Questions tagged [shield-encryption]
The shield-encryption tag has no usage guidance.
54
questions
0
votes
1answer
18 views
Scope of Salesforce Shield
When you license Salesforce Shield is it at the org level? I’m having trouble determining this answer. Based on what I can see via TrailHead, this should apply to any data within the org including any ...
1
vote
1answer
16 views
Change a formula field and get Data Uniqueness Violation - The proposed data changes would violate a uniqueness constraint
Given
Existing custom field Asset.SerialNumber (OOTB - Text)
New custom field Asset.SerialNumber_bis__c (Text255, External Id non-unique, deterministic encrypted case insensitive)
Existing custom ...
1
vote
1answer
51 views
Non-selective query error Email-to-case Contact.Email Deterministically Encrypted when dup emails
Given:
Over 200,000 Contacts with emails
Contact.Email is deterministically encrypted - case insensitive
All Contacts encrypted
Two contacts have the same email address foo@bar.com
E2C executes ...
0
votes
1answer
33 views
Shield Encryption(Deterministic vs Probabilistic) and Where Clause
I was going through salesforce documentation for shield encryption and got to know below.
Deterministic encryption comes in two types: case-sensitive and case-insensitive. With case-sensitive ...
3
votes
1answer
42 views
Use Salesforce KMS for Encryption- Order of Operations
This is a Multi-part question....
If I wanted to utilize the Salesforce KMS. Do I just need to hit the Generate Tenant Secret button on both the Data In Salesforce and Data in Salesforce (...
1
vote
2answers
68 views
Encrypting PII data with our own keys
I'm new to Salesforce and working on a problem being raised by my team. They have a requirement to encrypt all PII passing between our systems and Salesforce . Our company only allows for this data to ...
0
votes
1answer
48 views
Momentarily Disable Encryption
This is an odd problem, but nonetheless, I am stumped. Has anyone ever had to disable encryption in order to get bulk data loads to succeed? Right now, we are encrypting fields on the account object....
0
votes
1answer
28 views
On encrypting “Account name” standard field will it impact the first name and last name in shield encryption
I Have a requirement where i need to encrypt the "Account name" Standard Field.
But my question is will it also encrypt the FirstName & LastName
0
votes
1answer
36 views
What populated “History” tab in encryption statistics?
When I navigate to Platform Encryption Statistics --> then toggle over to the History tab, I see a table with 4 columns. They are:
Encrypted Field History
Unencrypted Field History
Encrypted Feed
...
0
votes
0answers
24 views
Are there any performance penalties for fields encrypted with Platform Encryption? [duplicate]
Does encrypting a field ever add noticeable time to any code/report execution? The documentation mentions a performance impact when using case-insensitive deterministic encryption for email fields, ...
2
votes
1answer
63 views
Deploying Shield Platform Encryption using Metadata API
I'm planning to deploy the encrypted field from our dev org to production?
Both environment has shield platform encryption enabled. The api version of the source organization is 44 and the target is ...
1
vote
1answer
92 views
Why are certain custom fields not allowed in Shield Platform Encryption?
Hi I was wondering why Formula, Checkbox, Number and Picklist data types are not allowed to be encrypted? If so are there any workarounds for this one?
I read a lot of documentation regarding Shield ...
2
votes
2answers
439 views
Way to see all encrypted fields in Salesforce?
I was looking for a way to see what fields in an org are encrypted. I am aware of the encryption statistics, however I was hoping there was a way where I could do a SOQL query and return all the ...
0
votes
1answer
40 views
CampaignMember and Platform Encryption - Unable to encrypt fields
There are multiple fields within the CampaignMember object that I would like to, and should be, encrypted. For example, FirstName, LastName, Email, etc. Is there a reason I can't encrypt these? My ...
1
vote
1answer
53 views
nameField encrypted metadata not deploying correctly
We have enabled platform encryption and are deploying the <encrypted> tags for standard and custom fields on objects. However we are seeing an issue when trying to deploy for <nameField>. ...
0
votes
1answer
79 views
Equivalent to LIKE operator (in SOQL) in string method
Due to shield encryption, I have to get rid of any SOQL queries filtered with encrypted fields. Thought is to remove the filter from soql and validate the retrieved soql results against the searchKey ...
3
votes
2answers
107 views
Custom Journey Builder Flow Control Activity
I would like to build a custom journey builder flow control activity to read directly into Salesforce org with field encryption. This is to bypass the need to bring entry data into marketing cloud.
...
1
vote
1answer
158 views
Any way out of “Encryption can't be enabled for fields referenced in the custom formula fields”?
I have a formula field based on a date field, and I want to have the date field encrypted using Shield Platform Encryption. But when I try to turn the encryption on I get:
Error on fields update ...
1
vote
2answers
100 views
Case Insensitive - GA Summer 19?
I have been doing some digging on case Insensitive encryption. I am reading this:
Get Exact Matching with Case-Insensitive Deterministic Encryption (Generally Available)
And it looks like this ...
4
votes
1answer
85 views
Platform encryption scratch org errors “common.exception.SfdcSqlException: ORA-00932: inconsistent datatypes: expected CHAR got DATE”
For the past couple of weeks our Continuous Integration (CI) build that uses SFDX and scratch orgs has had most of its queries failing for the Platform Encryption org with this error:
common....
4
votes
1answer
219 views
Reading into Shield Encrypted Fields from Salesforce Marketing Cloud
We are currently integrated with the core platform through marketing cloud connect and we are using salesforce data as an entry source in most of our journeys.
My question is, if we were to go with ...
1
vote
1answer
48 views
See reason why records failed to encrypt
I am going through an encryption effort in a SF sandbox. While encrypting, I noticed a few inconsistencies. For example, I got an email mentioning: Sandbox: Unable to Complete Encryption Task. I am ...
0
votes
1answer
28 views
Loading Encrypted Records
I have been looking to see what other people have experienced regarding loading records into an environment with encryption enabled. If I were to use a tool such as DBamp, to load records into an an ...
0
votes
1answer
184 views
Encrypt Formula Fields with Platform Encryptiion
Are any types formula fields able to be encrypted via platform encryption? I have been looking for options, and so far, I have been unsuccessful in locating any documentation. If not, what have you ...
0
votes
2answers
61 views
Encryption Impact - Enabling Encryption vs Encrypting Data
This is more of a curiosity question. I have went through and encrypted ~50 fields in a sandbox with existing data. There are more fields I would like to encrypt, but they will take some more work ...
0
votes
1answer
29 views
Encryption Question regarding SF generating Tenant Secret
From a testing perspective for platform encryptuion, if I follow this article, and hit the "generate tenant secret" button, am I good to start encrypting? In the BYOK documentation, it mentions ...
1
vote
1answer
91 views
Salesforce BYOK Strategy
So - I have been doing research regarding Salesforce platform encryption, and am struggling to find the actual "button pushing" steps to accomplish the BYOK plan. Please correct these following steps ...
0
votes
1answer
51 views
Supported Encryption Operators/Functions
I have been looking into supported operators and functions within Salesforce, and found this list:
Supported Operators, Functions, and Actions
Supported operators and functions:
& and + (...
0
votes
1answer
158 views
Shield Encryption Timeline/Process
I was curious, I have been reading the Shield Encryption Implementation Guide. I am wondering if there was a strategy you took when implementing Shield Platform Encryption? Did you encrypt straight ...
2
votes
0answers
14 views
Make package field referred in formula editor encryptable
We are working on making a managed package Salesforce Shield compatible. In one of the package object, we have a formula field which uses another package field and compare it with a string using CASE ...
3
votes
1answer
140 views
Does Case-Insensitive Deterministic Encryption support SOQL LIKE and STARTS WITH statements?
The current Salesforce documentation states that deterministic encryption only supports exact, case-sensitive matches. This is why comparison operators that return partial matches aren't supported.
...
0
votes
1answer
73 views
Why can I still see encrypted File and Attachment?
I have enabled Salesforce Shield in a developer org of mine, checked File and Attachment to make encrypted. After that, I created another user with a different profile who have not permission to see ...
0
votes
0answers
34 views
3 States of Data - Encryption
Three part question about encryption in the 3 data states:
In-Transit
In-Use
At-Rest
What types of Encryption does Salesforce offer in these 3 states?
Feel free to break it up further in to finer ...
2
votes
1answer
113 views
Deploy Salesforce Shield components in production sandbox
I have developed and tested transaction security policies in the sandbox environment. Can someone provide guidance around how to deploy these policies in production environment?
For Platform ...
2
votes
2answers
487 views
How can I test to see if a field is encrypted using Shield Platform Encryption?
If I encrypt fields with the Platform Shield Encryption, but still see the fields when I'm a different user how can I test to see if the encryption is working?
I understand it encrypts at rest so I ...
0
votes
2answers
798 views
What is the impact of encrypting all fields using Salesforce Shield / Platform Encryption
Why wouldn't someone decide to encrypt all the fields using Salesforce Shield?
1
vote
1answer
101 views
Salesforce Shield Decryption When Using API
Our application supports reading data from salesforce in a batch form and also as a real time sync. We have been using the salesforce SOAP api and the real time streaming api for the two use cases ...
5
votes
1answer
85 views
Impact of Shield Platform Encryption on describe calls?
Some old code was obtaining information about record types by querying the RecordType object. But now that the RecordTypeInfo describe API includes the record type developer name, we have changed the ...
0
votes
1answer
184 views
Why do SOSL works after enabling Deterministic Encryption?
I have enabled Deterministic Encryption for my org, encrypted field Account.Name and created new Account 'MyAccount'. So, in my classes or in Developer Console I can search this account only by full ...
2
votes
1answer
78 views
DescribeFieldResult Class doesn't have encryption and masking methods
Unable to find any method for field encryption and field masking in DescribeFieldResult Class.
Methods like getMaskType, getMask, isEncrypted are working with DescribeFieldResult.
Is there any ...
1
vote
1answer
71 views
Enforce Shield encryption, still valid for security review?
Just went through Security Requirements Checklist (https://developer.salesforce.com/page/Requirements_Checklist) in order to verify things that could be detected as a vulnerability in our app for ...
3
votes
1answer
72 views
How to Generate/Read BYOK-Compatible Certificate from Apex code
How can we read BYOK Compatible certificates present in Salesfoce using Apex (or SF REST APIs). Also is there any way to generate BYOK Compatible certificate using Apex code or SF REST APIs.
I ...
0
votes
1answer
61 views
Shield Implementation
It would be a great help if you can share your thoughts on the following points:
If this is possible to persist data for more than 30 days using Shield ? If not, any alternate approach will be ...
0
votes
2answers
60 views
Salesforce Shield Encryption Evidence Post Spring 17 Release [duplicate]
Post spring 17 release, the “View Encrypted Data” permission and its resulting masking behavior will no longer be available and users can see encrypted field data in plaintext if they have access to ...
0
votes
0answers
77 views
Shield Platform Encryption
I was trying to implement Platform encryption in my org. Salesforce does not encrypt a field if it is referenced in where clause of a soql in a class and send you an email stating that field can not ...
1
vote
1answer
184 views
Shield: Encrypted Fields not encrypted
I have enabled platform encryption in a sandbox, and chosen to encrypt a few fields in the Contact object. However, when a user without the "View Encrypted Data" permission views a contact record, ...
0
votes
2answers
165 views
Benefits of using customer supplied tenant secret in Platform encryption
Shield Platform encryption provides 2 options for tenant secrets.Customer-supplied tenant secret upload(BYOK) and On-demand tenant secret generation. I am looking for advantages of BYOK over on-demand ...
1
vote
1answer
144 views
Cannot destroy tenant secret - Shield Encryption
I am trying to view masked characters for the encrypted fields. Since masks are disabled since Sring 17, the workaround seems to be to delete the tenant to view masked characters. I am not able to ...
1
vote
1answer
103 views
Shield Encryption
I have a general doubt on using encryption nature. Suppose I use shield to encrypt data and send some data as merge fields in an email template to other system, how is the encrypted data transferred / ...
1
vote
3answers
343 views
Encrypted data not in the encrypted format
I have enabled shield encryption for contact name in dev org.
when I try to create a new record on contact the record is still visible to the users and is not in encrypted format
I'm missing out ...
