Migrating Key Broker for Salesforce to CipherTrust Data Security Platform as a Service

This document describes migrating from a Key Broker for Salesforce to CipherTrust Data Security Platform as a Service (CDSPaaS) using the CipherTrust Cloud Key Manager (CCKM).

For more information about managing Salesforce resources in CDSPaaS see CDSPaaS - Salesforce Resources.

To migrate from a Key Broker for Salesforce to CipherTrust Data Security Platform as a Service

1. Connect CCKM to your Salesforce Account as described in the CDSPaaS - Salesforce Resources Prerequisites documentation.

2. Add any existing Salesforce Organizations to CCKM as described in Managing Salesforce Organizations.

3. Add your Salesforce Tenant Secrets to CCKM as described in Managing Salesforce Tenant Secrets.

   Tip

   We recommend rotating all encryption keys after importing the keys to CCKM. For more information about rotating Salesforce keys in CCKM see Scheduling Operations and Refreshing Salesforce Keys.

4. Validate that all Salesforce keys are stored in CDSPaaS CCKM as described in Viewing Salesforce Keys.

5. Delete the Key Broker for Salesforce so that it can no longer be used to modify objects in Salesforce. See Managing a Key Broker for Salesforce Service for more information.