---
title: Disable ServiceNow Root of Trust
description: Run a scheduled job on your trusted instance to disable Root of Trust.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/platform-security/disable-sn-rot.html
release: australia
topic_type: task
last_updated: "2026-03-12"
reading_time_minutes: 1
breadcrumb: [Root of Trust Settings, Configure, Code Signing, Platform Security]
---

# Disable ServiceNow Root of Trust

Run a scheduled job on your trusted instance to disable Root of Trust.

## Before you begin

Role required: admin, security\_admin, and sn\_kmf.cryptographic\_manager

Code Signing must be enabled on your protected and trusted instances. You can verify by checking that the **com.snc.kmf.signature.validation.flag** system property is set to `true`.

This procedure is part of a series of procedures to change to a customer Root of Trust \(ROT\) on your instances. For an overview of this process, see [Change your Root of Trust configuration](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/change-rot-overview.md).

## Procedure

1.  Log into your trusted instance.

2.  Navigate to **All** > **System Definition** > **Scheduled Jobs**.

3.  Open the **Disable ServiceNow Root of Trust** scheduled job.

4.  Select the **Export signed job to production**.

5.  Navigate to **All** > **System Update Sets** > **Local Update Sets**.

6.  Find and open the **Disable ServiceNow Root of Trust** update set.

7.  Select **Export XML** to export your update set as an XML file.

8.  Log in to your protected instance.

9.  Navigate to **All** > **System Update Sets** > **Retrieved Update Sets**.

10. At the bottom of the list, select **Import Update Set from XML**.

11. In the **Import XML** form, select **Choose File** and select the XML file you downloaded in the previous steps.

12. Select **Upload**.

13. Navigate to **All** > **System Update Sets** > **Retrieved Update Sets**, and open the **Disable ServiceNow Root of Trust** update set.

14. Select **Preview Update Set**.

15. After the preview is completed, select **Commit Update Set**.

16. Navigate to **All** > **System Definition** > **Scheduled Jobs**.

17. Open the scheduled job imported in the update set.

18. Select the **Execute Now** button to run the job.


## Result

Executing the scheduled job sets the ROT property to true. Your instance is configured to use the customer root of trust.