Salesforce Security Guide

Salesforce Security Guide
Salesforce Security Basics
Authenticate Users
Give Users Access to Data
Share Objects and Fields
Platform Encryption
Encrypt Fields and Files
Set Up Platform Encryption
Create a Secret
Rotate Keys
Export a Key
Destroy a Key
Stop Encryption
How It Works
Monitoring Your Organization's Security
Security Tips for Apex and Visualforce Development
PDF

Newer Version Available

This content describes an older version of this product. View Latest

Set Up Platform Encryption

With Platform Encryption, you manage your own tenant secret, which is used to derive the encryption keys that protect your data. Keys are never saved or shared across organizations. Instead, they are derived on demand from a master secret and an organization-specific tenant secret and then cached on an application server.
Available as add-on subscription in: Enterprise, Performance, and Unlimited Editions. Available in Developer Edition at no charge for organizations created in Summer ’15 and later.
Available in Salesforce Classic.

User Permissions Needed
To manage tenant secrets: “Manage Encryption Keys”

After you create a unique tenant secret for your organization, you can rotate it, archive it, and share responsibility for it with other users.

Developers can generate tenant secrets by coding a call to the TenantSecret object in the Salesforce API.

Only authorized users can generate tenant secrets from the Platform Encryption page. Ask your Salesforce administrator to assign you the "Manage Encryption Keys" permission.

Important