Loading
Feature Disruption - Service Cloud VoiceRead More
Feature degradation | Gmail Email delivery failureRead More
Set Up and Maintain Your Salesforce Organization
Table of Contents
Filter by (0)Add
Select Filters

          No results
          No results
          Here are some search tips

          Check the spelling of your keywords.
          Use more general search terms.
          Select fewer filters to broaden your search.

            Search all of Salesforce Help
            Search all of Salesforce Help
            Onboard to Shield Platform Encryption

            You are here:

            1. Salesforce Help
            2. Docs
            3. Set Up and Maintain Your Salesforce Organization

            Onboard to Shield Platform Encryption

            There are several situations that can affect onboarding to the different Shield Platform Encryption features. These depend on the encryption policies you have adopted, and whether you already are using one or more Shield Platform Encryption features.

            Required Editions

            Available in both Salesforce Classic (not available in all orgs) and Lightning Experience.
            Available in: Enterprise, Performance, and Unlimited Editions with the Salesforce Shield or Shield Platform Encryption licenses.
            Available for free in Developer Edition.
            • Onboard Database Encryption
              Database Encryption will give you sufficient encryption coverage for your org's data in Salesforce's transactional database.
            • Onboard Field-Level Encryption
              FLE enables you to apply fine-grained encryption to standard and custom fields. You can use FLE with or without Database Encryption enabled.
            • Onboard Search Index Encryption
              Search is a feature integrated into your Salesforce org. Search Index Encryption encrypts your search indexes, protecting any sensitive information that may exist within them. Search Index encryption is a feature that you can turn on and off. You can also rotate the root key, DEK, or tenant secret within the allowed rotation cycles.
            • Onboard BYOK
              Switch from Salesforce-generated keys to Bring Your Own Key (BYOK) for Shield Platform Encryption.
            • Onboard EKM
              With EKM you can use your key material housed in an external KMS. If you are currently using a Salesforce-generated root key or DEK, and you want to move to EKM, you can if the Shield Platform Encryption feature supports EKM. EKM is currently available for Platform Encryption for Data 360, Fields and Files (probabilistic), Fields (deterministic), Event Bus, and Shield Platform Encryption Search Indexes.
             
            Loading
            Salesforce Help | Article