Skip to main content

Salesforce Bring Your Own Key (BYOK)

Salesforce is a leading cloud-based customer relationship management (CRM) platform that offers a comprehensive suite of applications for sales, service, marketing, and more. It enables businesses to manage customer interactions, data, and analytics in a unified environment, enhancing operational efficiency and customer engagement. Salesforce provides robust solutions for various industries, leveraging cloud computing, artificial intelligence, and data analytics to drive business growth and innovation.

Bring Your Own Key (BYOK) is a security procedure that allows organizations to manage their encryption keys independently, enhancing control over data protection. Salesforce Shield Platform Encryption BYOK enables customers to use their own encryption keys to safeguard sensitive data stored in Salesforce. This procedure ensures that organizations maintain compliance with regulatory requirements and internal security policies, offering an additional layer of data security. By allowing customers to import, rotate, and revoke their encryption keys, Salesforce Shield Platform Encryption with BYOK provides a flexible and secure approach to data encryption, meeting the stringent needs of businesses dealing with sensitive information.

Securosys CloudHSM is a Hardware Security Module (HSM) available as cloud service, without having to worry about time consuming things like evaluation, setup, operation, redundancy, and maintenance of the HSM infrastructure, and is scalable according to your needs. The redundant cluster architecture, providing different redundant regions up to redundant worldwide cluster, integrates perfectly to bring your own key to Salesforce Shield Platform Encryption.

This document describes how to easily integrate Securosys CloudHSM (HSM as a Service) or on-premises Primus HSM cluster with Salesforce BYOK, enabling the advantages of secure key generation and storage on the HSM, and to comply with regulatory requirements.

Target Audience​

This document is intended for Securosys Primus HSM or CloudHSM users and IT professionals. The Salesforce BYOK Procedure requires that you are already familiar with Salesforce.

For on-premises HSM deployed operation administrative skills are required for Securosys Primus HSMs.

Support Contact​

If you encounter a problem while installing/configuring the provider or integration, make sure that you have read the referenced documentation. If you cannot resolve the issue, please contact Securosys Customer Support. For specific requests regarding Securosys Salesforce BYOK, the Securosys Support Portal is reachable under https://support.securosys.com (account required).

What's Next​

For a smooth start with Salesforce Bring Your Own Key procedure:

  • Consult the Quickstart page for a comprehensive task listing.
  • For detailed instructions, read and follow the Installation guide.
  • Initiate the usage by reading and following the Tutorial section.
Ready to try ?

Enjoy a 3-month free trial of CloudHSM Sandbox, compatible with Salesforce BYOK.