3

How can I enable the shield encryption for existing custom fields in Salesforce?

My org has an existing number field SSN__c which has to be encrypted using shield. If I edit the field and enable encryption checkbox, which encryption will be enabled ? Standard encryption or Shield Encryption? (Yes, shield encryption is enabled ony sandbox.)

I have seen the cookbook example where they ask to create an encrypted text field. What if I have to encrypt custom phone or email or number fields using SHIELD?? Implementation guide didn't seem to have no info regarding these doubts.

What are the differences between shield and classic Encryption from an end user perspective? In UI, can they see any differences?

4

Thank you for your interest in shield encryption.

To answer your first question, the checkbox you're seeing will enable shield encryption on your existing SSN__c field. You can not enable classic encryption on an existing custom field, classic encryption comes with a dedicated type of custom field.

For your second question, shield encryption supports custom phone and custom email fields but not custom number fields. The list of all the fields that can be encrypted with shield encryption can be found here: https://help.salesforce.com/articleView?id=security_pe_overview_fields.htm&type=0

There are multiple differences between shield encryption and classic encryption. From an end-user perspective the main difference is that shield encryption does not provide masking capabilities similar to classic encryption. But the shield encryption comes with a more secure encryption scheme, control over the key lifecycle and a much larger support both in terms of what you can encrypt and platform features. You can find more information about the difference between the two here: https://help.salesforce.com/articleView?id=security_pe_comparison_table.htm&language=en_US&type=0

  • Thank you... If I enable shield Encryption, will it affect global search in anyway..??? – Hareesh P Mohan Feb 23 '17 at 6:57
  • There is a separate setting to have the search indexes encrypted at rest help.salesforce.com/… The search features are still available once turned on. Filtering in SOSL is for instance available on an encrypted fields unlike SOQL. We don't yet provide the full key control capabilities on the encryption keys for the search indexes though. – Alexandre Hersans Feb 25 '17 at 3:57

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.