Loading
Set Up and Maintain Your Salesforce Organization
Table of Contents
Filter by (0)Add
Select Filters

          No results
          No results
          Here are some search tips

          Check the spelling of your keywords.
          Use more general search terms.
          Select fewer filters to broaden your search.

            Search all of Salesforce Help
            Search all of Salesforce Help
            Upload a Root Key for Data 360

            You are here:

            1. Salesforce Help
            2. Docs
            3. Set Up and Maintain Your Salesforce Organization

            Upload a Root Key for Data 360

            For Data 360, you upload a root key to Salesforce. Data 360 uses the root key for securing the data encryption key that encrypts and decrypts all Data Cloud data stores, including Data 360's own vector-based search. This root key is only used for Data 360.

            Required Editions

            Available in both Salesforce Classic (not available in all orgs) and Lightning Experience.
            Available in: Enterprise, Performance, and Unlimited Editions with the Salesforce Shield or Shield Platform Encryption licenses.
            Available for free in Developer Edition.
            User Permissions Needed
            To generate, destroy, export, import, upload, and configure key material: Manage Encryption Keys
            To view and edit Setup: View Setup and Configuration
            1. From Setup, in the Quick Find box, enter Platform Encryption, and then select Key Management.
              The Key Inventory and Management page loads.
            2. In the Key Management Table, select Data Cloud.
            3. Click Generate Root Key. The Configure a Key Management Service box appears.
              Select key type
            4. Choose Bring Your Own Root Key. Then click Next.
              If you’re prompted to generate a certificate, enter a label, and then select Generate Certificate.
              Generate Certificate
              If successful, you can click Download Certificate and Token to download the files you need to prepare your tenant secret.
            5. Use the certificate to prepare your root key for upload.
            6. In the Upload Tenant Secret section, attach both the encrypted key material and the import_token.txt file associated with your certificate. Click Upload.
              Upload Root Key and Import Token for Data 360

              The uploaded secret becomes the active root key for Data 360.

              From here on, Data 360 uses your root key to secure the DEKs for all Data 360 data stores, including Data 360's own vector-based search.

             
            Loading
            Salesforce Help | Article