Loading
Prepare for Email to Become the Default Login ExperienceRead More
Set Up and Maintain Your Salesforce Organization
Encrypt Archived Data

Encrypt Archived Data

When you turn on encryption for Archive in Setup, Salesforce creates a root key dedicated to your org’s data archives and begins encrypting your data.

Required Editions

Available in both Lightning Experience and Salesforce Classic (not available in all orgs).
Available in: Enterprise, Performance, Unlimited, and Developer Editions. Requires purchasing Salesforce Shield or Shield Platform Encryption and the Archive add-on license in Hyperforce.
User Permissions Needed
To generate, destroy, export, import, upload, and configure key material: Manage Encryption Keys
To view and edit Setup: View Setup and Configuration
Note
Note Archive root keys encrypt archived types in the native Archive app. Root keys don’t encrypt data archives made with the Own from Salesforce Archive managed package or legacy Salesforce Archive.
  1. From Setup, use the Quick Find box to find and select Encryption Settings.
  2. Turn on Manage Archive Keys.
    Salesforce generates a root key for you. When it’s ready, see your key on the Key Management page under the Archive tab.
  3. To make your key easier to identify during audits, edit the root key’s description.
    1. From Setup, use the Quick Find box to find and select Key Management.
    2. In the Root Key Inventory section under the Backup & Recover tab, click Details.
    3. Click Edit Description.
    4. Add a unique description and save your work.

From now on, your Archive root key secures the data encryption keys that encrypt archived data.

 
Loading
Salesforce Help | Article