Skip to main content
Argomenti#Shield Encryption

#Shield Encryption0 utenti parlano di questo argomento

Fai una domanda...
Khushbu Patel ha postato in #Shield/Platform Encryption
27 nov 2025, 07:31

Hi all

My company has decided to enable encryption, but the process is a bit confusing for me since I haven’t done this before. Has anyone enabled both database-level and field-level encryption? Do we have to enable both? How do you manage your keys and handle backups?

I’m especially concerned about key management — whether it’s better to use the Salesforce-managed keys or go with BYOK. How do you handle key rotation and key backups?

#Shield/Platform Encryption #Encryption Key #Field Level Encryption #Shield Encryption #Encryption Discussion #Shield Platform Encryption #Encrypted #Deterministic Encryption #Platform Encryption
Scrivi un commento...
0/9000
Leandro Gomes Silva (Consultant presso Accenture) ha fatto una domanda in #Salesforce Shield
23 ago 2021, 12:59
Is it possible to scan uploaded files in Salesforce Shield?
Hello everyone, everything good?
In the company that I work we have an external community where some customers can upload files.
I would like to know if with Salesforce Shield it is possible to scan this uploaded file to check if it does not have any Virus or Malicious file?

 

#Salesforce Shield  #Shield Product  #Shield/Platform Encryption  #Shield Encryption  #Shield Platform Encryption Implementation Guide  #Shield Trail  #Security Shield  #Security  #Data Security  #Security Specialist

Thanks a lot for the help.
2 risposte
  1. Ramon Llames (Shippit)
    24 ago 2021, 12:18

    Hi Leandro,

     

    Salesforce at the moment doesn’t provide a way to scan attachments, document uploads, or chatter for viruses or malicious content. But there is an open idea in Idea exchange that you can upvote. 

     

    https://trailblazer.salesforce.com/ideaView?id=08730000000IoG6

     

    Currently, there are few solutions available in Appexchange;

    1. https://appexchange.salesforce.com/appxListingDetail?listingId=a0N3A00000EFntJUAT

    2. https://appexchange.salesforce.com/appxListingDetail?listingId=a0N3A00000DqDF1UAN

     

    I hope it helps. 

     

    Regards,

Scrivi una risposta...
0/9000
Michael Kaplan (Solutions Lead presso Mindex) ha postato in Salesforce DX
31 ott 2019, 19:32

Has anyone found a way to enable Shield Platform Encryption using SFDX? We've gotten it so that we can deploy Health Cloud with DX, but we also need to enable Shield Encryption for many of our test scenarios.

1 commento
  1. Jan Aertgeerts (Harrier)
    1 nov 2019, 11:34

    There's a few manuals steps to it or post setup:

    - Ensure you enable the PlatformEncryption feature in your scratch org def file.

    - You need to have a Permission Set that has "Manage Encryption Keys" permissions. For the sake of simplicity I assume this is a permission set called "EncryptionManagement".

    - Once setup, push the source so that the permission set is available. Do not include any encrypted fields.

    - Run the following commands:

    sfdx force:user:permset:assign -n EncryptionManagement

    sfdx force:data:record:create -s TenantSecret -v "Description='WHATEVER DESCRIPTION'"

    - Redeploy the fields with encryption enabled.

    - OPTIONAL: If you plan on using Deterministic Encryption you also need the following steps right after creating the first TenantSecret:

    - Manual Step - Enable Deterministic Encryption in Encryption Settings

    - Run sfdx force:data:record:create -s TenantSecret -v "Description='WHATEVER DESCRIPTION' Type=DeterministicData"

    - Deploy the deterministically encrypted fields

    This is a pretty manual flow and will require you to split up your push in 2 phases (with and without encrypted fields).

Scrivi un commento...
0/9000
Krzysztof Ostrowski (Salesforce Developer presso Vhi) ha postato in * Salesforce Administrators *
20 set 2019, 12:22

Hi @* Salesforce Administrators * ,

 

I am currently working on implementation of Shield Encryption and got stuck on the following. As you all know, the standard Address field (on different objects) is a compound field that consists of a set of fields (Street, City, Postal Code, Country, etc.). Encryption can only be activated on some of these fields and Postal Code can't be encrypted. In Ireland Postal code is a unique identifier for each address and therefore not encrypting this element of the address means encryption of the rest is pointless. From compliance and IS point of view the encryption of address is one of the highest priorities.

Any ideas for a workaround?

Just to complicate things, we are hoping to introduce a geo-location/address validation apps that would help to improve quality of address data - therefore setting up a custom field to store this data may prevent us from getting the full benefit of such apps.

 

Thanks

Kris

Scrivi un commento...
0/9000