Configure Field Encryption for your Edge Encrypted fields
Before migrating your existing edge encrypted fields to Field Encryption, you must configure field encryption for these fields.
Avant de commencer
Role required: admin
This process assumes you have existing edge encrypted fields that you want to migrate to Field Encryption.
Procédure
- Navigate to All > Key Management > Cryptographic Modules > All > .
- In the Cryptographic Modules list, select New.
-
In the form, fill in these fields.
Field Value Name Select descriptive name Crypto spec template Default template Crypto module lifecycle state Published Parent crypto module column_level_encryption - Right-click the form header and select Save.
- In the Crypto Specifications related list, open the record on the list.
-
In the Crypto Specification record, select Next three times to complete the algorithm definition, lifecycle definition, and key origin sections.
You don’t need to modify any fields in these sections.
- In the Generate Key field, select the Generate Key link to generate a key.
- Navigate to All > System Security > Field Encryption > Encrypted Field Configuration.
- In the encrypted field configuration list, select New.
-
In the form, fill in these fields.
Field Value Type Select Column or Attachment, depending on what you want to encrypt. Crypto module Select the cryptographic module that you created in earlier steps. Table Select the table containing the data that you want encrypted. Method Select Single Module Column Select the column (field) on the table that you want to be encrypted. Remarque :The data to encrypt is determined by the Table and Column fields. These fields should be the table and column (field) where you’re currently using Edge Encryption. - Select Submit.
- Navigate to All > Key Management > Module Access Policies > All.
- Select New.
-
In the form, fill in these fields.
Field Value Policy name Select descriptive name Crypto module Select the cryptographic module that you created in earlier steps. Type Select Role Target role Select a role to be used. This role must be able to encrypt and decrypt data in the column. Result Select the desired action. - Select Submit.
-
To verify your configuration, navigate to the table you want encrypted with Field Encryption, and open a record.
For example, to access the User [sys_user] table, enter sys_user.list into the navigation filter.
The field you have selected for encryption in the previous steps now has a lock icon next to the field label.
Résultats
You edge encrypted field is ready to be migrated to field encryption. To configure more fields, repeat the preceding steps for each of those fields.