defined by com.snc.platform.security.token.auth.days.expired.hmac_secret.is.kept and
com.snc.platform.security.token.auth.days.expired.api_key.is.kept. Valid values for these settings are integers of 0 or greater. A value of 0 results in the expired tokens being deleted on the same
day, while a higher number of days increases the exposure period. A default value of 7 days or fewer is recommended.

## More information {#sc-set-automatic-token-cleanup-for-token-credentials__section_qhx_1b1_xwb}

{#sc-set-automatic-token-cleanup-for-token-credentials__table_ajc_b43_3kb__entry__2}

| Attribute | Description |
|-|-|
| Configuration name | com.snc.platform.security.token.auth.cleanup, com.snc.platform.security.token.auth.days.expired.hmac_secret.is.kept,com.snc.platform.security.token.auth.days.expired.api_key.is.kept |
| Configuration type | System Properties (/sys_properties_list.do) |
| Data type | integer |
| Recommended value | The recommended values are true, and any integer less than or equal to 7. |
| Default value | 7 |
| Category | [Architecture, design, and threat modeling](https://servicenow-prod.fluidtopics.net/GP7csKl7x_IoFFA7nE_oew "This broad control addresses high level design considerations and key elements to implement a secure application. This covers the tenants of availability, confidentiality processing integrity, non-repudiation and privacy. Additionally, elements of a secure software development lifecycle are included.") |
| Security risk | * Severity score: 5.1 * CVSS score: Medium * Security risk details: Not configuring this property to the recommend value of true could prevent expired API keys and HMAC secrets from being deleted which increases the likelihood for token reuse. {#sc-set-automatic-token-cleanup-for-token-credentials__ul_g1g_3sf_xwb} |
| Dependencies and prerequisites | None |
[ ]

{#sc-set-automatic-token-cleanup-for-token-credentials__table_ajc_b43_3kb}