--- sourceDocument: Australia Release Notes sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/release-notes Release : - australia ft:locale : - en-US ft:publication_title : - Australia Release Notes ft:clusterId : - rn bundleId : - rn --- # Key Management release notes # Key Management release notes {#ariaid-title1} Release version: Australia Updated March 12, 2026 ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 2 minutes to read The ServiceNow® Encryption Key Management application protects your data by using encryption, tightly controlled key access, National Institute of Standards and Technology (NIST) 800-57-based key life-cycle management, and FIPS 140-2-L3 key protection. Encryption Key Management was enhanced and updated in the Australia release. ## About Key Management {#encryption-key-mgmt-rn__encryption-key-mgmt-rn-highlights} * GlideDigest has been updated to allow creation and verification of message digests using the SHA512 cryptographic hash function * Admins can share module keys between instances offline to facilitate instance clones between on-premise instances using KMF. * The signing and verification processes for JWTs are now integrated as operation types in the existing KMFCryptoOperation class. {#encryption-key-mgmt-rn__ul_g2q_r1n_fhc} See [Key Management Framework](https://www.servicenow.com/docs/access?context=encryption&version=australia&pubname=australia-platform-security&ft:locale=en-US) for more information.{#encryption-key-mgmt-rn__encryption-key-mgmt-rn-highlights-2} ## Activation and other requirements Activation information : The Platform Encryption subscription bundle is a group commercial entitlement that includes Field Encryption Enterprise and Cloud Encryption.{#encryption-key-mgmt-rn__encryption-key-mgmt-rn-activation-1} Field Encryption Enterprise is the unlimited license of Field Encryption. The Enterprise plugin is available with the activation of the com.glide.now.platform.encryption plugin. For details, see [Encryption and Key Management subscription bundle](https://www.servicenow.com/docs/access?context=encryption-sku&version=australia&pubname=australia-platform-security&ft:locale=en-US).{#encryption-key-mgmt-rn__encryption-key-mgmt-rn-activation-2} Upgrade information : * In pre-Zurich releases, the GlideEncrypter API used the three-key Triple Data Encryption Standard (3DES) encryption standard, which [NIST 800-131A Rev 2](https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-131Ar2.pdf) has recommended against using after 2023. The following changes are taking place in the Australia release in preparation for a full deprecation of GlideEncrypter/3DES in the future: * New Australia instances can't use GlideEncrypter. All base system scripts have been changed to use alternative encryption processes. * if you're upgrading your Australia instances, you can still GlideEncrypter, which has been updated to use AES256-GCM encryption via the Key Management Framework. * Learn more about 3DES deprecation in [KB1704481](https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1704481). {#encryption-key-mgmt-rn__ul_trm_zbd_ycc} {#encryption-key-mgmt-rn__ul_sfs_1rh_rkb} ## Australia {#ariaid-title2} The ServiceNow® Encryption Key Management application protects your data by using encryption, tightly controlled key access, National Institute of Standards and Technology (NIST) 800-57-based key life-cycle management, and FIPS 140-2-L3 key protection. Encryption Key Management was enhanced and updated in the Australia release. ### What's new {#encryption-key-mgmt-rn-release__encryption-key-mgmt-rn-new-features} [Added SHA512 support for message digests](https://www.servicenow.com/docs/access?context=c_GlideDigestScopedAPI&version=australia&pubname=australia-api-reference&ft:locale=en-US) : GlideDigest has been updated to allow creation and verification of message digests using the SHA512 cryptographic hash function. Offline key exchange to share module keys between instances : Admins can share module keys between instances offline to facilitate instance clones between on-premise instances using KMF. [Sign and verify JSON web tokens (JWT) through KMFCryptoOperation](https://www.servicenow.com/docs/access?context=KMFCryptoOperationBothAPI&version=australia&pubname=australia-api-reference&ft:locale=en-US) : The signing and verification processes for JWTs are now integrated as operation types in the existing KMFCryptoOperation class. Centralized Crypto Management console : Use the new Crypto Management Console to streamline and track the certificate management lifecycle. The new console scans your instance for certificates and displays their details in a central location, Clone and restore support for on-premise instances : Support for cloning and restoring on-premise instances. Support has also been added from migrating a commercial instance to on-premise instances, and vice-versa. Certificate Revocation List (CRL) validation support : ServiceNow now supports Certificate Revocation List (CRL) validation for certificate revocation checks as an alternative to Online Certificate Status Protocol (OCSP), with automatic fallback when OCSP is unavailable. {#encryption-key-mgmt-rn-release__encryption-key-mgmt-rn-new-features-1} ### What's changed {#encryption-key-mgmt-rn-release__encryption-key-mgmt-rn-changed-features} [Updated workflow for creating cryptographic modules](https://www.servicenow.com/docs/access?context=create-cryptographic-module&version=australia&pubname=australia-platform-security&ft:locale=en-US){#encryption-key-mgmt-rn-release__encryption-key-mgmt-rn-rn-workspace} : Use the streamlined workflow designed for faster, easier creation of cryptographic modules. [SecurityUtils Enhancements](https://www.servicenow.com/docs/access?context=GlideSecurityUtilsScopedAPI&version=australia&pubname=australia-api-reference&ft:locale=en-US) : The SecurityUtils API has been enhanced to help prevent cross-site scripting attacks, including methods to sanitize and escape input. {#encryption-key-mgmt-rn-release__encryption-key-mgmt-rn-changed-features-1}