Questions tagged [platform-encryption]

Platform Encryption lets you encrypt data nativity on the salesforce platform.

Filter by
Sorted by
Tagged with
-1 votes
1 answer
895 views

Is all our Salesforce data Encrypted At Rest in various Orgs?

We are going through a thorough security audit and I cannot get a straight answer from Salesforce, just boilerplate with lots of sales jargon. Due to acquisitions, we have lots of Orgs. In our orgs ...
ElHombre55's user avatar
0 votes
1 answer
155 views

how can i disable the Encrypt change data capture flag

how can i disable the flag in Encryption Policy - " Encrypt change data capture events and platform events "?
Andrea Vitangeli's user avatar
6 votes
1 answer
765 views

How to find the encrypted fields from inside an LWC?

I have Shield Platform Encryption turned on for Account.Name and a server-side field describe call: System.debug(JSON.serializePretty(Account.Name.getDescribe())); returns as expected these ...
Keith C's user avatar
  • 136k
0 votes
1 answer
592 views

Why are Custom object Name Field and date fields (Deterministic Encryption) not allowed to be encrypted?

I read a lot of documentation regarding Shield Platform Encryption and I can't find any statement in regards to why some of these custom Object Name Field and date fields (Deterministic Encryption) ...
Tejesh P's user avatar
1 vote
1 answer
560 views

Ciphertext of length 127 bytes can't be written into a column of length 120 bytes

trying to grab data from an external system and use it to update Contact records in Salesforce. 99% of the time this works great, but I've recently seen the following error that is a bit puzzling ...
McD's user avatar
  • 1,246
0 votes
1 answer
184 views

Salesforce Encryption Enabled With Errors

I am trying to encrypt field Lead.Name but it fails due to: Encryption can't be enabled for fields referenced in the custom formula fields: Lead.Data Quality Description. I checked this formula field ...
Damecek's user avatar
  • 1,918
1 vote
2 answers
214 views

Scratch Org - Generate Keys automatically

I would like to know if anyone has a way of generating platform encryption keys when building a scratch org? Currently, the way I know is to Create a Permission set with: MANAGE ENCRYPTION KEYS ...
Moazzam Khan's user avatar
0 votes
0 answers
234 views

Secure Data transport to external system

I have a requirement to transmit the integration data via REST API to a legacy system. The client need is to have the data transmission done securely. Wanted to check what would be the best approach ...
Quddus's user avatar
  • 177
1 vote
1 answer
389 views

How to support shield encryption in managed package?

I have read documentation regarding Platform Encryption on managed package and everywhere its written that If a managed package supports Shield encryption then we can encrypt fields. So if I am ...
Nagendra Singh's user avatar
0 votes
1 answer
217 views

Platform shield Encryption not enable for Email field

I am trying to enable platform encryption for the 'Email' field but I have used this field in my SOQL where clause. So, while enabling I am getting error as below: Contact.Email: Apex Class: ...
SFDC 44's user avatar
  • 664
3 votes
0 answers
315 views

Deploying Shield Platform Encryption using the CLI (force:madpi:deploy)

Can I enable encryption on custom object fields declaratively in an org, and then make successive deployments to that org from a codebase where encryptionScheme metadata is NOT part of the custom ...
Max's user avatar
  • 193
0 votes
1 answer
120 views

Encrypting Marketing Cloud Reports

So I'm creating a reporting definition to run in an automation. I would like the report to be .pgp encrypted and dropped onto the SFTP. The reporting definition in Marketing Cloud allows a drop onto ...
chorlesbarkley7's user avatar
2 votes
1 answer
2k views

Cannot run SOQL on Encrypted Contact Field - Deterministic Encryption Enabled

I have shield encryption enabled on the contact object and on the email field of the contact object. In custom apex code (a inbound email handler specifically), I am trying to run a SOQL query to ...
S.B.'s user avatar
  • 2,069
1 vote
2 answers
1k views

Change a formula field and get Data Uniqueness Violation - The proposed data changes would violate a uniqueness constraint

Given Existing custom field Asset.SerialNumber (OOTB - Text) New custom field Asset.SerialNumber_bis__c (Text255, External Id non-unique, deterministic encrypted case insensitive) Existing custom ...
cropredy's user avatar
  • 70.8k
4 votes
0 answers
145 views

Deploy Shield encryption & run tests in same deployment - fails

Given You have a CI org with a class that does [Select Id From SomeObject WHERE Field__c IN :vals] Tests run fine in the CI org When You decide to deterministically, case-insensitive encrypt ...
cropredy's user avatar
  • 70.8k
0 votes
1 answer
543 views

Encrypt a text field that is both ExternalID and Unique

I am trying to determine if this is possible - Encrypt a text field that is both Unique and an ExternalID. Via deterministic encryption, I believe it is possible. I am just wanting to see if anyone ...
TestMcTesterson's user avatar
0 votes
0 answers
152 views

Encrypting field with deterministic vs enabling Field History

I am seeing some inconsistencies with encryption enablement. For example: Contact.name. When I enable deterministic encryption, I have no issues. However, when I enable Field history tracking, I ...
testtesttest's user avatar
1 vote
2 answers
2k views

Use of Encrypted Fields in List views and Reports

Am I able to use Encrypted Fields in filter criteria in list views, reports and communities? Is there documentation anywhere I can find? I want to verify before rolling out encryption?
TestMcTesterson's user avatar
3 votes
1 answer
205 views

Use Salesforce KMS for Encryption- Order of Operations

This is a Multi-part question.... If I wanted to utilize the Salesforce KMS. Do I just need to hit the Generate Tenant Secret button on both the Data In Salesforce and Data in Salesforce (...
testtesttest's user avatar
0 votes
1 answer
113 views

Clone sandbox with Encrypted fields

When a sandbox with encrypted fields is cloned to another sandbox, do those fields carry over encrypted, with all the same encryption settings? Or are they returned to a normal state when utilizing ...
TestMcTesterson's user avatar
0 votes
1 answer
70 views

Momentarily Disable Encryption

This is an odd problem, but nonetheless, I am stumped. Has anyone ever had to disable encryption in order to get bulk data loads to succeed? Right now, we are encrypting fields on the account object....
TestMcTesterson's user avatar
0 votes
1 answer
696 views

On encrypting "Account name" standard field will it impact the first name and last name in shield encryption

I Have a requirement where i need to encrypt the "Account name" Standard Field. But my question is will it also encrypt the FirstName & LastName
Dinesh Prasad's user avatar
0 votes
1 answer
101 views

What populated "History" tab in encryption statistics?

When I navigate to Platform Encryption Statistics --> then toggle over to the History tab, I see a table with 4 columns. They are: Encrypted Field History Unencrypted Field History Encrypted Feed ...
TestMcTesterson's user avatar
1 vote
1 answer
1k views

Platform Encryption Global Search and Search Index

I'm trying to use SF Platform Encryption. Main question is if the global search in Salesforce should work also with encrypted fields when using wildcard search? (for example, by searching: "Test Va*")...
Liron C's user avatar
  • 1,776
1 vote
1 answer
711 views

Deterministic Encryption on Contact.Name field Used in Where Clause causing Issue

I applied a Deterministic case insensitive encryption on contact.name field, And whenever I use it in a WHERE clause of SOQL query, it throws me an Field 'Name' can not be filtered in a query call. I ...
imajmdf's user avatar
  • 837
6 votes
2 answers
4k views

Way to see all encrypted fields in Salesforce?

I was looking for a way to see what fields in an org are encrypted. I am aware of the encryption statistics, however I was hoping there was a way where I could do a SOQL query and return all the ...
TestMcTesterson's user avatar
0 votes
1 answer
262 views

CampaignMember and Platform Encryption - Unable to encrypt fields

There are multiple fields within the CampaignMember object that I would like to, and should be, encrypted. For example, FirstName, LastName, Email, etc. Is there a reason I can't encrypt these? My ...
TestMcTesterson's user avatar
1 vote
1 answer
223 views

nameField encrypted metadata not deploying correctly

We have enabled platform encryption and are deploying the <encrypted> tags for standard and custom fields on objects. However we are seeing an issue when trying to deploy for <nameField>. ...
Bryan Anderson's user avatar
1 vote
1 answer
1k views

Any way out of "Encryption can't be enabled for fields referenced in the custom formula fields"?

I have a formula field based on a date field, and I want to have the date field encrypted using Shield Platform Encryption. But when I try to turn the encryption on I get: Error on fields update ...
Keith C's user avatar
  • 136k
1 vote
2 answers
117 views

Case Insensitive - GA Summer 19?

I have been doing some digging on case Insensitive encryption. I am reading this: Get Exact Matching with Case-Insensitive Deterministic Encryption (Generally Available) And it looks like this ...
TestMcTesterson's user avatar
4 votes
1 answer
307 views

Platform encryption scratch org errors "common.exception.SfdcSqlException: ORA-00932: inconsistent datatypes: expected CHAR got DATE"

For the past couple of weeks our Continuous Integration (CI) build that uses SFDX and scratch orgs has had most of its queries failing for the Platform Encryption org with this error: common....
Keith C's user avatar
  • 136k
1 vote
1 answer
132 views

See reason why records failed to encrypt

I am going through an encryption effort in a SF sandbox. While encrypting, I noticed a few inconsistencies. For example, I got an email mentioning: Sandbox: Unable to Complete Encryption Task. I am ...
TestMcTesterson's user avatar
0 votes
1 answer
95 views

Loading Encrypted Records

I have been looking to see what other people have experienced regarding loading records into an environment with encryption enabled. If I were to use a tool such as DBamp, to load records into an an ...
TestMcTesterson's user avatar
0 votes
1 answer
2k views

Encrypt Formula Fields with Platform Encryptiion

Are any types formula fields able to be encrypted via platform encryption? I have been looking for options, and so far, I have been unsuccessful in locating any documentation. If not, what have you ...
TestMcTesterson's user avatar
0 votes
2 answers
164 views

Encryption Impact - Enabling Encryption vs Encrypting Data

This is more of a curiosity question. I have went through and encrypted ~50 fields in a sandbox with existing data. There are more fields I would like to encrypt, but they will take some more work ...
TestMcTesterson's user avatar
0 votes
1 answer
97 views

Encryption Question regarding SF generating Tenant Secret

From a testing perspective for platform encryptuion, if I follow this article, and hit the "generate tenant secret" button, am I good to start encrypting? In the BYOK documentation, it mentions ...
TestMcTesterson's user avatar
1 vote
1 answer
306 views

Salesforce BYOK Strategy

So - I have been doing research regarding Salesforce platform encryption, and am struggling to find the actual "button pushing" steps to accomplish the BYOK plan. Please correct these following steps ...
TestMcTesterson's user avatar
0 votes
1 answer
277 views

Supported Encryption Operators/Functions

I have been looking into supported operators and functions within Salesforce, and found this list: Supported Operators, Functions, and Actions Supported operators and functions: & and + (...
TestMcTesterson's user avatar
0 votes
0 answers
725 views

Store Credit Card information in Account Object in Salesforce

I wanted to check if we can store CredtiCard information (Using Encrypted Field) on Account Object in Salesforce and would it still be PCI Compliant? Thanks Ritu
Ritu Khanna's user avatar
3 votes
1 answer
1k views

Does Case-Insensitive Deterministic Encryption support SOQL LIKE and STARTS WITH statements?

The current Salesforce documentation states that deterministic encryption only supports exact, case-sensitive matches. This is why comparison operators that return partial matches aren't supported. ...
kabdelr00's user avatar
  • 303
2 votes
1 answer
2k views

What does "at rest" mean involving data encryption?

I've been reading the Salesforce Security Guide and it mentions involving Salesforce Shield and Platform Encryption that it allows you to natively encrypt your most sensitive data at rest across ...
Tyler Zika's user avatar
  • 2,860
0 votes
0 answers
51 views

3 States of Data - Encryption

Three part question about encryption in the 3 data states: In-Transit In-Use At-Rest What types of Encryption does Salesforce offer in these 3 states? Feel free to break it up further in to finer ...
TheArchitecta's user avatar
2 votes
2 answers
4k views

How can I test to see if a field is encrypted using Shield Platform Encryption?

If I encrypt fields with the Platform Shield Encryption, but still see the fields when I'm a different user how can I test to see if the encryption is working? I understand it encrypts at rest so I ...
Cara Cini's user avatar
  • 109
3 votes
1 answer
1k views

Is it possible to perform HMAC SHA1 encoding with Ampscript?

Is it possible to do this with Ampscript? Is it possible to achieve this with SSJS? I understand there is an apex function that can do this, but I am not sure it is possible to use apex with ...
legoMyEgo's user avatar
  • 203
1 vote
1 answer
240 views

How to check if a field is encryptable

i want something like a report for all my fields in the org if they are encrytable or not and i want to know if they are encrypted currently. By the getDescribe method i can detect if a field is ...
Felix's user avatar
  • 11
0 votes
2 answers
2k views

What is the impact of encrypting all fields using Salesforce Shield / Platform Encryption

Why wouldn't someone decide to encrypt all the fields using Salesforce Shield?
Robs's user avatar
  • 9,330
3 votes
1 answer
2k views

Why can I still see encrypted data?

I have enabled Salesforce Shield in a developer org of mine, checked "Encrypted" in the custom field definition detail, and proceeded to update a record with a new value in the encrypted field. I ...
Deployment Failure's user avatar
2 votes
1 answer
197 views

DescribeFieldResult Class doesn't have encryption and masking methods

Unable to find any method for field encryption and field masking in DescribeFieldResult Class. Methods like getMaskType, getMask, isEncrypted are working with DescribeFieldResult. Is there any ...
Ashwani Kumar's user avatar
4 votes
2 answers
810 views

How to Enable Platform Encryption in a non-Developer edition Scratch Org?

I've been using this sample project & guide to test Platform Encryption with Salesforce DX. However, the example project-scratch-def.json creates a Developer org ("edition": "Developer"). As ...
Jason Clark's user avatar
  • 11.8k
1 vote
1 answer
306 views

Difference between Encrypted Tenant Secret and Hashed Tenant Secret in Platform Encryption

What is the Difference between Encrypted Tenant Secret and Hashed Tenant Secret in Platform Encryption when we click on Upload Tenant Secret. Also we have third party Tenant Wrapping key so would ...
Rushabh Shah's user avatar