STS encryption upgrade