sn_kmf.allow_all_permissive_wrapping_of_keys The sn_kmf.allow_all_permissive_wrapping_of_keys property determines whether to enable fallback behavior for key wrapping without MAP checks. Admins should consider this setting when configuring key management to ensure compliance with security policies.
falseThe answers below summarize the purpose, scope, default effect, and review scenarios for this property.
| What does it do? | When enabled, this property allows key wrapping to proceed without MAP checks, reverting to default behavior. |
|---|---|
| What area does it affect? | Key Management Framework |
| What does the default mean? | The default value is "false", which means this behavior is disabled by default. |
| When should you review it? | Review this property when adjusting key management security settings or during compliance audits. |
Raw metadata from the property record.
| Property name | sn_kmf.allow_all_permissive_wrapping_of_keys |
|---|---|
| Sys ID | f9a2a8425331111046edddeeff7b1249 |
| Type | boolean |
| Application | ServiceNow Key Management Framework |
| Default value | false |
| Description | If the flag is set to true then fall back to default behavior of no MAP checks for key wrapping. |
| Updated | 2024-05-25 03:39:13 |
Official references and nearby text excerpts where this property appears.
sn_kmfOther properties in the same namespace.
sn_kmf.crypto_module.access_policies.allow_unsigned_records
It enables the upgrade process for Runtime KMF Secure Modules by allowing unsigned records during the upgrade.
sn_kmf.glide.script.block.client.globals
This boolean property, when set to true, prevents the use of client-side global variables in scripts, enhancin
sn_kmf.kmfutil_api_check
This property controls access to restricted APIs in the KMFUtil script include, reverting to legacy behavior i
sn_kmf.protected_script_encrypter.use.newkey
This property determines whether a new key is generated for the Glide protected script encrypter, enhancing sc
sn_kmf.resolution_framework.audit_source
This property specifies whether Resolution Framework records are logged to a table, system logs, or both, impa
sn_kmf.resolution_framework.enabled
This property controls whether the system automatically resolves issues related to the KMF Plug-in, impacting
sn_kmf.revocation.response.connect.timeout
This property defines the timeout duration for connecting to a revocation responder, impacting how quickly the
sn_kmf.revocation.response.read.timeout
This property defines the timeout duration in milliseconds for reading responses from revocation responders, i