Salesforce Security Guide

Clouds with binary code floating aboveCloud with binary code floating above

No Results

Search Tips:

  • Please consider misspellings
  • Try different search keywords
Salesforce Security Guide
Salesforce Security Basics
Authenticate Users
Give Users Access to Data
Share Objects and Fields
Strengthen Your Data’s Security with Shield Platform Encryption
What You Can Encrypt
Platform Encryption Q&A
How Encryption Works
Set Up Your Encryption Policy
Required Permissions
Generate and Manage Tenant Secrets
Set Up Field-Level Encryption
Encrypt Files
Encrypt Data in Chatter
Encrypt Data Cloud with Customer-Managed Root Keys
Encrypt Search Index Files with a Tenant Secret
Encrypt Search Index Files with a Root Key
Generate a Search Index Data Encryption Key
Encrypt CRM Analytics Data
Encrypt Event Bus Data
Fix Blockers
Stop Encryption
Filter Encrypted Data with Deterministic Encryption
Key Management and Rotation
Shield Platform Encryption Customizations
Encryption Trade-Offs
Audit and Monitor Your Organization’s Security
Real-Time Event Monitoring
Security Guidelines for Apex and Visualforce Development
API End-of-Life Policy
PDF

Generate a Search Index Data Encryption Key

In Hyperforce orgs, create the search index encryption data encryption key (DEK) from the Key Management page in Setup. DEKs are secured with Salesforce root keys.
Available in both Lightning Experience and Salesforce Classic (not available in all orgs).
Available as an add-on subscription to Hyperforce orgs in: Enterprise, Performance, and Unlimited Editions. Requires purchasing Salesforce Shield. Available in Developer Edition at no charge.

User Permissions Needed
To generate, destroy, export, import, upload, and configure Shield Platform Encryption key material: Manage Encryption Keys

Using Setup is the only way to manage Search Index DEKs. You can’t manage them using Apex.

Note

  1. From Setup, in the Quick Find box, enter Platform Encryption, and then select Key Management.
  2. Select the Search Index tab. Then click Generate DEK.
    The new DEK is generated. This DEK is used to encrypt all new data in the search index, which builds dynamically as it captures new search data.

    Periodically, more than one iteration of your DEK is needed to encrypt search indexes as they’re built. Automatically generated DEK iterations are identifiable by the Automated Process value listed in the Created By column. These iterations of your DEK share a version number.

    When you generate another DEK, all DEKs of the previous version are archived.

    Key Inventory and Management Setup page, showing Search Index keys