Security Migration Job Failure After Post Instance Upgrade to ZurichIssue <!-- /*NS Branding Styles*/ --> .ns-kb-css-body-editor-container { p { font-size: 12pt; font-family: Lato; color: var(--now-color--text-primary, #000000); } span { font-size: 12pt; font-family: Lato; color: var(--now-color--text-primary, #000000); } h2 { font-size: 24pt; font-family: Lato; color: var(--now-color--text-primary, black); } h3 { font-size: 18pt; font-family: Lato; color: var(--now-color--text-primary, black); } h4 { font-size: 14pt; font-family: Lato; color: var(--now-color--text-primary, black); } a { font-size: 12pt; font-family: Lato; color: var(--now-color--link-primary, #00718F); } a:hover { font-size: 12pt; color: var(--now-color--link-primary, #024F69); } a:target { font-size: 12pt; color: var(--now-color--link-primary, #032D42); } a:visited { font-size: 12pt; color: var(--now-color--link-primary, #00718f); } ul { font-size: 12pt; font-family: Lato; } li { font-size: 12pt; font-family: Lato; } img { display: ; max-width: ; width: ; height: ; } } After upgrading a Post instance to Zurich, an error message appears on top of the instance stating 'One or more Security Migration Jobs have failed in your instance.' The issue is specifically with the 'autoDataMigration' job, which is in an 'Error' state. The summary field shows the error message: 'Error creating job handler for type all_data_to_kmf : [The KMF cryptographic module to encryption context relationship table is empty. The 'Migrate Key Context to Module' job might not have been run or failed.]' Release<!-- /*NS Branding Styles*/ --> .ns-kb-css-body-editor-container { p { font-size: 12pt; font-family: Lato; color: var(--now-color--text-primary, #000000); } span { font-size: 12pt; font-family: Lato; color: var(--now-color--text-primary, #000000); } h2 { font-size: 24pt; font-family: Lato; color: var(--now-color--text-primary, black); } h3 { font-size: 18pt; font-family: Lato; color: var(--now-color--text-primary, black); } h4 { font-size: 14pt; font-family: Lato; color: var(--now-color--text-primary, black); } a { font-size: 12pt; font-family: Lato; color: var(--now-color--link-primary, #00718F); } a:hover { font-size: 12pt; color: var(--now-color--link-primary, #024F69); } a:target { font-size: 12pt; color: var(--now-color--link-primary, #032D42); } a:visited { font-size: 12pt; color: var(--now-color--link-primary, #00718f); } ul { font-size: 12pt; font-family: Lato; } li { font-size: 12pt; font-family: Lato; } img { display: ; max-width: ; width: ; height: ; } } ALL Resolution<!-- /*NS Branding Styles*/ --> .ns-kb-css-body-editor-container { p { font-size: 12pt; font-family: Lato; color: var(--now-color--text-primary, #000000); } span { font-size: 12pt; font-family: Lato; color: var(--now-color--text-primary, #000000); } h2 { font-size: 24pt; font-family: Lato; color: var(--now-color--text-primary, black); } h3 { font-size: 18pt; font-family: Lato; color: var(--now-color--text-primary, black); } h4 { font-size: 14pt; font-family: Lato; color: var(--now-color--text-primary, black); } a { font-size: 12pt; font-family: Lato; color: var(--now-color--link-primary, #00718F); } a:hover { font-size: 12pt; color: var(--now-color--link-primary, #024F69); } a:target { font-size: 12pt; color: var(--now-color--link-primary, #032D42); } a:visited { font-size: 12pt; color: var(--now-color--link-primary, #00718f); } ul { font-size: 12pt; font-family: Lato; } li { font-size: 12pt; font-family: Lato; } img { display: ; max-width: ; width: ; height: ; } } 1. Verify that the Encryption Context and Migrate Context Module Relationship tables do not hold any data, confirming why the issue is occurring. This can be done by checking the following links: https://<instance-name>.service-now.com/sys_encryption_context_list.do?sysparm_clear_stack=truehttps://<INSTANCE>.service-now.com/migrate_context_module_rel_list.do?sysparm_clear_stack=true 2. Since running the job is not required and it is not related to any data migration on the instance, the data migration job in the error state can be safely removed. This will dismiss the security banner message. 3. To remove the job, navigate to System Definition -> Scripts - Background and run the following script: var jobGr = new GlideRecord('sys_mass_encryption_job'); jobGr.addQuery('type', 'all_data_to_kmf'); jobGr.addQuery('state', 'error'); jobGr.addQuery('summary', 'CONTAINS', 'The KMF cryptographic module to encryption context relationship table is empty'); jobGr.setWorkflow(false); jobGr.autoSysFields(false); jobGr.query(); gs.info('Deleting ' + jobGr.getRowCount() + ' encryption jobs...'); jobGr.deleteMultiple(); 4. After executing the script, go to the 'sys_ux_banner_announcement' table, open the record with the heading 'One or more Security Migration Jobs have failed in your instance.', and set the 'End' time in the past. For example, set the 'End' time to be 1 minute after the 'Start' time and then save the record.