{"revision":"c10276e953456835cdbb1f3a60d58ae1980be353","document":{"id":7726,"path":"delta-washingtondc-australia/australia-washingtondc-keymanagement-release-notes.md","title":"Combined Key Management release notes for upgrades from Washington DC to Australia","bundle":null,"doc_type":null,"release":"australia","body":"\n# Combined Key Management release notes for upgrades from Washington DC to Australia\n\nConsolidated page of all release notes for Key Management from Washington DC to Australia.\n\n## How to use this page\n\nTo help you prepare for your upgrade, we have combined the cross-family Key Management release notes onto one page. Read this summary of the new features, changes, and updated information for your product from Washington DC to Australia.\n\n**Tip:** If there were no updates for a release notes section in a certain family release, we included a short note for your reference. For example, if a product did not have any updates in Tokyo, the row says \"No updates for this release.\"\n\n## Important information for upgrading Key Management to Australia\n\nBefore you upgrade to Australia, review these pre- and post-upgrade tasks and complete the tasks as needed.\n\n<table class=\"custom-rows\"><thead><tr><th class=\"filter\">\n\nRelease\n\n</th><th>\n\nRelease notes\n\n</th></tr></thead><tbody><tr><td>\n\nWashington DC\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr><tr><td>\n\nXanadu\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr><tr><td>\n\nYokohama\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr><tr><td>\n\nZurich\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr><tr><td>\n\nAustralia\n\n</td><td>\n\n-   In pre-Zurich releases, the GlideEncrypter API used the three-key Triple Data Encryption Standard \\(3DES\\) encryption standard, which [NIST 800-131A Rev 2](https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-131Ar2.pdf) has recommended against using after 2023. The following changes are taking place in the Australia release in preparation for a full deprecation of GlideEncrypter/3DES in the future:\n    -   New Australia instances can’t use GlideEncrypter. All base system scripts have been changed to use alternative encryption processes.\n    -   if you’re upgrading your Australia instances, you can still GlideEncrypter, which has been updated to use AES256-GCM encryption via the Key Management Framework.\n    -   Learn more about 3DES deprecation in [KB1704481](https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1704481).\n\n</td></tr></tbody>\n</table>## New features\n\nBetween your current release family and Australia, new features were introduced for Key Management.\n\n<table class=\"custom-rows\"><thead><tr><th class=\"filter\">\n\nRelease\n\n</th><th>\n\nRelease notes\n\n</th></tr></thead><tbody><tr><td>\n\nWashington DC\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr><tr><td>\n\nXanadu\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr><tr><td>\n\nYokohama\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr><tr><td>\n\nZurich\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr><tr><td>\n\nAustralia\n\n</td><td>\n\n-   **[Added SHA512 support for message digests](https://www.servicenow.com/docs/access?context=c_GlideDigestScopedAPI&family=australia&ft:locale=en-US)**\n\nGlideDigest has been updated to allow creation and verification of message digests using the SHA512 cryptographic hash function.\n\n-   **Offline key exchange to share module keys between instances**\n\nAdmins can share module keys between instances offline to facilitate instance clones between on-premise instances using KMF.\n\n-   **[Sign and verify JSON web tokens \\(JWT\\) through KMFCryptoOperation](https://www.servicenow.com/docs/access?context=KMFCryptoOperationBothAPI&family=australia&ft:locale=en-US)**\n\nThe signing and verification processes for JWTs are now integrated as operation types in the existing KMFCryptoOperation class.\n\n-   **Centralized Crypto Management console**\n\nUse the new Crypto Management Console to streamline and track the certificate management lifecycle. The new console scans your instance for certificates and displays their details in a central location,\n\n-   **Clone and restore support for on-premise instances**\n\nSupport for cloning and restoring on-premise instances. Support has also been added from migrating a commercial instance to on-premise instances, and vice-versa.\n\n-   **Certificate Revocation List \\(CRL\\) validation support**\n\nServiceNow now supports Certificate Revocation List \\(CRL\\) validation for certificate revocation checks as an alternative to Online Certificate Status Protocol \\(OCSP\\), with automatic fallback when OCSP is unavailable.\n\n\n</td></tr></tbody>\n</table>## Changes\n\nBetween your current release family and Australia, some changes were made to existing Key Management features.\n\n<table class=\"custom-rows\"><thead><tr><th class=\"filter\">\n\nRelease\n\n</th><th>\n\nRelease notes\n\n</th></tr></thead><tbody><tr><td>\n\nWashington DC\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr><tr><td>\n\nXanadu\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr><tr><td>\n\nYokohama\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr><tr><td>\n\nZurich\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr><tr><td>\n\nAustralia\n\n</td><td>\n\n-   **[Updated workflow for creating cryptographic modules](https://www.servicenow.com/docs/access?context=create-cryptographic-module&family=australia&ft:locale=en-US)**\n\nUse the streamlined workflow designed for faster, easier creation of cryptographic modules.\n\n-   **[SecurityUtils Enhancements](https://www.servicenow.com/docs/access?context=GlideSecurityUtilsScopedAPI&family=australia&ft:locale=en-US)**\n\nThe SecurityUtils API has been enhanced to help prevent cross-site scripting attacks, including methods to sanitize and escape input.\n\n\n</td></tr></tbody>\n</table>## Removed\n\nBetween your current release family and Australia, some Key Management features or functionality were removed.\n\n<table class=\"custom-rows\"><thead><tr><th class=\"filter\">\n\nRelease\n\n</th><th>\n\nRelease notes\n\n</th></tr></thead><tbody><tr><td>\n\nWashington DC\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr><tr><td>\n\nXanadu\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr><tr><td>\n\nYokohama\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr><tr><td>\n\nZurich\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr><tr><td>\n\nAustralia\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr></tbody>\n</table>## Deprecations\n\nBetween your current release family and Australia, some Key Management features or functionality were deprecated.\n\n<table class=\"custom-rows\"><thead><tr><th class=\"filter\">\n\nRelease\n\n</th><th>\n\nRelease notes\n\n</th></tr></thead><tbody><tr><td>\n\nWashington DC\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr><tr><td>\n\nXanadu\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr><tr><td>\n\nYokohama\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr><tr><td>\n\nZurich\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr><tr><td>\n\nAustralia\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr></tbody>\n</table>## Activation information\n\nReview information on how to activate Key Management.\n\n<table class=\"custom-rows\"><thead><tr><th class=\"filter\">\n\nRelease\n\n</th><th>\n\nRelease notes\n\n</th></tr></thead><tbody><tr><td>\n\nWashington DC\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr><tr><td>\n\nXanadu\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr><tr><td>\n\nYokohama\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr><tr><td>\n\nZurich\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr><tr><td>\n\nAustralia\n\n</td><td>\n\nThe Platform Encryption subscription bundle is a group commercial entitlement that includes Field Encryption Enterprise and Cloud Encryption.\n\n Field Encryption Enterprise is the unlimited license of Field Encryption. The Enterprise plugin is available with the activation of the com.glide.now.platform.encryption plugin. For details, see [Encryption and Key Management subscription bundle](https://www.servicenow.com/docs/access?context=encryption-sku&family=australia&ft:locale=en-US).\n\n</td></tr></tbody>\n</table>## Additional requirements\n\nIf any additional requirements were introduced or changed for Key Management we have noted them here.\n\n<table class=\"custom-rows\"><thead><tr><th class=\"filter\">\n\nRelease\n\n</th><th>\n\nRelease notes\n\n</th></tr></thead><tbody><tr><td>\n\nWashington DC\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr><tr><td>\n\nXanadu\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr><tr><td>\n\nYokohama\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr><tr><td>\n\nZurich\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr><tr><td>\n\nAustralia\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr></tbody>\n</table>## Browser requirements\n\nIf any specific browser requirements were introduced or changed for Key Management we have noted them here.\n\n<table class=\"custom-rows\"><thead><tr><th class=\"filter\">\n\nRelease\n\n</th><th>\n\nRelease notes\n\n</th></tr></thead><tbody><tr><td>\n\nWashington DC\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr><tr><td>\n\nXanadu\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr><tr><td>\n\nYokohama\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr><tr><td>\n\nZurich\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr><tr><td>\n\nAustralia\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr></tbody>\n</table>## Accessibility information\n\nReview details on accessibility information for Key Management, such as specific requirements or compliance levels.\n\n<table class=\"custom-rows\"><thead><tr><th class=\"filter\">\n\nRelease\n\n</th><th>\n\nRelease notes\n\n</th></tr></thead><tbody><tr><td>\n\nWashington DC\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr><tr><td>\n\nXanadu\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr><tr><td>\n\nYokohama\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr><tr><td>\n\nZurich\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr><tr><td>\n\nAustralia\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr></tbody>\n</table>## Localization information\n\nIf there are specific localization considerations for Key Management we have noted them here.\n\n<table class=\"custom-rows\"><thead><tr><th class=\"filter\">\n\nRelease\n\n</th><th>\n\nRelease notes\n\n</th></tr></thead><tbody><tr><td>\n\nWashington DC\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr><tr><td>\n\nXanadu\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr><tr><td>\n\nYokohama\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr><tr><td>\n\nZurich\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr><tr><td>\n\nAustralia\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr></tbody>\n</table>## Highlight information\n\nIf there are specific highlight considerations for Key Management we have noted them here.\n\n<table class=\"custom-rows\"><thead><tr><th class=\"filter\">\n\nRelease\n\n</th><th>\n\nRelease notes\n\n</th></tr></thead><tbody><tr><td>\n\nWashington DC\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr><tr><td>\n\nXanadu\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr><tr><td>\n\nYokohama\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr><tr><td>\n\nZurich\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr><tr><td>\n\nAustralia\n\n</td><td>\n\n-   GlideDigest has been updated to allow creation and verification of message digests using the SHA512 cryptographic hash function\n-   Admins can share module keys between instances offline to facilitate instance clones between on-premise instances using KMF.\n-   The signing and verification processes for JWTs are now integrated as operation types in the existing KMFCryptoOperation class.\n\n See [Key Management Framework](https://www.servicenow.com/docs/access?context=encryption&family=australia&ft:locale=en-US) for more information.\n\n</td></tr></tbody>\n</table>**Parent Topic:**[Products combined by family](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/delta-washingtondc-australia/rn-combined-intro.md)\n\n"}}