Skip to main content
7 votes
Accepted

Why can I still see encrypted data?

You're confusing Salesforce Shield/Platform Encryption with Classic Encryption (encrypted fields). The latter require the View Encrypted Data permission to view in plaintext, but that's not how ...
David Reed's user avatar
  • 93.2k
7 votes
Accepted

What is the impact of encrypting all fields using Salesforce Shield / Platform Encryption

There's a number of limitations, outlined in General Shield Platform Encryption Considerations. This includes a limited ability to use MIN/MAX/COUNT_DISTINCT, WHERE filters, GROUP BY filters, ORDER BY ...
sfdcfox's user avatar
  • 495k
7 votes
Accepted

Has anyone enabled Transparent Data Encryption (TDE) in Marketing Cloud?

TDE is, as EazyE also mentions, a paid feature. You should reach out to your Account Executive to have it enabled, but it will come at a price. Do observe, if you accept the cost, it might not be ...
Lukas Lunow's user avatar
  • 21.7k
5 votes
Accepted

Equivalent to LIKE operator (in SOQL) in string method

That would be a Pattern: Pattern p = Pattern.compile('h.+o world'); String s = 'hello world'; if(p.matcher(s).matches()) { // Matched! } You'll need to learn about Regular Expressions, which are ...
sfdcfox's user avatar
  • 495k
5 votes

Encrypted data not in the encrypted format

There is no easy answer to your question, starting a new one given that it's much larger that what can fit in a comment. We took this decision for multiple reasons 1/ The goal of platform encryption ...
Alexandre Hersans's user avatar
5 votes
Accepted

What does "at rest" mean involving data encryption?

The "encrypted fields" feature use encryption keys managed by Salesforce, only works for custom fields, and can show masked data (e.g. ***-**-1234 instead of the full 9 digit number). Platform ...
sfdcfox's user avatar
  • 495k
4 votes
Accepted

Why can I still see encrypted File and Attachment?

Shield Platform Encryption encrypts your data at rest, on the Salesforce server. It helps you to meet compliance requirements for your industry. Salesforce Shield is not intended to protect your data ...
David Reed's user avatar
  • 93.2k
4 votes

Platform Encryption vs. FLS

Platform Encryption will go further than just preventing the users from seeing data, it will also encrypt the fields at the database level. For example, you can't even issue a SoQL query doing an "...
Sebastian Kessel's user avatar
3 votes

What is the impact of encrypting all fields using Salesforce Shield / Platform Encryption

The reason to use shield fundamentally comes down to how much the regulation and contractual obligations of a given Salesforce customer allow them to trust the already in-built security mechanisms of ...
pchittum's user avatar
  • 19.7k
3 votes
Accepted

Deploying Shield Platform Encryption using Metadata API

If both the orgs have encryption enabled then you don't need to perform any manual step as the encryption attribute will persist in target organisation. The only thing to make sure is target ...
Ashwani's user avatar
  • 22.6k
3 votes
Accepted

Encrypted data not in the encrypted format

I'm not sure what you mean by encrypted format. If you expect the data to be masked (meaning being replaced by something like "*****"), this behavior is going away. As far as the end user is ...
Alexandre Hersans's user avatar
3 votes

Platform Encryption vs. FLS

After our meeting with a rep who walked us through Shield in more detail, he said basically there are two reasons to use Platform Encryption: You are worried someone is going to physically steal a ...
Adrian Larson's user avatar
  • 150k
3 votes
Accepted

Platform Encryption vs. FLS

The main advantage of Platform Encryption versus Classic Encrypted Custom Fields is: Transparency for business critical Platform features, such as search, workflow, and validation rules You'd have ...
o-lexi's user avatar
  • 3,094
3 votes
Accepted

Impact of Shield Platform Encryption on describe calls?

I'm sorry but it's unlikely that platform encryption is interfering in this particular piece of code. Computing the record types is a non-trivial operation but it is orthogonal to platform ...
Alexandre Hersans's user avatar
3 votes

How to Generate/Read BYOK-Compatible Certificate from Apex code

Managing the cert can be done via the MetaData API: https://developer.salesforce.com/docs/atlas.en-us.api_meta.meta/api_meta/meta_certificate.htm There isn't a straightforward way to do that with ...
Chuck Mortimore's user avatar
2 votes

Deploy Salesforce Shield components in production sandbox

Now you can take your encryption settings with you when you deploy customizations from one org to another. You can also apply encryption to components that are already part of a change set. Your ...
Hemavantha Rajesh Varma Mudunu's user avatar
2 votes

Transaction security policy for multiple logins

There is no SOQL Date Literal equivalent to to LAST_N_DAYS:1 that will give you a period of 8 hours. Instead, you can just calculate the date range and use that in the SOQL query instead. DateTime ...
Daniel Ballinger's user avatar
2 votes
Accepted

Platform Shield: Can we encrypt/decrypt the data explicitly using tenant secret in apex?

You can not decrypt the data by using the tenant secret via Apex code.Since salesforce itself it will decrypt the data whenever you open the record. It can be done in case if you are using the third ...
SUresha Shettigar's user avatar
2 votes

How do I change my SOQL below so that Shield Platform Encryption is supported on SSN and the query supports large amounts of data

If you have the ability to add a custom field where the last four of the SSN is masked I think there's a decent solution for you. If you can do that, you could query on the masked last four digits, ...
crmprogdev's user avatar
2 votes

Encrypted data not in the encrypted format

See the Spring 17 Release Notes. In order to reduce confusion between masked and encrypted data, Salesforce has effectively deprecated the standard use of a mask over data fields. Fields encrypted ...
IllusiveBrian's user avatar
2 votes
Accepted

Does Case-Insensitive Deterministic Encryption support SOQL LIKE and STARTS WITH statements?

Yes, case-insensitive deterministic encryption will still be exact-match, with the exception being that it is case insensitive. For example, if you encrypt "John Whelan" with case-insensitive you ...
John Whelan's user avatar
2 votes

Has anyone enabled Transparent Data Encryption (TDE) in Marketing Cloud?

I worked on an account that migrated to TDE. I had the same question as you: "how do we know this is actually implemented?" There is no way for you to see this on the platform, but on request, ...
Eliot Harper's user avatar
  • 16.6k
2 votes
Accepted

Scope of Salesforce Shield

Shield is licensed at the org level Based on your tag - I'm limiting myself to Shield Platform Encryption in the rest of my answer Shield encryption applies to whatever OOTB and custom Object fields ...
cropredy's user avatar
  • 71.9k
1 vote

SNEEZY Error on Encryption - Email Message Relation Object

Per Support, this has been reported as a bug (not handling the raw error code properly). They should have replied to you as follows: Case-insensitive deterministic encryption requires two custom ...
cropredy's user avatar
  • 71.9k
1 vote
Accepted

What populated "History" tab in encryption statistics?

Those are showing encryption statistics for field history and feed tracking data. You will only see that tab if you've enabled encryption for these in Advanced Settings. As for what populates the ...
John Whelan's user avatar
1 vote
Accepted

Is all our Salesforce data Encrypted At Rest in various Orgs?

Hyperforce provides volume-level encryption for data at rest, as stated on Hyperforce FAQ and at page 9 of Hyperforce Security Privacy and Architecture. In orgs which 1) are not on Hyperforce, and 2) ...
RubenDG's user avatar
  • 8,592
1 vote
Accepted

Shield encryption : Affecting formula field as where clause in a Like query

A shield encrypted field cannot be used in a WHERE clause unless you make it deterministic (as mentioned by identigral). Regardless, they certainly cannot be used with LIKE however they are encrypted. ...
Phil W's user avatar
  • 36.8k
1 vote

How can I create a enhanced transaction security policy to allow only POST method in API event

The ApiEvent only tracks read-only calls upon SFDC (i.e. queries) plus SOAP and Bulk API. No REST Tracks these user-initiated read-only API calls: query(), queryMore(), and count(). Captures API ...
cropredy's user avatar
  • 71.9k
1 vote
Accepted

Transaction Security Policy - Block "ReportRunFromLightning" Operation Based Object By RecordType Counts

So, yes - the relevant SFDC tool is Shield Event Monitoring and Transaction Security Policies. Report Events can be monitored. This includes both report viewing and report export HOWEVER, the ...
cropredy's user avatar
  • 71.9k
1 vote
Accepted

Shield Encryption Timeline/Process

When implementing Shield Platform Encryption for the first time, you should start by doing a data classification exercise: Understand what data you have, and of that data what do you actually need to ...
John Whelan's user avatar

Only top scored, non community-wiki answers of a minimum length are eligible