通过 Shield Platform Encryption，您可以控制和轮换用于加密数据的密钥材料。您可以使用 Salesforce 为您生成租户密码，然后将该密码与每次发布的主密码相结合，以获得数据加密密钥。这个派生的数据加密密钥然后被用于加密和解密功能。您也可以使用自带密钥 (BYOK) 服务上传自己的密钥材料。或者，您可以将密钥材料存储在 Salesforce 外部。使用外部密钥管理服务或仅缓存密钥服务按需获取密钥材料。
| 适用于 Salesforce Classic（并非在所有组织中可用）和 Lightning Experience。 |
| 适用于：具有 Salesforce Shield 或 Shield Platform Encryption 许可证的 Enterprise、Performance 和 Unlimited Edition。 |
| 在 Developer Edition 中免费提供。 |
| 所需用户权限 | |
|---|---|
| 管理密钥材料： | “管理加密密钥”权限 |
密钥管理始于为安全管理员分配适当的权限。向您信任的人分配加密数据、管理证书和使用密钥材料的权限。使用设置审计跟踪监控这些用户的密钥管理和加密活动是一个好主意。授权开发人员可以通过编码对 Salesforce API 中 TenantSecret 对象的调用来生成、轮换、导出、销毁、重新导入和上传租户密码。
We use three kinds of cookies on our websites: required, functional, and advertising. You can choose whether functional and advertising cookies apply. Click on the different cookie categories to find out more about each category and to change the default settings.
Privacy Statement
Required cookies are necessary for basic website functionality. Some examples include: session cookies needed to transmit the website, authentication cookies, and security cookies.
Functional cookies enhance functions, performance, and services on the website. Some examples include: cookies used to analyze site traffic, cookies used for market research, and cookies used to display advertising that is not directed to a particular individual.
Advertising cookies track activity across websites in order to understand a viewer’s interests, and direct them specific marketing. Some examples include: cookies used for remarketing, or interest-based advertising.