Questions tagged [shield-encryption]
The shield-encryption tag has no usage guidance.
68
questions
1
vote
0answers
24 views
Unable to activate matching rule
In our org, deactivation of Matching Rules and Duplicate Rules was required by the encryption process in order to encrypt a field (Contact Email). When we try to re-activate these rules, we are ...
0
votes
1answer
79 views
Why are Custom object Name Field and date fields (Deterministic Encryption) not allowed to be encrypted?
I read a lot of documentation regarding Shield Platform Encryption and I can't find any statement in regards to why some of these custom Object Name Field and date fields (Deterministic Encryption) ...
2
votes
1answer
66 views
Shield encrypted field, unencrypted results?
If a field is encrypted with Shield, can we get the unencrypted value with Apex classes/SOQL statements?
0
votes
1answer
47 views
Salesforce Encryption Enabled With Errors
I am trying to encrypt field Lead.Name but it fails due to:
Encryption can't be enabled for fields referenced in the custom formula fields: Lead.Data Quality Description.
I checked this formula field ...
2
votes
1answer
99 views
FIELD_INTEGRITY_EXCEPTION, Last Name: You must enter a valid value: [LastName]
One of our integrations attempted to insert a Contact record with a value for LastName = ????? (yes - five question marks).
SFDC failed the insert (before any trigger executed) with:
...
0
votes
1answer
363 views
Report row level formula does not work
I have a simple row level formula on an Activity Report
CASE(Subject,
'Foo','1',
'Bar','2',
'n/a'
)
But, given these Task records
Id Subject
-- -------
... ...
3
votes
1answer
201 views
New Spring 21 sandbox SOQL query fails on encrypted Account Name
Spun up a new Spring 21 sandbox from our Shield Platform-encrypted PROD org. PROD has Account.Name deterministic, case-insensitive encryption.
Created a new Account with name = foo
Went to ...
0
votes
1answer
62 views
How can I verify encryption for Platform Events?
Does Salesforce provide a way to check Shield Platform Encryption for Platform Events? I wanted to verify what type encryption is applied to Platform Events when encryption is enabled from Setup -> ...
1
vote
1answer
119 views
Is there a way to programmatically encrypt custom fields?
For standard fields, we can do it via Setup (Setup > Encryption Policy > Encrypt Fields), then we get a list of all available fields and we can tick the box for each one.
But for custom fields, ...
1
vote
1answer
93 views
Scratch Org - Generate Keys automatically
I would like to know if anyone has a way of generating platform encryption keys when building a scratch org?
Currently, the way I know is to Create a Permission set with:
MANAGE ENCRYPTION KEYS
...
0
votes
1answer
119 views
How to support shield encryption in managed package?
I have read documentation regarding Platform Encryption on managed package and everywhere its written that If a managed package supports Shield encryption then we can encrypt fields.
So if I am ...
0
votes
2answers
176 views
HTML email template renders formula field as null. Formula references encrypted field(s)
Given
Cross-object formula field My_Identifier__c on Case: Asset__r.My_Identifier__c
where Asset.My_Identifier__c is a text field, Shield-encrypted
HTML email template that looks like:
Here is the ...
0
votes
2answers
230 views
purpose of Salesforce Shield Encryption [closed]
What is purpose of using salesforce shield encryption, when the encrypted fields are not being masked
in Rest Calls, data load export files etc,
what benefits we get it from doing so.
3)How would we ...
0
votes
2answers
522 views
Government Cloud and Encryption for data at-rest
If I walk out of a Salesforce Government Cloud data center with a disk or tape that contains customer data, I assume the disk or tape is encrypted. I won't be able to just mount the drive and browse ...
1
vote
1answer
257 views
Marketing Cloud Connect - extracting data from Sales Cloud with Shield Encryption
We would like to implement shield platform on the Sales Cloud and use the Marketing Cloud Connect to have the Sales Cloud data in the synchronized data extensions.
Will the data in the synchronized ...
0
votes
1answer
101 views
Scope of Salesforce Shield
When you license Salesforce Shield is it at the org level? I’m having trouble determining this answer. Based on what I can see via TrailHead, this should apply to any data within the org including any ...
1
vote
2answers
557 views
Change a formula field and get Data Uniqueness Violation - The proposed data changes would violate a uniqueness constraint
Given
Existing custom field Asset.SerialNumber (OOTB - Text)
New custom field Asset.SerialNumber_bis__c (Text255, External Id non-unique, deterministic encrypted case insensitive)
Existing custom ...
1
vote
1answer
93 views
Non-selective query error Email-to-case Contact.Email Deterministically Encrypted when dup emails
Given:
Over 200,000 Contacts with emails
Contact.Email is deterministically encrypted - case insensitive
All Contacts encrypted
Two contacts have the same email address foo@bar.com
E2C executes ...
1
vote
1answer
1k views
Shield Encryption(Deterministic vs Probabilistic) and Where Clause
I was going through salesforce documentation for shield encryption and got to know below.
Deterministic encryption comes in two types: case-sensitive and case-insensitive. With case-sensitive ...
3
votes
1answer
102 views
Use Salesforce KMS for Encryption- Order of Operations
This is a Multi-part question....
If I wanted to utilize the Salesforce KMS. Do I just need to hit the Generate Tenant Secret button on both the Data In Salesforce and Data in Salesforce (...
2
votes
2answers
322 views
Encrypting PII data with our own keys
I'm new to Salesforce and working on a problem being raised by my team. They have a requirement to encrypt all PII passing between our systems and Salesforce . Our company only allows for this data to ...
0
votes
1answer
54 views
Momentarily Disable Encryption
This is an odd problem, but nonetheless, I am stumped. Has anyone ever had to disable encryption in order to get bulk data loads to succeed? Right now, we are encrypting fields on the account object....
0
votes
1answer
225 views
On encrypting "Account name" standard field will it impact the first name and last name in shield encryption
I Have a requirement where i need to encrypt the "Account name" Standard Field.
But my question is will it also encrypt the FirstName & LastName
0
votes
1answer
52 views
What populated "History" tab in encryption statistics?
When I navigate to Platform Encryption Statistics --> then toggle over to the History tab, I see a table with 4 columns. They are:
Encrypted Field History
Unencrypted Field History
Encrypted Feed
...
2
votes
1answer
356 views
Deploying Shield Platform Encryption using Metadata API
I'm planning to deploy the encrypted field from our dev org to production?
Both environment has shield platform encryption enabled. The api version of the source organization is 44 and the target is ...
2
votes
1answer
602 views
Why are certain custom fields not allowed in Shield Platform Encryption?
Hi I was wondering why Formula, Checkbox, Number and Picklist data types are not allowed to be encrypted? If so are there any workarounds for this one?
I read a lot of documentation regarding Shield ...
4
votes
2answers
2k views
Way to see all encrypted fields in Salesforce?
I was looking for a way to see what fields in an org are encrypted. I am aware of the encryption statistics, however I was hoping there was a way where I could do a SOQL query and return all the ...
0
votes
1answer
138 views
CampaignMember and Platform Encryption - Unable to encrypt fields
There are multiple fields within the CampaignMember object that I would like to, and should be, encrypted. For example, FirstName, LastName, Email, etc. Is there a reason I can't encrypt these? My ...
1
vote
1answer
129 views
nameField encrypted metadata not deploying correctly
We have enabled platform encryption and are deploying the <encrypted> tags for standard and custom fields on objects. However we are seeing an issue when trying to deploy for <nameField>. ...
0
votes
1answer
247 views
Equivalent to LIKE operator (in SOQL) in string method
Due to shield encryption, I have to get rid of any SOQL queries filtered with encrypted fields. Thought is to remove the filter from soql and validate the retrieved soql results against the searchKey ...
3
votes
2answers
265 views
Custom Journey Builder Flow Control Activity
I would like to build a custom journey builder flow control activity to read directly into Salesforce org with field encryption. This is to bypass the need to bring entry data into marketing cloud.
...
1
vote
1answer
796 views
Any way out of "Encryption can't be enabled for fields referenced in the custom formula fields"?
I have a formula field based on a date field, and I want to have the date field encrypted using Shield Platform Encryption. But when I try to turn the encryption on I get:
Error on fields update ...
1
vote
2answers
109 views
Case Insensitive - GA Summer 19?
I have been doing some digging on case Insensitive encryption. I am reading this:
Get Exact Matching with Case-Insensitive Deterministic Encryption (Generally Available)
And it looks like this ...
4
votes
1answer
206 views
Platform encryption scratch org errors "common.exception.SfdcSqlException: ORA-00932: inconsistent datatypes: expected CHAR got DATE"
For the past couple of weeks our Continuous Integration (CI) build that uses SFDX and scratch orgs has had most of its queries failing for the Platform Encryption org with this error:
common....
5
votes
1answer
761 views
Reading into Shield Encrypted Fields from Salesforce Marketing Cloud
We are currently integrated with the core platform through marketing cloud connect and we are using salesforce data as an entry source in most of our journeys.
My question is, if we were to go with ...
1
vote
1answer
50 views
See reason why records failed to encrypt
I am going through an encryption effort in a SF sandbox. While encrypting, I noticed a few inconsistencies. For example, I got an email mentioning: Sandbox: Unable to Complete Encryption Task. I am ...
0
votes
1answer
47 views
Loading Encrypted Records
I have been looking to see what other people have experienced regarding loading records into an environment with encryption enabled. If I were to use a tool such as DBamp, to load records into an an ...
0
votes
1answer
1k views
Encrypt Formula Fields with Platform Encryptiion
Are any types formula fields able to be encrypted via platform encryption? I have been looking for options, and so far, I have been unsuccessful in locating any documentation. If not, what have you ...
0
votes
2answers
104 views
Encryption Impact - Enabling Encryption vs Encrypting Data
This is more of a curiosity question. I have went through and encrypted ~50 fields in a sandbox with existing data. There are more fields I would like to encrypt, but they will take some more work ...
0
votes
1answer
48 views
Encryption Question regarding SF generating Tenant Secret
From a testing perspective for platform encryptuion, if I follow this article, and hit the "generate tenant secret" button, am I good to start encrypting? In the BYOK documentation, it mentions ...
1
vote
1answer
192 views
Salesforce BYOK Strategy
So - I have been doing research regarding Salesforce platform encryption, and am struggling to find the actual "button pushing" steps to accomplish the BYOK plan. Please correct these following steps ...
0
votes
1answer
141 views
Supported Encryption Operators/Functions
I have been looking into supported operators and functions within Salesforce, and found this list:
Supported Operators, Functions, and Actions
Supported operators and functions:
& and + (...
0
votes
1answer
305 views
Shield Encryption Timeline/Process
I was curious, I have been reading the Shield Encryption Implementation Guide. I am wondering if there was a strategy you took when implementing Shield Platform Encryption? Did you encrypt straight ...
2
votes
0answers
15 views
Make package field referred in formula editor encryptable
We are working on making a managed package Salesforce Shield compatible. In one of the package object, we have a formula field which uses another package field and compare it with a string using CASE ...
3
votes
1answer
590 views
Does Case-Insensitive Deterministic Encryption support SOQL LIKE and STARTS WITH statements?
The current Salesforce documentation states that deterministic encryption only supports exact, case-sensitive matches. This is why comparison operators that return partial matches aren't supported.
...
0
votes
1answer
217 views
Why can I still see encrypted File and Attachment?
I have enabled Salesforce Shield in a developer org of mine, checked File and Attachment to make encrypted. After that, I created another user with a different profile who have not permission to see ...
0
votes
0answers
41 views
3 States of Data - Encryption
Three part question about encryption in the 3 data states:
In-Transit
In-Use
At-Rest
What types of Encryption does Salesforce offer in these 3 states?
Feel free to break it up further in to finer ...
2
votes
1answer
383 views
Deploy Salesforce Shield components in production sandbox
I have developed and tested transaction security policies in the sandbox environment. Can someone provide guidance around how to deploy these policies in production environment?
For Platform ...
2
votes
2answers
2k views
How can I test to see if a field is encrypted using Shield Platform Encryption?
If I encrypt fields with the Platform Shield Encryption, but still see the fields when I'm a different user how can I test to see if the encryption is working?
I understand it encrypts at rest so I ...
0
votes
2answers
2k views
What is the impact of encrypting all fields using Salesforce Shield / Platform Encryption
Why wouldn't someone decide to encrypt all the fields using Salesforce Shield?
