Skip to main content

Check out Interactive Visual Stories to gain hands-on experience with the SSE product features. Click here.

Skyhigh Security

Configure ServiceNow Encryption for Files and Attachments

  1. Last updated
  2. Save as PDF

Use this procedure to enable encryption for ServiceNow files and attachments. 

Elevate the ServiceNow Role

  1. Log in to ServiceNow using Administrator credentials.
  2. Navigate to System Administrator > Elevate Roles to open the Elevator Roles dialog box.
    clipboard_e829625e41811f016176ca4f9696d4f1c.png
  3. To elevate the role from System Administrator to Security Administrator, select the security_admin checkbox.
    clipboard_eba26a297d7af73a08b41950f90b8df55.png
  4. Click OK to save your changes.

Activate the Encryption Support Plugin

For detailed instructions about activating the encryption support plugin, see https://docs.servicenow.com/bundle/newyork-platform-administration/page/administer/encryption/task/activate-encrypt-support.html.

  1. In ServiceNow, navigate to System Definition > Plugins. You are redirected to the All Applications page.
  2. To redirect to the legacy list view for plugins, click click here.
    clipboard_e2e9de2c05ec9c5ad71a1966f01b8b4a2.png
  3. You can search for Encryption Support in the search bar. When you find the required plugin, click Install.
    clipboard_e2b3705dcddb8a294495a3a89d7b15bde.png

     The Plugin is installed and activated.

Configure Encryption Contexts

For detailed instructions about configuring Encryption Contexts, see https://docs.servicenow.com/bundle/newyork-platform-administration/page/administer/encryption/task/t_EncryptionContextSetup.html 

  1. In ServiceNow, navigate to System Security > Field Encryption > Encryption Contexts. 
  2. Click New and enter the required details in the form.
  3. Click Submit.
    clipboard_ef3ca6569cf982460c4614a84157219c7.png

Configure Encryption Contexts for Admin or Non-Admin Users

To add encryption context associated with admin or non-admin users, perform the following steps. 

  1. In ServiceNow, navigate to System Security > Roles and open the role record to associate with the encryption context, or create a role.
  2. Right-click the form header and select Configure > Form Layout to configure the Roles form to add the Encryption context field.
    clipboard_ebefa094190c1bbac37cc0b2e5b5e2255.png
    clipboard_e99a7404c9b71b4e2cb65ae288d65a569.png
  3. Select the Encryption context to associate with the role.
    clipboard_e9367aee83ebd73a24f2c93ec6fcb16c4.png
  4. Click Update.

More Information

To use the encryption context, users must log out of the instance and log in again.

The file attached to any object in ServiceNow displays an option to Encrypt. For example: Attach a file "hotfix copy 10.docx" to an incident INC0010005 in a user account:
clipboard_ed8eb4358e07e109287eb21bbcf784a84.png

When ServiceNow encrypts a file, it displays a lock symbol, as shown:
clipboard_ed3033ca65b05a1ea240bcce2ff14e9c9.png

If the ServiceNow Admin has configured a Near Real Time DLP policy to detect sensitive information from the file and has configured the policy to delete the sensitive details, then the encrypted file is replaced with a tombstone file as part of Skyhigh CASB Near Real Time DLP.
clipboard_ef466654c6a53630f8be9d723b9c39ead.png

  1. Back to top
  • Was this article helpful?

Recommended articles

  1. Article type
    Topic
  2. Tags
    This page has no tags.