---
title: "ServiceNow GlideEncrypter API Deprecation"
canonical: "https://docs.perspectium.com/space/Overview/1573130/ServiceNow%20GlideEncrypter%20API%20Deprecation"
format: markdown
---
<span style="color: #000000">With ServiceNow's</span> [deprecation of the GlideEncrypter API](https://www.servicenow.com/docs/bundle/yokohama-api-reference/page/app-store/dev_portal/API_reference/GlideEncrypter/concept/GlideEncrypterAPI.html) <span style="color: #000000">(used for Triple DES encryption) and its planned complete removal by Q4 2025</span>, <span style="color: #000000">Perspectium has removed the dependency on GlideEncrypter in the </span><span style="color: #000000">**Lithium**</span><span style="color: #000000"> release of the Perspectium ServiceNow application.</span>

<span style="color: #000000">Perspectium currently uses Triple DES as one of its </span>[encryption method](https://docs-perspectium.atlassian.net/wiki/display/latest/Optional+features+for+dynamic+shares+and+bulk+shares#Optionalfeaturesfordynamicsharesandbulkshares-Encryptionmodeandencryptionmethod)<span style="color: #000000"> options for sharing records out of your instance and for encrypting secure properties such as your MBS credentials and encryption key when saving these properties into your ServiceNow's instance.</span>

<span style="color: #000000">In </span><span style="color: #000000">**Lithium**</span><span style="color: #000000">, secure properties (your encryption key and MBS credentials) saved into your ServiceNow instance will now be saved into ServiceNow's </span><span style="color: #000000">[password2](https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB0749249)</span><span style="color: #000000"> field type per their </span><span style="color: #000000">[alternative approaches to deprecated GlideEncrypter APIs](https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1320986)</span><span style="color: #000000">.</span>

<span style="color: #000000">For sharing records out with Triple DES as the </span><span style="color: #000000">[encryption method](https://docs-perspectium.atlassian.net/wiki/display/latest/Optional+features+for+dynamic+shares+and+bulk+shares#Optionalfeaturesfordynamicsharesandbulkshares-Encryptionmodeandencryptionmethod)</span><span style="color: #000000">, based on a review with ServiceNow, a JavaScript library is used to encrypt with Triple DES and will be backwards compatible with the DataSync Agent and meshlets so you will not have to upgrade the Agent or meshlet.</span>

<span style="color: #000000">There is also an alternative approach that encrypts the entire payload sent to MBS using AES-128 or AES-256 to remove all dependencies on Triple DES since it is no longer a recommended security option per</span><span style="color: #333333"> </span><span style="color: #333333">[NIST-800-131A](https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-131Ar2.pdf)</span><span style="color: #333333">. </span><span style="color: #000000">See </span><span style="color: #000000">[here](https://docs-perspectium.atlassian.net/wiki/spaces/Lithium/pages/2327267)</span><span style="color: #000000"> for more information on this new approach, which requires upgrading the Perspectium ServiceNow application as well as the DataSync Agent and meshlets.</span>


> ❌ - <span style="color: #000000">For those with installs of </span><span style="color: #000000">**Krypton 8.4.0 or older**</span><span style="color: #000000">, you will need to upgrade your Perspectium Core application to </span><span style="color: #000000">**Lithium **</span><span style="color: #000000">***before upgrading your instance to Zurich or newer versions of ServiceNow ***</span><span style="color: #000000">since we will need to use the GlideEncrypter API to migrate your properties over and </span>the GlideEncrypter API is completely removed in Zurich.
> ❌   - You will need to upgrade to **Lithium **prior to upgrading your instance to ServiceNow **Zurich and newer** and prior to upgrading to Perspectium **Mercury and newer**.
> ❌   - <span style="color: #000000">The GlideEncrypter API is needed in order to access your current encryption key and MBS credentials from ServiceNow's backend to save back into the system in the password2 field types. </span><span style="color: #000000">**Otherwise, if you do not upgrade to Lithium before installing Zurich and newer, you will have to manually re-enter your MBS credentials and default encryption keys in the **</span><span style="color: #000000">**[Perspectium Properties](https://docs-perspectium.atlassian.net/wiki/display/latest/Properties)**</span><span style="color: #000000">** page as well as re-enter your queues' credentials and encryption keys.**</span>
> ❌   - This only applies to upgrades from **Krypton 8.4.0 or older**, if you are installing Perspectium for the first time on an instance, you can install any version including the latest.
> ❌ - <span style="color: #000000">If you request a new instance of ServiceNow with </span><span style="color: #000000">**Yokohama or newer**</span><span style="color: #000000">, the GlideEncrypter API is not guaranteed to be available. You will only want to install </span><span style="color: #000000">**Lithium 9.2.0 or newer**</span><span style="color: #000000"> as older versions of the Perspectium Core application use GlideEncrypter and the application may not fully work with the API not available. </span>
> ❌   - <span style="color: #000000">This applies to new instances as instances that are upgraded to Yokohama from a previous version (such as Xanadu) will still have the GlideEncrypter API. </span>
> ❌   - <span style="color: #000000">If you install an older version of Perspectium on a new instance with Yokohama or newer where GlideEncrypter isn’t available, you will get the error </span><span style="color: #000000">**java.lang.SecurityException: Unsupported call to GlideEncrypter. Details: GlideEncrypter is deprecated and now returns null, please refer KB1320986 for alternatives; Reason: TripleDES deprecation; Category: Security**</span><span style="color: #000000"> when running the application.</span>
> ❌ - If you are syncing data to another instance that’s running a version of ServiceNow prior to Zurich (see the note above about new instances requested with Yokohama or newer) or to a database with the DataSync Agent or a meshlet, those do not need to be upgraded to Lithium, only instances that will be upgraded to Zurich need to be upgraded to Lithium.
> ❌ - <span style="color: #000000">To continuing supporting Triple DES as the </span><span style="color: #000000">[encryption method](https://docs-perspectium.atlassian.net/wiki/display/latest/Optional+features+for+dynamic+shares+and+bulk+shares#Optionalfeaturesfordynamicsharesandbulkshares-Encryptionmodeandencryptionmethod)</span><span style="color: #000000">, the performance will be considerably slower than using GlideEncrypter in the new version. Since </span><span style="color: #333333">[Triple DES](https://en.wikipedia.org/wiki/Triple_DES)</span><span style="color: #333333"> </span><span style="color: #000000">as a security encryption standard is no longer a recommended option per</span><span style="color: #333333"> </span><span style="color: #333333">[NIST-800-131A](https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-131Ar2.pdf)</span><span style="color: #333333"> </span><span style="color: #000000">(and the reason ServiceNow is removing GlideEncrypter), this library is used to provide legacy Triple DES support. </span><span style="color: #000000">**It is recommended you change to use a more secure**</span><span style="color: #333333">** **</span><span style="color: #333333">**[encryption method](https://docs-perspectium.atlassian.net/wiki/display/latest/Optional+features+for+dynamic+shares+and+bulk+shares#Optionalfeaturesfordynamicsharesandbulkshares-Encryptionmodeandencryptionmethod)**</span><span style="color: #000000">** like AES-128 or AES-256 for configuring your (bulk and dynamic) shares.**</span>
> ❌ - <span style="color: #000000">If you were previously using the Perspectium Core application with your properties stored in the </span><span style="color: #000000">**sys_properties**</span><span style="color: #000000"> table, you will need to re-enter your secure properties manually after upgrading. The sys_properties records cannot be accessed to move over. </span>:info:<span style="color: #000000"> </span><u><span style="color: #000000">**NOTE**</span></u><span style="color: #000000">: This is a non-standard approach and not enabled by default (you would have worked directly with the Perspectium team to enable this). Contact</span><span style="color: #333333"> </span><span style="color: #333333">[support@perspectium.com](mailto:support@perspectium.com)</span><span style="color: #333333"> </span><span style="color: #000000">for more information.</span>