Skip to content
Configuring Field Encryption › Field Encryption › Encryption
Release: Australia · Updated: 2026-03-12 · Official documentation · View source

Configure encrypted field configurations for fields or attachments

Create an encrypted field configuration to specify which fields are encrypted on a table, and whether that table's attachments are encrypted.

Before you begin

Role required: security_admin and sn_kmf.cryptographic_manager or sn_kmf.admin

You must have a configured field encryption module with a ServiceNow or customer-supplied key. If you have not yet configured a module, see Configure Field Encryption modules.

Procedure

  1. Ensure that you are in the same application scope as the table you want to encrypt.

  2. Navigate to All > System Security > Field Encryption > Field Encryption Experience > Modules.

  3. Select Create new.

  4. In the Encrypted Field Configuration form, fill in the fields as needed.

FieldValue
TypeSelect either Column or AttachmentNote: Attachment encryption is only available with Field Encryption Enterprise.
TableSelect the table which will have it's fields or attachments encrypted.
Column

If you have chosen Column in the Type field, select the fields to be encrypted.Note: If the field you want to encrypt is not available, it may not be a supported type. The supported field types are:

  • String (including Full UTF-8)
  • Date
  • Date/Time
  • URL
  • HTML
  • Journal
  • Translated
  • Email
  • Phone
Active

Whether the configuration is active.Important:

When active, your instance is actively encrypting new data in the selected fields or attachments. Users will not have access to this data unless they have permission via an associated Module Access Policy. Do not check if the field is not yet ready to begin encrypting and enforcing Module Access Policies.

To ensure historical data is encrypted after an Encrypted Field Configuration is active, you’ll need to run a Mass Encryption Job on the column. For details, see Schedule mass encryption, decryption, or rekeying jobs.

Crypto ModuleThe field encryption module use by this encrypted field configuration.
Method

Select Single Module to ensure all fields or attachments are encrypted by a single field encryption module.

Select Multi Module to allow for different field encryption modules to be used for different rows within a column or different attachments. For details on multi-module configuration, seeConfigure multi-module encrypted field configurations.

Algorithm Equality PreservingDisplays whether Equality Preserving is enabled in the field encryption module selected in the Crypto Module field.
  1. Select Save.

Parent Topic:Configuring Field Encryption