---
sourceDocument: Australia Conversational Interfaces
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/pt-BR/conversational-interfaces

 Release :

    - australia

ft:locale :

    - pt-BR

ft:publication_title :

    - Australia Conversational Interfaces

ft:clusterId :

    - convint

bundleId :

    - convint

workflow :

    - Platform


---

# Workflow Studio scoped application requirements for secure inputs

# Workflow Studio scoped application requirements for secure inputs {#ariaid-title1}

* Versão de lançamento: Australia
* 
* Atualizado 12 de mar. de 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 min. de leitura

Adhere to the following scoped application requirements to implement secure (password2)
inputs in your Virtual Agent topics.
You can add secure inputs to Virtual Agent topics in two ways:

* [Create a secure custom input control](https://servicenow-prod.fluidtopics.net/Xg048sA~cOyVCjZC5JYN7g "Build a custom input or response control that topic authors can use in topics or topic blocks. In Virtual Agent conversations, an input control gathers information from end users, while a response control displays information to end users.") that uses a Workflow Studio action or subflow with secure (password2 type) inputs.
* Add an [Action utility node](https://servicenow-prod.fluidtopics.net/xaFtsKHflXjnH~6CMMkYcw "Use the Action utility in a Virtual Agent topic to select the flow action properties that the node should create. The Action utility integrates Virtual Agent with the ServiceNow Workflow Studio product.") to a topic that refers to a Workflow Studio action or subflow that has a single password2 field as an input.
{#va-fd-app-reqs-secure-inputs__ul_k4t_tjn_hsb}  
The [Key Management Framework](https://www.servicenow.com/docs/access?context=understanding-kmf&version=australia&pubname=australia-platform-security&ft:locale=en-US) (KMF) must be installed and configured for your instance. The scoped application that uses the secure fields must also have the following:

* A sys_kmf_crypto_module record, with a related Symmetric Key Wrapping/Unwrapping sys_kmf_module_crypto_spec record
* A sys_kmf_crypto_caller_policy record with the following properties:  
  * Policy name: \<modify the auto-generated name\>
  * Crypto module: com_glide_cs_glideencrypter
  * Type: Scope
  * Target Scope: \<your application's scope\>
  * Application: \<the name of your scoped application\>
  * Active: true
  * Result: Track
  {#va-fd-app-reqs-secure-inputs__ul_msx_lpn_hsb}
* A Workflow Studio action or subflow that accepts one or more password2 input fields
* A [Script step](https://www.servicenow.com/docs/access?context=javascript-step-action-designer&version=australia&pubname=australia-build-workflows&ft:locale=en-US) in the Workflow Studio action that unwraps the password2/KMF passwords as follows:

      var op = new 
      sn_kmf_ns.KMFCryptoOperation("global.com_glide_cs_glideencrypter","SYMMETRIC_UNWRAPPING").withAlgorithm("AES").withOutputFormat("KMFNONE");
      var old_pw_clear_data = op.doOperation(inputs.old_pw);
      var new_pw_clear_data = op.doOperation(inputs.new_pw);
      var new_pw_confirmed_clear_data = op.doOperation(inputs.new_pw_confirmed);

{#va-fd-app-reqs-secure-inputs__ul_i2j_cln_hsb}

For more information about password2 encryption with KMF, see [Password2 encryption with KMF](https://www.servicenow.com/docs/access?context=password-2way-encrypted-fields&version=australia&pubname=australia-platform-security&ft:locale=en-US).