Skip to content
Release: Australia · Updated: 2026-03-12 · Official documentation · View source

Create a secret group cryptographic module

Create a secret group cryptographic module to perform encryption and decryption.

Before you begin

Role required:

  • admin
  • sn_secrets.admin
  • sn_secrets.secret_manager
  • sn_kmf.cryptographic_manager
  • sn_kmf.admin

Procedure

  1. Navigate to All > Secrets Management > Create Secret Group Crypto Module.

  2. Select the type of group crypto module you would like to create.

    Cryptographic module typeDescription
    Create an instance accessible secret crypto moduleCreate instance accessible secrets that can be decrypted by your instance.
    Create a client accessible secret crypto moduleCreate client accessible secrets that are encrypted using your own key, which ServiceNow can’t access.
  3. In the Cryptographic Module form, fill in the fields.

Image omitted: crypto-module-form.png
Cryptographic module form
FieldDescription
Module nameDescriptive name for your module
ApplicationThe application scope that contains your module. This field is automatically populated with the current module.
Crypto spec templateDefault Template is selected by default.
NameName of the module. This name is automatically generated by based on the application and module name.
Default module access policy value- Rely on system default - Reject - Track
Crypto module lifecycle stateWhether the module is in a Draft or Published state.
Actual module access policy resultThis field is for information purposes, and is read-only.
Parent crypto moduleThe parent cryptographic module, which is determined by the cryptographic module type you selected in the previous step. This field is read-only.
  1. Select Submit.

Parent Topic:Secrets Management dashboard