Destroying Tenant Secret Key
To enable encryption to the selected fields, you must destroy the previous tenant secret key and generate new tenant secret key for the encryption.
Perform the following steps to destroy the previous tenant secret keys effectively from the key inventory.
1. Log into Asset 360 Admin.
2. Navigate to Salesforce Setup > Security > Platform Encryption > Key Management. The Key Inventory and Management screen is displayed.
3. Click Export for the latest version of the tenant secret key. A confirmation pop-up is displayed.
4. Click OK. The key is exported to your local machine in a text format.
* 
It is recommended to save the local key for future when you need to remove encryption from the fields.
5. Click Generate Tenant Secret for a new secret key.
* 
You can generate a tenant secret key every four hours only.
6. Click Destroy for the previous tenant secret key.
The previous tenant secret key is destroyed from the key inventory and the selected fields are encrypted. The encrypted field values are masked in the run time.
Was this helpful?