{"revision":"c10276e953456835cdbb1f3a60d58ae1980be353","document":{"id":8082,"path":"delta-xanadu-australia/australia-xanadu-encryptionkeymanagement-release-notes.md","title":"Combined Encryption Key Management release notes for upgrades from Xanadu to Australia","bundle":null,"doc_type":null,"release":"australia","body":"\n# Combined Encryption Key Management release notes for upgrades from Xanadu to Australia\n\nConsolidated page of all release notes for Encryption Key Management from Xanadu to Australia.\n\n## How to use this page\n\nTo help you prepare for your upgrade, we have combined the cross-family Encryption Key Management release notes onto one page. Read this summary of the new features, changes, and updated information for your product from Xanadu to Australia.\n\n**Tip:** If there were no updates for a release notes section in a certain family release, we included a short note for your reference. For example, if a product did not have any updates in Tokyo, the row says \"No updates for this release.\"\n\n## Important information for upgrading Encryption Key Management to Australia\n\nBefore you upgrade to Australia, review these pre- and post-upgrade tasks and complete the tasks as needed.\n\n<table class=\"custom-rows\"><thead><tr><th class=\"filter\">\n\nRelease\n\n</th><th>\n\nRelease notes\n\n</th></tr></thead><tbody><tr><td>\n\nXanadu\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr><tr><td>\n\nYokohama\n\n</td><td>\n\n-   **Upgrade information**\n    -   The GlideEncrypter API uses the three-key Triple Data Encryption Standard \\(3DES\\) encryption standard which [NIST 800-131A Rev 2](https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-131Ar2.pdf) has recommended against using after 2023. The following changes are taking place in the Yokohama release in preparation for a full deprecation of GlideEncrypter/3DES in the future.\n        -   New Yokohama instances can’t use GlideEncrypter. All base system scripts have been changed to use alternative encryption processes.\n        -   if you’re upgrading your Yokohama instances, you can still use 3DES, but you can also disable 3DES usage with a system property.\n        -   Learn more about 3DES deprecation in [KB1704481](https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1704481).\n\n</td></tr><tr><td>\n\nZurich\n\n</td><td>\n\n-   **Upgrade information**\n    -   In previous releases, the GlideEncrypter API used the three-key Triple Data Encryption Standard \\(3DES\\) encryption standard, which [NIST 800-131A Rev 2](https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-131Ar2.pdf) has recommended against using after 2023. The following changes are taking place in the Zurich release in preparation for a full deprecation of GlideEncrypter/3DES in the future:\n        -   New Zurich instances can’t use GlideEncrypter. All base system scripts have been changed to use alternative encryption processes.\n        -   if you’re upgrading your Zurich instances, you can still GlideEncrypter, which has been updated to use AES256-GCM encryption via the Key Management Framework.\n        -   Learn more about 3DES deprecation in [KB1704481](https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1704481).\n\n</td></tr><tr><td>\n\nAustralia\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr></tbody>\n</table>## New features\n\nBetween your current release family and Australia, new features were introduced for Encryption Key Management.\n\n<table class=\"custom-rows\"><thead><tr><th class=\"filter\">\n\nRelease\n\n</th><th>\n\nRelease notes\n\n</th></tr></thead><tbody><tr><td>\n\nXanadu\n\n</td><td>\n\n-   **[New plugin available for Code Signing roles and administrative features](https://www.servicenow.com/docs/access?context=cs-role-landing&family=xanadu&ft:locale=en-US)**\n\nActivate the plugin to access the new roles and administration features. The new plugin creates signature migration jobs, new code signing roles, and a new code signing administration page.\n\n\n</td></tr><tr><td>\n\nYokohama\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr><tr><td>\n\nZurich\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr><tr><td>\n\nAustralia\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr></tbody>\n</table>## Changes\n\nBetween your current release family and Australia, some changes were made to existing Encryption Key Management features.\n\n<table class=\"custom-rows\"><thead><tr><th class=\"filter\">\n\nRelease\n\n</th><th>\n\nRelease notes\n\n</th></tr></thead><tbody><tr><td>\n\nXanadu\n\n</td><td>\n\n-   **[Changes to Code Signing requirements](https://www.servicenow.com/docs/access?context=code-signing-landing&family=xanadu&ft:locale=en-US)**\n\nAs a part of improving security around Root of Trust, signing of script and attachments records can only be done on your trusted non-production instance or using the standalone signing tool. The exception is notarization, which can still be performed in the protected production instance.\n\n-   **[Enhancement requests for the Code Signing Standalone signing tool](https://www.servicenow.com/docs/access?context=sa-code-signing-tool&family=xanadu&ft:locale=en-US)**\n\nUpdates to Code Signing enable your administrators to work with keystores, signature records, and records to be signed outside of the local system.\n\n-   **[Improved activation process for Code Signing](https://www.servicenow.com/docs/access?context=config-code-signing&family=xanadu&ft:locale=en-US)**\n\nActivate Code signing with a new UI page that is designed to streamline the activation process.\n\n-   **[Download All Button for Multiple Attachments is available when Edge Encryption is enabled](https://www.servicenow.com/docs/access?context=c_EdgeEncryptionOverview&family=xanadu&ft:locale=en-US)**\n\nBy using the download all functionality, you can now download multiple documents into a zip file when you also enable Edge Encryption.\n\n-   **[Edge Encryption jRobin dashboards have been migrated to NEXT Experience](https://www.servicenow.com/docs/access?context=code-signing-reference&family=xanadu&ft:locale=en-US)**\n\nView troubleshooting and performance on dashboards that were migrated from the deprecated jRobin framework. These dashboards display the same information that was available in previous versions.\n\n-   **[Column Level Encryption Enterprise is installable by administrators after purchase](https://www.servicenow.com/docs/access?context=activate-platform-encryption&family=xanadu&ft:locale=en-US)**\n\nAfter purchasing Column Level Encryption Enterprise, your administrator can typically activate the product without needing technical assistance.\n\n-   **[Support for full string UTF-8 in Column Level Encryption](https://www.servicenow.com/docs/access?context=set-encrypted-field-config&family=xanadu&ft:locale=en-US)**\n\nCLE supports encryption and decryption of the full range of UTF-8 characters, including emoji.\n\n-   **[Improved readability for Column Level Encryption logging](https://www.servicenow.com/docs/access?context=code-signing-reference&family=xanadu&ft:locale=en-US)**\n\nWith the improved system, node, application, and audit logging, your administrators can analyze and troubleshoot their CLE or CLEE implementation.\n\n\n</td></tr><tr><td>\n\nYokohama\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr><tr><td>\n\nZurich\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr><tr><td>\n\nAustralia\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr></tbody>\n</table>## Removed\n\nBetween your current release family and Australia, some Encryption Key Management features or functionality were removed.\n\n<table class=\"custom-rows\"><thead><tr><th class=\"filter\">\n\nRelease\n\n</th><th>\n\nRelease notes\n\n</th></tr></thead><tbody><tr><td>\n\nXanadu\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr><tr><td>\n\nYokohama\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr><tr><td>\n\nZurich\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr><tr><td>\n\nAustralia\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr></tbody>\n</table>## Deprecations\n\nBetween your current release family and Australia, some Encryption Key Management features or functionality were deprecated.\n\n<table class=\"custom-rows\"><thead><tr><th class=\"filter\">\n\nRelease\n\n</th><th>\n\nRelease notes\n\n</th></tr></thead><tbody><tr><td>\n\nXanadu\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr><tr><td>\n\nYokohama\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr><tr><td>\n\nZurich\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr><tr><td>\n\nAustralia\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr></tbody>\n</table>## Activation information\n\nReview information on how to activate Encryption Key Management.\n\n<table class=\"custom-rows\"><thead><tr><th class=\"filter\">\n\nRelease\n\n</th><th>\n\nRelease notes\n\n</th></tr></thead><tbody><tr><td>\n\nXanadu\n\n</td><td>\n\nThe Platform Encryption subscription bundle is a group commercial entitlement that includes Column Level Encryption Enterprise, Cloud Encryption, and Database Encryption.\n\n Column Level Encryption Enterprise is the unlimited license of Column Level Encryption. The Enterprise plugin is available with the activation of the com.glide.now.platform.encryption plugin. For details, see [Encryption and Key Management subscription bundle](https://www.servicenow.com/docs/access?context=encryption-sku&family=xanadu&ft:locale=en-US).\n\n</td></tr><tr><td>\n\nYokohama\n\n</td><td>\n\n-   **Activation information**\n\nThe Platform Encryption subscription bundle is a group commercial entitlement that includes Field Encryption Enterprise and Cloud Encryption.\n\nField Encryption Enterprise is the unlimited license of Field Encryption. The Enterprise plugin is available with the activation of the com.glide.now.platform.encryption plugin. For details, see [Encryption and Key Management subscription bundle](https://www.servicenow.com/docs/access?context=encryption-sku&family=yokohama&ft:locale=en-US).\n\n\n</td></tr><tr><td>\n\nZurich\n\n</td><td>\n\n-   **Activation information**\n\nThe Platform Encryption subscription bundle is a group commercial entitlement that includes Field Encryption Enterprise and Cloud Encryption.\n\nField Encryption Enterprise is the unlimited license of Field Encryption. The Enterprise plugin is available with the activation of the com.glide.now.platform.encryption plugin. For details, see [Encryption and Key Management subscription bundle](https://www.servicenow.com/docs/access?context=encryption-sku&family=zurich&ft:locale=en-US).\n\n\n</td></tr><tr><td>\n\nAustralia\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr></tbody>\n</table>## Additional requirements\n\nIf any additional requirements were introduced or changed for Encryption Key Management we have noted them here.\n\n<table class=\"custom-rows\"><thead><tr><th class=\"filter\">\n\nRelease\n\n</th><th>\n\nRelease notes\n\n</th></tr></thead><tbody><tr><td>\n\nXanadu\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr><tr><td>\n\nYokohama\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr><tr><td>\n\nZurich\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr><tr><td>\n\nAustralia\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr></tbody>\n</table>## Browser requirements\n\nIf any specific browser requirements were introduced or changed for Encryption Key Management we have noted them here.\n\n<table class=\"custom-rows\"><thead><tr><th class=\"filter\">\n\nRelease\n\n</th><th>\n\nRelease notes\n\n</th></tr></thead><tbody><tr><td>\n\nXanadu\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr><tr><td>\n\nYokohama\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr><tr><td>\n\nZurich\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr><tr><td>\n\nAustralia\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr></tbody>\n</table>## Accessibility information\n\nReview details on accessibility information for Encryption Key Management, such as specific requirements or compliance levels.\n\n<table class=\"custom-rows\"><thead><tr><th class=\"filter\">\n\nRelease\n\n</th><th>\n\nRelease notes\n\n</th></tr></thead><tbody><tr><td>\n\nXanadu\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr><tr><td>\n\nYokohama\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr><tr><td>\n\nZurich\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr><tr><td>\n\nAustralia\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr></tbody>\n</table>## Localization information\n\nIf there are specific localization considerations for Encryption Key Management we have noted them here.\n\n<table class=\"custom-rows\"><thead><tr><th class=\"filter\">\n\nRelease\n\n</th><th>\n\nRelease notes\n\n</th></tr></thead><tbody><tr><td>\n\nXanadu\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr><tr><td>\n\nYokohama\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr><tr><td>\n\nZurich\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr><tr><td>\n\nAustralia\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr></tbody>\n</table>## Highlight information\n\nIf there are specific highlight considerations for Encryption Key Management we have noted them here.\n\n<table class=\"custom-rows\"><thead><tr><th class=\"filter\">\n\nRelease\n\n</th><th>\n\nRelease notes\n\n</th></tr></thead><tbody><tr><td>\n\nXanadu\n\n</td><td>\n\n-   Start using Code Signing's improved activation process. You can use the new Code Signing UI page for a faster, streamlined activation.\n-   Administer Column Level Encryption with new Column Level Encryption APIs, roles, and administration features. Column Level Encryption logging has been enhanced for improved readability.\n-   Download all encrypted attachments as a zip file by using the new **Download All** button.\n\n See [Key Management Framework](https://www.servicenow.com/docs/access?context=encryption&family=xanadu&ft:locale=en-US) for more information.\n\n</td></tr><tr><td>\n\nYokohama\n\n</td><td>\n\n-   Column Level Encryption has been rebranded and redesigned to now be called Field Encryption.\n-   Use Access Observer to help plan for and troubleshoot Field Encryption implementations.\n-   Edge Encryption administrators can use the new process to migrate from Edge Encryption to Field Encryption.\n\n See [Key Management Framework](https://www.servicenow.com/docs/access?context=encryption&family=yokohama&ft:locale=en-US) for more information.\n\n</td></tr><tr><td>\n\nZurich\n\n</td><td>\n\n-   See the changes to the Key Management and Field Encryption records that are now logged on the Sys Audits \\[sys\\_audit\\] table.\n-   The GlideEncrypter API has been updated and now uses AES256-GCM encryption via the Key Management Framework.\n-   Enable or disable GlideEncrypter by using the **glide.security.glideencrypter.allow** system property.\n\n See [Key Management Framework](https://www.servicenow.com/docs/access?context=encryption&family=zurich&ft:locale=en-US) for more information.\n\n</td></tr><tr><td>\n\nAustralia\n\n</td><td>\n\nNo updates for this release.\n\n</td></tr></tbody>\n</table>**Parent Topic:**[Products combined by family](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/delta-xanadu-australia/rn-combined-intro.md)\n\n"}}