---
sourceDocument: Australia Platform security
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/de-DE/platform-security

 Release :

    - australia

ft:locale :

    - de-DE

ft:publication_title :

    - Australia Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Create a cryptographic module

# Create a cryptographic module {#ariaid-title1}

* Freigeben Version: Australia
* 
* Aktualisiert 12. März 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 Minute Lesedauer

Create a cryptographic module to define the mechanisms used for cryptographic
operations. After you create the module, you create a cryptographic specification, where you
define an algorithm for encryption and generates a key.

## Vorbereitungen

If you're supplying your own keys, go to [Configure and upload your customer supplied key](https://servicenow-prod.fluidtopics.net/EI6~rDwd7ENC_Q_Px6k0JQ "You can use your own customer-supplied key instead of using the ServiceNow system-generated keys.").

Role required: sn_kmf.cryptographic_manager

## Warum und wann dieser Vorgang ausgeführt wird

This procedure describes options that are available with KMF in the ServiceNow platform base system. Field Encryption Enterprise functionality is
available only when the com.glide.now.platform.encryption plugin
is active. See [Activate Field Encryption](https://servicenow-prod.fluidtopics.net/d~sW4JlJZpz95XWViCzI5w "Activate either Field Encryption Starter or Field Encryption Enterprise.")
for more information on obtaining Field Encryption Enterprise. See [Create cryptographic module for Field Encryption](https://servicenow-prod.fluidtopics.net/MZeItQD~5FExpCGP6lnh3A "Create a Field Encryption cryptographic module to define the mechanisms used for cryptographic operations.").  
Hinweis:  
Cryptographic module \[sys_kmf_crypto_module\] records can't be deleted.

## Prozedur

1. Navigate to AllKey ManagementCryptographic ModulesCreate New.
2. On the form, fill in the fields:  
   {#create-cryptographic-module__entry__2}

   | Field | Description |
   |-|-|
   | Module name | Alphanumeric string to be referenced when running scripts. |
   | Crypto spec template | Select the Default template to use to create the cryptographic module, as it contains mappings of supported algorithms for crypto specifications. |
   | Default module access policy value | * Rely on system default: * Reject * Track {#create-cryptographic-module__ul_dtq_pmt_xrb} |
   | Actual module access policy result | Reject or track, based on the default policy value or the value selected during the creation of the module access policy. |
   | Name | Crypto module name prepended with application scope name. |
   | Crypto module life-cycle state | Life cycle refers to the creation, use, and deactivation of a cryptographic module. Set to Draft initially during configuration. When using the module, set this field to Published. The Default template is automatically set to Published. |
   [Tabelle : 1. Cryptographic Module fields]

3. Select Submit.  
   Warnung:  

   For legacy encryption support users:
   :   If you're using the non-enterprise version of Field Encryption, you're limited to five modules. If you've exceeded this limit, you receive the following warning:
   :   This insertion exceeds the number of published modules limit for Field Encryption entitled with the Subscription Product. The Enterprise subscription for Field Encryption is required for additional modules. Please reach out to your Account team.

   After submitting successfully, your cryptographic module is listed in the Cryptographic Modules table. The system prepends the name with the scope to avoid conflict with other scoped applications. For example, if you
   created a module with the name <kbd class="ph userinput">my_crypto_module</kbd> in the global application scope, the name is saved as <kbd class="ph userinput">global.my_crypto_module</kbd>.

## Nächste Maßnahme

[Create a cryptographic specification](https://servicenow-prod.fluidtopics.net/lCSkAEpGH9XnETzdJE0T1A "After you create a cryptographic module, create a cryptographic specification to define the module algorithms.")
.
* **[Create a cryptographic specification](https://servicenow-prod.fluidtopics.net/lCSkAEpGH9XnETzdJE0T1A)**   
  After you create a cryptographic module, create a cryptographic specification to define the module algorithms.
* **[Configure key lifecycle states](https://servicenow-prod.fluidtopics.net/NVIDPtYNGu5nP4Wd3oW4Tw)**   
  After you have created a cryptographic specification, you can configure the lifecycle actions for the keys in your instance.
* **[Generate a ServiceNow cryptographic key](https://servicenow-prod.fluidtopics.net/24qBq00hyoT4pc0kGA7nTw)**   
  Follow this procedure to upload and configure a ServiceNow cryptographic key to encrypt sensitive data.