Enable Code Signing for application configuration data and scripts \[Removed in Security Center 1.3\]

reference australia Updated Sep 10, 2026 1 min read sc-enable-code-signing-for-application-configuration-data-and-scripts.md
Raw file servicenow.com

Manage Code Signing for application configuration data and scripts on your instance.

Code Signing can help improve security by validating sensitive application configuration data and scripts before they’re used. Code Signing creates digital signatures for the data, which are later checked to confirm the authenticity and integrity of the data. This verification helps prevent malicious data or scripts from being used on the instance, which may lead to full compromise of the instance.

Enable Code Signing on your instance by following the steps in Configuring Code Signing. This results in the com.snc.kmf.signature.validation.flag system property being set to true.

Warning: This is a safe harbor property, meaning the value can't be altered once it's changed. It’s non-revertible.

More information

Attribute

Description

Configuration name

com.snc.kmf.signature.validation.flag

Configuration type

System Properties (/sys_properties_list.do)

Data type

Boolean

Recommended value

true

Default value

false

Category

Malicious code

Security risk

  • Severity score: 6
  • CVSS score: Medium
  • Security risk details: Setting this property to true enables Code Signing, which helps improve security by validating sensitive application configuration data and scripts.

Dependencies and prerequisites

None

**Parent Topic:**[Malicious code](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/instance-security-hardening-settings/sc-malicious-code.md)
Search documentation
Search document titles and file paths on the australia branch