Loading
Feature Disruption - Service Cloud VoiceRead More
Feature degradation | Gmail Email delivery failureRead More
Set Up and Maintain Your Salesforce Organization
Table of Contents
Filter by (0)Add
Select Filters

          No results
          No results
          Here are some search tips

          Check the spelling of your keywords.
          Use more general search terms.
          Select fewer filters to broaden your search.

            Search all of Salesforce Help
            Search all of Salesforce Help
            Manage Master Encryption Keys

            You are here:

            1. Salesforce Help
            2. Docs
            3. Set Up and Maintain Your Salesforce Organization

            Manage Master Encryption Keys

            Encrypted custom fields, such as Social Security Number or Credit Card Number, are encrypted with a master encryption key. This key is automatically assigned when you select fields to encrypt. You manage your own master key according to your organization’s security and regulatory needs.

            Required Editions

            Note
            Note Where possible, we changed noninclusive terms to align with our company value of Equality. We maintained certain terms to avoid any effect on customer implementations.
            Available in: both Salesforce Classic and Lightning Experience
            Available in: all editions
            User Permissions Needed
            To create, edit, and manage certificates: Customize Application

            With master encryption keys, you can:

            • Archive the existing key and create a new key.
            • Export an existing key after it's been archived.
            • Delete an existing key.
            • Import an existing key after it's been deleted.
            Note
            Note This page is about Classic Encryption, not Shield Platform Encryption. What's the difference?

            Archiving and Creating New Keys

            To archive your current key and create a new key, click Archive Current Key and Create New Key on the Certificate and Key Management Setup page. A new key is generated, assigned the next sequential number, and activated. All new data is encrypted using the new key.

            Existing data continues to use the archived key until the data is modified and saved. Then data is encrypted using the new key.

            After you archive a key, you can export or delete it.

            Exporting Keys

            You can export your keys to a back-up location for safe keeping. It's a good idea to export a copy of any key before deleting it.

            Exporting creates a text file with the encrypted key, so you can import the key back into your organization later.

            Deleting Keys

            Don't delete a key unless you're certain no data is currently encrypted using the key. After you delete a key, any data encrypted with that key can no longer be accessed.

            Important
            Important Export and delete keys with care. If your key is destroyed, you must reimport it to access your data. You are solely responsible for making sure your data and keys are backed up and stored in a safe place. Salesforce can’t help you with deleted, destroyed, or misplaced keys.

            Importing Keys

            If you have data associated with a deleted key, you can import an exported key back into your organization. Any data that wasn’t accessible becomes accessible again.

            Click Import next to the key you want to import.

            See Also

             
            Loading
            Salesforce Help | Article