--- title: "Fortanix DSM with ServiceNow" slug: "fortanix-dsm-with-servicenow" updated: 2026-07-24T17:09:17Z published: 2026-07-24T17:09:17Z canonical: "support.fortanix.com/fortanix-dsm-with-servicenow" --- > ## Documentation Index > Fetch the complete documentation index at: https://support.fortanix.com/llms.txt > Use this file to discover all available pages before exploring further. # Fortanix DSM with ServiceNow > [!WARNING] > WARNING > > The Fortanix DSM with ServiceNow integration will be deprecated soon. ## 1.0 Introduction This article describes the steps to configure and integrate **Fortanix-Data-Security-Manager Solution as a Service (DSM SaaS)** solution with a **ServiceNow** instance for customer-managed encryption keys. ## 2.0 Prerequisites Ensure the following: - An account on Fortanix DSM SaaS. - ServiceNow instance with Database Encryption and Customer-Controlled Switch feature. *For more information on Database Encryption with Customer-Controlled Switch, refer to the* [*ServiceNow official documentation*](https://docs.servicenow.com/bundle/tokyo-platform-security/page/administer/encryption-database/concept/dbe-css.html)*.* ## 3.0 Set up the ServiceNow Instance *For more information on how to set up your ServiceNow instance and enable external KMS functionality, refer to the ServiceNow official documentation.* Fortanix DSM SaaS service is globally available in North America, the European Union, the United Kingdom, the Asia Pacific, and Australia regions. ## 4.0 Configure Fortanix DSM A Fortanix DSM service must be configured, and the URL must be accessible. To create a Fortanix DSM account and group, refer to the following sections: ### 4.1 Signing Up To get started with the Fortanix DSM cloud service, you must register an account at . For example, [https://amer.smartkey.io.](https://amer.smartkey.io.) On-premises customers use the KMS URL, and the SaaS customers can use the URLs as listed [*here*](https://support.fortanix.com/hc/en-us/articles/4406135346068-Fortanix-DSM-SaaS-Global-Availability-Map) based on the application region. *For more information on how to set up the Fortanix DSM, refer to the* [*Sign Up for Fortanix Data Security Manager SaaS*](https://support.fortanix.com/docs/users-guide-sign-up-for-fortanix-data-security-manager-saas)*.* ### 4.2 Creating an Account Access in a web browser and enter your credentials to log in to Fortanix DSM. ![](https://cdn.us.document360.io/c3bd85d2-4ad8-4d85-9f60-f1c168a3aad9/Images/Documentation/DSM_SaaS_Login_page(12).png) **Figure 1: Logging in** *For more information on how to set up an account in Fortanix DSM, refer to the* [*Getting Started with Fortanix Data Security Manager - UI*](https://support.fortanix.com/docs/users-guide-getting-started-with-fortanix-data-security-manager-ui)*.* ## 5.0 Using SaaS Deployment ### 5.1 Creating a ServiceNow Instance Perform the following steps to create an instance using the ServiceNow wizard in Fortanix DSM SaaS: 1. Sign up at [https://smartkey.io/](https://smartkey.io/) to access DSM SaaS for the AMER region. DSM SaaS supports multiple regions, as listed [*here*](https://portal.us.document360.io/v1/docs/fortanix-dsm-saas-global-availability-map). 2. In the DSM left navigation panel, click the **Integrations** menu item, and then click the select the **Cloud Key Management/BYOK** check box. Click **ADD INSTANCE** on the **ServiceNow** wizard. ![](https://cdn.us.document360.io/c3bd85d2-4ad8-4d85-9f60-f1c168a3aad9/Images/Documentation/BYOK-Instances - ServiceNow.png) **Figure 2: Add ServiceNow instance** 3. On the **Add Instance** page: 1. **Instance Name**: Enter a name for your instance. 2. **Key expires afte**r: Specify the duration after which keys created through this instance will expire automatically. 3. **API Gateway**: Select the **Fortanix-managed API Gateway** for secure communication with Fortanix DSM. 4. Click **SAVE**. ![](https://cdn.us.document360.io/c3bd85d2-4ad8-4d85-9f60-f1c168a3aad9/Images/Documentation/image-1768853013267.png) **Figure 3: Add instance** After setup, contact ServiceNow Support at [support@servicenow.com](http://support@servicenow.com) and provide the key endpoint in the following format: `https://servicenow.fortanix.com/kek/<instance_name>/<key_version>` Where, - `<instance_name>` is the name of your ServiceNow instance. - `<key_version>` is hardcoded to **1**. For example, the key endpoint URI could be `https://servicenow.acmeabc.com/kek/vmfx234/1`, where the ServiceNow instance name is **vmfx234**. The ServiceNow Support team will use this information to enable the **Customer Control Switch** for your instance. ### 5.2 ServiceNow Instance Detailed View Navigate to the **Integrations** menu item → **ServiceNow** wizard → ServiceNow instances table. In the instance detailed view page, the following information is represented: - **KEY EXPIRATION DURATION**: Displays the time duration after which the keys created through this instance will expire automatically, based on the default or configured policy. - **DELETE**: To delete the instance, click the overflow menu ![](https://cdn.us.document360.io/c3bd85d2-4ad8-4d85-9f60-f1c168a3aad9/Images/Documentation/Screenshot (1342)(2).png) and select **DELETE**. Note that deleting an instance will result in the removal of the app, group, and all security objects associated with the instance, rendering all key material inaccessible. - **EDIT INSTANCE**: To modify the instance details, click the overflow menu ![](https://cdn.us.document360.io/c3bd85d2-4ad8-4d85-9f60-f1c168a3aad9/Images/Documentation/Screenshot (1342)(2).png) and select **EDIT INSTANCE**. On the **Edit instance expiry time** window, update the key expiry duration and click **SAVE**. ![](https://cdn.us.document360.io/c3bd85d2-4ad8-4d85-9f60-f1c168a3aad9/Images/Documentation/image-1768853025709.png) **Figure 4: ServiceNow instance created** ## 6.0 Disable the Key (Kill Switch) In case the key is compromised, perform the following steps to disable the key: 1. In the Fortanix ServiceNow wizard, change the **Key expires after** field to **0**. 2. After 15 minutes, the ServiceNow database should crash, and you will not be able to access it using the ServiceNow UI. 3. Raise a ticket with the ServiceNow support team to inform them. ## 7.0 Enable the Key (Kill Switch) 1. Change the **Key expires after** field to a value greater than **0** (recommended value: **2 days**). 2. Raise a ticket with the ServiceNow support team to re-enable the database. Fortanix Data Security Manager (DSM) is the world’s first cloud service secured with Intel® SGX. With Fortanix DSM, you can securely generate, store, and use cryptographic keys and certificates, as well as other secrets such as passwords, API keys, tokens, or any blob of data. Your business-critical applications and containers can integrate with Fortanix DSM using legacy cryptographic interfaces (PKCS#11, CNG, and JCE) or using the native Fortanix DSM RESTful interface. ## Related - [Azure Key Vault Bring Your Own Key](/fortanix-dsm-azure-key-vault-byok-bring-your-own-key.md)