skills.rest
bhanu91221
bhanu91221COMMUNITY
Explore all skills by this author →
WebsiteGitHub

shield-encryption

Automate Salesforce Shield Platform Encryption setup, key management, and tenant secret rotation.

2|Updated Mar 18, 2026
Search Tags:#encryption#data-security#key-management#shield#platform-encryption#apex-crypto#tenant-secret
One-click install
npx skills add https://github.com/bhanu91221/claude-sfdx-iq --skill shield-encryption
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: shield-encryption
Source: https://github.com/bhanu91221/claude-sfdx-iq/tree/main/skills/shield-encryption
Command: npx skills add https://github.com/bhanu91221/claude-sfdx-iq --skill shield-encryption

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Shield Platform Encryption configuration and key management can be complex and error-prone without structured guidance for secure data protection and compliance.

Core Features & Use Cases

  • Key management and tenant secret workflows: configure, rotate, and audit tenant secrets and keys used to encrypt data.
  • Encryption scope and limitations: explain which data types are encryptable, deterministic vs probabilistic encryption, and query implications.
  • Apex Crypto usage: provide samples and guidance for using Crypto class operations in Apex for custom encryption needs.

Quick Start

Configure your Salesforce org for Shield Platform Encryption and begin using Apex Crypto helper methods to encrypt and decrypt data.

Frequently Asked Questions about shield-encryption

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I rotate tenant secrets in Salesforce Shield Platform Encryption?▼

To rotate tenant secrets in Shield Platform Encryption, configure new tenant secrets and archive previous ones to maintain data at rest security. This Skill automates tenant secret lifecycle management, rotation procedures, and compliance documentation for your Salesforce org.

What is the difference between deterministic and probabilistic encryption in Salesforce Shield?▼

Deterministic encryption in Shield produces identical ciphertext for identical values, enabling filtering and custom indexing on encrypted fields. Probabilistic encryption generates unique ciphertext each time, providing stronger security but preventing query operations on encrypted data.

Can I use the Apex Crypto class for custom encryption alongside Shield Platform Encryption?▼

Yes, you can use the Apex Crypto class alongside Shield Platform Encryption for custom encryption needs. This Skill provides Apex Crypto class samples and guidance for implementing custom encryption workflows beyond standard Shield metadata configurations.

How do I set up Bring Your Own Key (BYOK) for Salesforce Shield encryption?▼

Configure BYOK for Salesforce Shield by integrating your external key management system with Shield Platform Encryption. This Skill guides BYOK architecture setup, tenant secret lifecycle management, and external key rotation procedures for compliance.

What are the limitations of Shield Platform Encryption for encrypted fields?▼

Shield Platform Encryption limits query operations on probabilistically encrypted fields and restricts which data types can be encrypted. This Skill documents encryption scope, deterministic vs probabilistic limitations, and query implications to help you navigate these boundaries.

Related Skills

Explore More Legal & Compliance Skills→
salesforce-miscsalesforce-misc
4

intelligent-context

Create and index searchable intelligent context for Salesforce orgs via REST API.

Official
Advanced
williamzujkowskiwilliamzujkowski
17

secrets-management

Manage secrets across development, CI/CD, and production workflows.

Community
Advanced
alexmaruccialexmarucci

audit-logs

Query and manage Datadog Audit Trail events through the Datadog API.

Community
Advanced
latestaiagentslatestaiagents
5

sensitive-data-protection

Implement encryption, data masking, and secure logging for sensitive data.

Official
Advanced