Configure field encryption settings to select key type
Configure your field encryption settings to use ServiceNow supplied keys or your own customer-supplied keys (CSK) for encryption on the ServiceNow AI Platform.
Before you begin
Customer-supplied keys are only supported with Field Encryption Enterprise.
Role required: sn_kmf.cryptographic_manager and security_admin
Procedure
-
Navigate to All > System Security > Field Encryption Settings.
-
From the Field Encryption Settings, select either ServiceNow Generated Keys or Customer Supplied Keys from the Key Source list.
[Omitted image "field-encryption-settings-choices.png"] Alt text:
This option changes the
com.glide.encryption.cle_kmf.key_sourceproperty to either ServiceNow Generated Keys or Customer Supplied Keys. -
Select Save.
What to do next
- If you’re using your own customer-supplied keys, see Using customer-supplied keys with Field Encryption Enterprise.
- If you’re using ServiceNow supplied keys, start creating your cryptographic module. See Create a cryptographic module.
Parent Topic:Configuring the Key Management Framework
---
title: Configure field encryption settings to select key type
description: Configure your field encryption settings to use ServiceNow supplied keys or your own customer-supplied keys \(CSK\) for encryption on the ServiceNow AI Platform.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/platform-security/platform-encryption/configure-field-encryption-settings.html
release: brazil
product: Platform Encryption
classification: platform-encryption
topic_type: task
last_updated: "2026-09-10"
reading_time_minutes: 1
breadcrumb: [Configuring the Key Management Framework, Key Management Framework, Encryption]
---
# Configure field encryption settings to select key type
Configure your field encryption settings to use ServiceNow supplied keys or your own customer-supplied keys \(CSK\) for encryption on the ServiceNow AI Platform.
## Before you begin
Customer-supplied keys are only supported with Field Encryption Enterprise.
Role required: sn\_kmf.cryptographic\_manager and security\_admin
## Procedure
1. Navigate to **All** > **System Security** > **Field Encryption Settings**.
2. From the Field Encryption Settings, select either **ServiceNow Generated Keys** or **Customer Supplied Keys** from the **Key Source** list.
\[Omitted image "field-encryption-settings-choices.png"\] Alt text:
This option changes the `com.glide.encryption.cle_kmf.key_source` property to either **ServiceNow Generated Keys** or **Customer Supplied Keys**.
3. Select **Save**.
## What to do next
- If you’re using your own customer-supplied keys, see [Using customer-supplied keys with Field Encryption Enterprise](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/csk-landing.md).
- If you’re using ServiceNow supplied keys, start creating your cryptographic module. See [Create a cryptographic module](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/platform-encryption/create-cryptographic-module.md).
**Parent Topic:**[Configuring the Key Management Framework](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/platform-encryption/configure-kmf.md)
| title | Configure field encryption settings to select key type |
| description | Configure your field encryption settings to use ServiceNow supplied keys or your own customer-supplied keys \(CSK\) for encryption on the ServiceNow AI Platform. |
| locale | en-US |
| canonical_url | https://www.servicenow.com/docs/r/platform-security/platform-encryption/configure-field-encryption-settings.html |
| release | brazil |
| product | Platform Encryption |
| classification | platform-encryption |
| topic_type | task |
| last_updated | 2026-09-10 |
| reading_time_minutes | 1 |
| breadcrumb | Configuring the Key Management FrameworkKey Management FrameworkEncryption |