Questions tagged [shield-encryption]
The shield-encryption tag has no usage guidance.
62
questions
0
votes
1answer
17 views
Scratch Org - Generate Keys automatically
I would like to know if anyone has a way of generating platform encryption keys when building a scratch org?
Currently, the way I know is to Create a Permission set with:
MANAGE ENCRYPTION KEYS
...
0
votes
0answers
12 views
Enabling Shield Platform Encryption in an ORG which is connected to MC BU
Our MC env is already connected using MC connect to a SF org. We're planning to enable Shield Platform Encryption in our org. We would like to know how this will affect our data/journeys in MC:
Are ...
0
votes
0answers
7 views
Exporting Shield encrypted attributes in encrypted form
As the "view encrypted data" permission has been removed so what is the new method of exporting the Shield encrypted attributes in encrypted form?
0
votes
1answer
23 views
How to support shield encryption in managed package?
I have read documentation regarding Platform Encryption on managed package and everywhere its written that If a managed package supports Shield encryption then we can encrypt fields.
So if I am ...
0
votes
2answers
18 views
HTML email template renders formula field as null. Formula references encrypted field(s)
Given
Cross-object formula field My_Identifier__c on Case: Asset__r.My_Identifier__c
where Asset.My_Identifier__c is a text field, Shield-encrypted
HTML email template that looks like:
Here is the ...
0
votes
2answers
48 views
purpose of Salesforce Shield Encryption [closed]
What is purpose of using salesforce shield encryption, when the encrypted fields are not being masked
in Rest Calls, data load export files etc,
what benefits we get it from doing so.
3)How would we ...
0
votes
2answers
212 views
Government Cloud and Encryption for data at-rest
If I walk out of a Salesforce Government Cloud data center with a disk or tape that contains customer data, I assume the disk or tape is encrypted. I won't be able to just mount the drive and browse ...
0
votes
0answers
15 views
SOSL distance function is not giving result with encrypted mailing field of contact?
I am using encrypted mailing field for distance search in Apex code and queryEditor, but its not working with encrypted mailing address.
Below is my query:
SELECT id, DISTANCE( MailingAddress, ...
1
vote
1answer
118 views
Marketing Cloud Connect - extracting data from Sales Cloud with Shield Encryption
We would like to implement shield platform on the Sales Cloud and use the Marketing Cloud Connect to have the Sales Cloud data in the synchronized data extensions.
Will the data in the synchronized ...
0
votes
1answer
37 views
Scope of Salesforce Shield
When you license Salesforce Shield is it at the org level? I’m having trouble determining this answer. Based on what I can see via TrailHead, this should apply to any data within the org including any ...
1
vote
1answer
195 views
Change a formula field and get Data Uniqueness Violation - The proposed data changes would violate a uniqueness constraint
Given
Existing custom field Asset.SerialNumber (OOTB - Text)
New custom field Asset.SerialNumber_bis__c (Text255, External Id non-unique, deterministic encrypted case insensitive)
Existing custom ...
1
vote
1answer
61 views
Non-selective query error Email-to-case Contact.Email Deterministically Encrypted when dup emails
Given:
Over 200,000 Contacts with emails
Contact.Email is deterministically encrypted - case insensitive
All Contacts encrypted
Two contacts have the same email address foo@bar.com
E2C executes ...
1
vote
1answer
428 views
Shield Encryption(Deterministic vs Probabilistic) and Where Clause
I was going through salesforce documentation for shield encryption and got to know below.
Deterministic encryption comes in two types: case-sensitive and case-insensitive. With case-sensitive ...
3
votes
1answer
56 views
Use Salesforce KMS for Encryption- Order of Operations
This is a Multi-part question....
If I wanted to utilize the Salesforce KMS. Do I just need to hit the Generate Tenant Secret button on both the Data In Salesforce and Data in Salesforce (...
1
vote
2answers
148 views
Encrypting PII data with our own keys
I'm new to Salesforce and working on a problem being raised by my team. They have a requirement to encrypt all PII passing between our systems and Salesforce . Our company only allows for this data to ...
0
votes
1answer
51 views
Momentarily Disable Encryption
This is an odd problem, but nonetheless, I am stumped. Has anyone ever had to disable encryption in order to get bulk data loads to succeed? Right now, we are encrypting fields on the account object....
0
votes
1answer
73 views
On encrypting “Account name” standard field will it impact the first name and last name in shield encryption
I Have a requirement where i need to encrypt the "Account name" Standard Field.
But my question is will it also encrypt the FirstName & LastName
0
votes
1answer
36 views
What populated “History” tab in encryption statistics?
When I navigate to Platform Encryption Statistics --> then toggle over to the History tab, I see a table with 4 columns. They are:
Encrypted Field History
Unencrypted Field History
Encrypted Feed
...
2
votes
1answer
197 views
Deploying Shield Platform Encryption using Metadata API
I'm planning to deploy the encrypted field from our dev org to production?
Both environment has shield platform encryption enabled. The api version of the source organization is 44 and the target is ...
1
vote
1answer
248 views
Why are certain custom fields not allowed in Shield Platform Encryption?
Hi I was wondering why Formula, Checkbox, Number and Picklist data types are not allowed to be encrypted? If so are there any workarounds for this one?
I read a lot of documentation regarding Shield ...
3
votes
2answers
956 views
Way to see all encrypted fields in Salesforce?
I was looking for a way to see what fields in an org are encrypted. I am aware of the encryption statistics, however I was hoping there was a way where I could do a SOQL query and return all the ...
0
votes
1answer
86 views
CampaignMember and Platform Encryption - Unable to encrypt fields
There are multiple fields within the CampaignMember object that I would like to, and should be, encrypted. For example, FirstName, LastName, Email, etc. Is there a reason I can't encrypt these? My ...
1
vote
1answer
81 views
nameField encrypted metadata not deploying correctly
We have enabled platform encryption and are deploying the <encrypted> tags for standard and custom fields on objects. However we are seeing an issue when trying to deploy for <nameField>. ...
0
votes
1answer
141 views
Equivalent to LIKE operator (in SOQL) in string method
Due to shield encryption, I have to get rid of any SOQL queries filtered with encrypted fields. Thought is to remove the filter from soql and validate the retrieved soql results against the searchKey ...
3
votes
2answers
193 views
Custom Journey Builder Flow Control Activity
I would like to build a custom journey builder flow control activity to read directly into Salesforce org with field encryption. This is to bypass the need to bring entry data into marketing cloud.
...
1
vote
1answer
460 views
Any way out of “Encryption can't be enabled for fields referenced in the custom formula fields”?
I have a formula field based on a date field, and I want to have the date field encrypted using Shield Platform Encryption. But when I try to turn the encryption on I get:
Error on fields update ...
1
vote
2answers
103 views
Case Insensitive - GA Summer 19?
I have been doing some digging on case Insensitive encryption. I am reading this:
Get Exact Matching with Case-Insensitive Deterministic Encryption (Generally Available)
And it looks like this ...
4
votes
1answer
165 views
Platform encryption scratch org errors “common.exception.SfdcSqlException: ORA-00932: inconsistent datatypes: expected CHAR got DATE”
For the past couple of weeks our Continuous Integration (CI) build that uses SFDX and scratch orgs has had most of its queries failing for the Platform Encryption org with this error:
common....
4
votes
1answer
518 views
Reading into Shield Encrypted Fields from Salesforce Marketing Cloud
We are currently integrated with the core platform through marketing cloud connect and we are using salesforce data as an entry source in most of our journeys.
My question is, if we were to go with ...
1
vote
1answer
49 views
See reason why records failed to encrypt
I am going through an encryption effort in a SF sandbox. While encrypting, I noticed a few inconsistencies. For example, I got an email mentioning: Sandbox: Unable to Complete Encryption Task. I am ...
0
votes
1answer
41 views
Loading Encrypted Records
I have been looking to see what other people have experienced regarding loading records into an environment with encryption enabled. If I were to use a tool such as DBamp, to load records into an an ...
0
votes
1answer
546 views
Encrypt Formula Fields with Platform Encryptiion
Are any types formula fields able to be encrypted via platform encryption? I have been looking for options, and so far, I have been unsuccessful in locating any documentation. If not, what have you ...
0
votes
2answers
75 views
Encryption Impact - Enabling Encryption vs Encrypting Data
This is more of a curiosity question. I have went through and encrypted ~50 fields in a sandbox with existing data. There are more fields I would like to encrypt, but they will take some more work ...
0
votes
1answer
37 views
Encryption Question regarding SF generating Tenant Secret
From a testing perspective for platform encryptuion, if I follow this article, and hit the "generate tenant secret" button, am I good to start encrypting? In the BYOK documentation, it mentions ...
1
vote
1answer
140 views
Salesforce BYOK Strategy
So - I have been doing research regarding Salesforce platform encryption, and am struggling to find the actual "button pushing" steps to accomplish the BYOK plan. Please correct these following steps ...
0
votes
1answer
88 views
Supported Encryption Operators/Functions
I have been looking into supported operators and functions within Salesforce, and found this list:
Supported Operators, Functions, and Actions
Supported operators and functions:
& and + (...
0
votes
1answer
242 views
Shield Encryption Timeline/Process
I was curious, I have been reading the Shield Encryption Implementation Guide. I am wondering if there was a strategy you took when implementing Shield Platform Encryption? Did you encrypt straight ...
2
votes
0answers
15 views
Make package field referred in formula editor encryptable
We are working on making a managed package Salesforce Shield compatible. In one of the package object, we have a formula field which uses another package field and compare it with a string using CASE ...
3
votes
1answer
300 views
Does Case-Insensitive Deterministic Encryption support SOQL LIKE and STARTS WITH statements?
The current Salesforce documentation states that deterministic encryption only supports exact, case-sensitive matches. This is why comparison operators that return partial matches aren't supported.
...
0
votes
1answer
122 views
Why can I still see encrypted File and Attachment?
I have enabled Salesforce Shield in a developer org of mine, checked File and Attachment to make encrypted. After that, I created another user with a different profile who have not permission to see ...
0
votes
0answers
37 views
3 States of Data - Encryption
Three part question about encryption in the 3 data states:
In-Transit
In-Use
At-Rest
What types of Encryption does Salesforce offer in these 3 states?
Feel free to break it up further in to finer ...
2
votes
1answer
226 views
Deploy Salesforce Shield components in production sandbox
I have developed and tested transaction security policies in the sandbox environment. Can someone provide guidance around how to deploy these policies in production environment?
For Platform ...
2
votes
2answers
1k views
How can I test to see if a field is encrypted using Shield Platform Encryption?
If I encrypt fields with the Platform Shield Encryption, but still see the fields when I'm a different user how can I test to see if the encryption is working?
I understand it encrypts at rest so I ...
0
votes
2answers
1k views
What is the impact of encrypting all fields using Salesforce Shield / Platform Encryption
Why wouldn't someone decide to encrypt all the fields using Salesforce Shield?
1
vote
1answer
201 views
Salesforce Shield Decryption When Using API
Our application supports reading data from salesforce in a batch form and also as a real time sync. We have been using the salesforce SOAP api and the real time streaming api for the two use cases ...
5
votes
1answer
112 views
Impact of Shield Platform Encryption on describe calls?
Some old code was obtaining information about record types by querying the RecordType object. But now that the RecordTypeInfo describe API includes the record type developer name, we have changed the ...
0
votes
1answer
250 views
Why do SOSL works after enabling Deterministic Encryption?
I have enabled Deterministic Encryption for my org, encrypted field Account.Name and created new Account 'MyAccount'. So, in my classes or in Developer Console I can search this account only by full ...
2
votes
1answer
101 views
DescribeFieldResult Class doesn't have encryption and masking methods
Unable to find any method for field encryption and field masking in DescribeFieldResult Class.
Methods like getMaskType, getMask, isEncrypted are working with DescribeFieldResult.
Is there any ...
1
vote
1answer
78 views
Enforce Shield encryption, still valid for security review?
Just went through Security Requirements Checklist (https://developer.salesforce.com/page/Requirements_Checklist) in order to verify things that could be detected as a vulnerability in our app for ...
3
votes
1answer
91 views
How to Generate/Read BYOK-Compatible Certificate from Apex code
How can we read BYOK Compatible certificates present in Salesfoce using Apex (or SF REST APIs). Also is there any way to generate BYOK Compatible certificate using Apex code or SF REST APIs.
I ...
