Encrypt Search Index Files with a Tenant Secret

In orgs that don't yet use the updated search index framework, use a tenant secret in the search index encryption process. Sometimes you must search for personally identifiable information (PII) or for data that’s encrypted in the database. When you search your org, the results are stored in search index files in plaintext — a potential vulnerability. You can encrypt these search index files with Shield Platform Encryption, adding another layer of security to your data.

Required Editions

Note Some orgs use the newer search index encryption functionality. To confirm the encryption type for your org, see Encrypt Search Index Files with a Root Key.

Available in both Salesforce Classic (not available in all orgs) and Lightning Experience.

Available in: Enterprise, Performance, and Unlimited Editions with the Salesforce Shield or Shield Platform Encryption licenses.

Available for free in Developer Edition.

User Permissions Needed
To generate, destroy, export, import, upload, and configure tenant secrets and customer-supplied key material:	Manage Encryption Keys

1. From Setup, in the Quick Find box, enter Platform Encryption, and then select Key Management.
2. In the Key Management Table, select Search Index.
3. Select Generate Tenant Secret.
   This new tenant secret encrypts only the data stored in search index files.
4. Back up your new key. If your key is destroyed by mistake, your search index is unusable.
   See Shield Platform Encryption Best Practices.
5. From Setup, in the Quick Find box, enter Encryption Settings, and then select Encryption Settings.
6. In the Encryption Policy section, turn on Encrypt Search Indexes.
   Your search indexes are now encrypted with the active Search Index tenant secret.