1. Do I have to export the key from production and store in my system?
2. Do I have to rotate the key for each Salesforce release ( any reference on how to do it)?
3. Is the key different for production and sandbox?
#Salesforce Developer #Data Management #Salesforce Admin #Security1 answer
1. This is highly recommended. If someone were to maliciously or accidentally destroy a tenant secret, your exported key can be reimported. https://help.salesforce.com/s/articleView?id=xcloud.security_pe_import_export_keys.htm&type=5
2. This is not required. You should rotate keys based on your organization's security policy.
https://help.salesforce.com/s/articleView?id=xcloud.security_pe_rotate_keys.htm&type=53. Not by default. It is a best practice to do a key rotation upon sandbox refresh or creation.
https://help.salesforce.com/s/articleView?id=xcloud.security_pe_sandboxes.htm&type=5
