Generate an Event Bus Tenant Secret
To enable encryption of change events, first generate an event bus tenant secret.
Prerequisites:
| User Permissions Needed | |
|---|---|
| To manage tenant secrets: | Manage Encryption Keys |
Only authorized users can generate tenant secrets from the Platform Encryption page. Ask your Salesforce admin to assign the Manage Encryption Keys permission to you.
Before generating an Event Bus tenant secret, you must have an active Fields and Files (Probabilistic) or Fields (Deterministic) tenant secret. For instructions, see Generate a Tenant Secret with Salesforce in Salesforce Help.
Steps:
-
From Setup, in the Quick Find box, enter
Platform Encryption, and then select Key Management. -
In the Key Management Table, select Event Bus.
-
Click Generate Tenant Secret or, to upload a customer-supplied tenant secret, click Bring Your Own Key.

- You can generate or rotate an event bus tenant secret once every 7 days.
- You can also generate a tenant secret through SOAP API or REST API using the TenantSecret object and the Type field value of EventBus. For more information, see TenantSecret in the Object Reference for Salesforce and Lightning Platform.
See Also