#Shield/Platform Encryption0 discussing

Hi all

My company has decided to enable encryption, but the process is a bit confusing for me since I haven’t done this before. Has anyone enabled both database-level and field-level encryption? Do we have to enable both? How do you manage your keys and handle backups?

I’m especially concerned about key management — whether it’s better to use the Salesforce-managed keys or go with BYOK. How do you handle key rotation and key backups?

I believe a custom field is encrypted with Probablistic encryption.   When I go to that field I see that the field is encrypted (the box is checked) but when I edit it, that box is not longer visible and thus I cannot see what schema was used.   

I have the manage encryption keys permission so I am at a loss why I cannot see this information.

Any ideas?

#Shield/Platform Encryption

My understanding is that Shield does NOT allow Field History Tracking on Opportunity Team Member and I am looking for confirmation..... #Shield/Platform Encryption

Hello. 

I turned on Shield Platform Encryption in our Sandbox environment. I created a new custom text field and enabled 'encrypt the contents of this field'. Is there a way to also set a mask type and mask character? 

Thank you,

Nancy

#Shield/Platform Encryption  #Platform Encryption  #Salesforce

We have a field Contact.Email which cannot be encrypted due to existing org customisation and a number of installed managed packages. 

Our requirement is for the email field to be encrypted at Rest for a specific integrations only. 

This field will be referenced in:

• (1) an integration payload generated in Apex and sent to an external endpoint  
• (2) included in a platform event field published from an external system - for this I was able to enable "Encrypt change data capture events and platform events"

What is not clear to me is does Shield "encryption at rest" mean that anything transmitted via the REST Api is encrypted OR do individual fields need to be encrypted still in order to be encrypted at REST?

#Apex REST #REST API #Shield/Platform Encryption

Why are Custom object  date field (Deterministic Encryption) not allowed to be encrypted?

For custom Date fields - supported(Probabilistic Encryption) but Deterministic Encryption is not supported. do we have a chance date field enable to Deterministic Encryption

#Shield/Platform Encryption #Platform Encryption #Encryption