Schedule mass encryption, decryption, and rekeying jobs
Schedule encryption, decryption, and rekeying jobs to run at a time that is best for your instance.
Before you begin
Encryption, decryption, and rekeying jobs can be time and resource intensive, so consider scheduling at non-peak hours. Also ensure that the user scheduling the job has the appropriate access for each job.
Role required: sn_kmf.cryptographic_manager
About this task
Mass encryption and decryption is also available from the Encrypted Field Configurations form. See Run mass encryption or decryption for instructions.
Procedure
Navigate to All > System Security > Security Jobs.
Click New.
Complete the scheduling form.
| Field | Description |
|---|---|
| Name | Name of the encryption, decryption, or re-keying job. |
| Type | Job type:- Key Migration Context to Module: Mass migration of Encryption Context keys to Encryption Modules, including creation of Module Access Policies records for access controls on the Encryption Modules - Data Migration Context to Module: Migrates data encrypted by Encryption Contexts to Encryption Modules - Mass Decryption Attachment:Decrypts all encrypted attachments in records for a single table you define in the Table field. - Mass Encryption Attachment: Encrypts all attachments in records for a single table you define in the Table field. - Mass Encryption: Encrypts any pre-existing value in the defined column/field used in the Field Encryption Configuration - Mass Decryption Module: Decrypts any pre-existing value in the defined column/field used in the Field Encryption Configuration with Single Module. - Mass Decryption Multi Module: Decrypts any pre-existing value in the defined column/field used in the Field Encryption Configuration with Multiple Module. - Mass Rekeying: Re-encrypts any pre-existing value in the defined column/field used in the Field Encryption Configuration using the current active key for the module. - Migrate Attachment Context to Module: Encrypts any pre-existing attachment on the table defined in the Field Encryption Configuration. Any attachment previously encrypted with a context is re-encrypted with the module. |
| State | The initial job state is New. After the job has been executed as scheduled, the state will update accordingly. |
| Time window start | Start time for the job in 24-hour format. |
| Time window end | End time for the job in 24-hour format. |
| Table | Table to be encrypted or decrypted. |
| Field | Field to be encrypted or decrypted. |
| Summary | Job status information when the job is running, has completed, or has errors. |
**Note:** Because of system overhead, you should schedule mass encryption, decryption, and rekeying jobs to run at non-peak hours. The ServiceNow AI Platform runs the job between the **Time window start** and **Time window end**. If the job is not complete in one processing window, it continues during the next specified processing window until all processing is complete.
Click Submit.
After you schedule a job, you can do the following.
- Click Cancel Job to cancel a running job.
- Click Start to start a job immediately.
- Click Update to save any changes you make to the job schedule.
- Click Delete to delete the scheduled job.
Parent Topic:Encrypting fields and attachments