Using External Key Management Service

---
title: Using External Key Management Service
description: Manage and maintain your External Key Management Service \(EKMS\) configuration after initial setup
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/platform-security/ekms-using-external-key-management.html
release: brazil
topic_type: concept
last_updated: "2026-09-10"
reading_time_minutes: 1
breadcrumb: [External Key Management Service, Field Encryption, Encryption]
---

# Using External Key Management Service

Manage and maintain your External Key Management Service \(EKMS\) configuration after initial setup

## What you can do

Once EKMS is configured, you perform ongoing management tasks to maintain your encryption infrastructure. These operational tasks include managing AWS key status, monitoring synchronization, and updating access policies as your organization's needs change.

## Common tasks

Use EKMS to perform the following operational tasks:

-   Monitor key status synchronization between AWS and ServiceNow.
-   Verify the background synchronization job runs successfully.
-   Review access policies as organizational roles change.
-   Test encryption functionality after key status changes.
-   Coordinate key changes with application teams and administrators.

Use the related links to find information related to these common EKMS tasks.

## Key status impact

AWS KMS key status directly affects encryption and decryption operations in ServiceNow. When you change a key's status in AWS, EKMS synchronizes the change automatically every 30 minutes. Understanding how status changes impact your data access is critical for maintaining operations.

-   **[Change the status of an AWS KMS Key](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/ekms-change-status-aws-kms-key.md)**  
Modify the status of your Amazon Web Services Key Management System \(AWS KMS\) key and synchronize the status with your ServiceNow instance.
-   **[Check External Key Management Service Key Status](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/ekms-check-key-status.md)**  
View the status of your Amazon Web Services Key Management System \(AWS KMS\) key in your instance.

**Parent Topic:**[External Key Management Service](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/ekms-external-key-management.md)

**Related topics**  


[External Key Management Service](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/ekms-external-key-management.md)

[Change the status of an AWS KMS Key](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/ekms-change-status-aws-kms-key.md)

[Check External Key Management Service Key Status](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/ekms-check-key-status.md)