User Experience CLE / KMF Landing Page - Support and Troubleshooting

User Experience CLE / KMF Landing Page .ns-kb-css-body-editor-container { p { font-size: 12pt; font-family: Lato; color: var(--now-color--text-primary, #000000); } span { font-size: 12pt; font-family: Lato; color: var(--now-color--text-primary, #000000); } h2 { font-size: 24pt; font-family: Lato; color: var(--now-color--text-primary, black); } h3 { font-size: 18pt; font-family: Lato; color: var(--now-color--text-primary, black); } h4 { font-size: 14pt; font-family: Lato; color: var(--now-color--text-primary, black); } a { font-size: 12pt; font-family: Lato; color: var(--now-color--link-primary, #00718F); } a:hover { font-size: 12pt; color: var(--now-color--link-primary, #024F69); } a:target { font-size: 12pt; color: var(--now-color--link-primary, #032D42); } a:visited { font-size: 12pt; color: var(--now-color--link-primary, #00718f); } ul { font-size: 12pt; font-family: Lato; } li { font-size: 12pt; font-family: Lato; } img { display: ; max-width: ; width: ; height: ; } } Documentation

Since the documentation keeps on changing together with the product, it will be better to start from the main document and read its different chapters: Column Level Encryption Enterprise (also good for non-enterprise)

To configure encryption, please follow these actions:

Create a cryptographic module that extends the column_level_encryption one Generate a key for that cryptographic module Add Access Policies to the module Create an Encrypted Field Configuration for the required field / attachments

KB Articles

KB0965129

Key Management Framework (KMF) Troubleshooting Guide

General troubleshooting of the KMF, Less UX related. Contains the read-only script that reads the system properties, verifying that they are set

KB0996832

Key Management Framework (KMF) Landing Page

Landing Page created by Platform Technologies team, good for finding other resources

KB1117990

Column Level Encryption Migration Jobs – Upgrade to San Diego Issues

Good check list to follow for verifying that the CLE / KMF are installed properly

KB0814739

How to Turn on and Set up CLE-KMF - For Support Teams

Very practical guide for creating and running the three CLE security jobs. Example: CHG19586700

KB1120262

Decrypting CLE Starter/Enterprise Encrypted Attachments

How to decrypt attachments after they got unwillingly encrypted as a result of SD upgrade

Full Report of KB articles which are attached to User Experience Cases

UX Related Problems

PRB1565957

The password2 submodule 'com_glide_certificates_glideencrypter' should have proper module access policies

PRB1573372

[San Diego] [KMF] Key Management Framework (KMF) is not configured correctly which impacts performance

PRB1570463

The default module access policy isn't functioning

PRB1574839

The CLE migration job summary should reflect the correct job status and only run when KMF is running successfully on the instance

PRB1515146

KMF role distribution depends on users having the security_admin role, but some users do not have the High Security Settings plugin installed

Full Report of Problem which are attached to User Experience Cases

NowLearnings Courses

Column Level Encryption Enterprise: Initial Setup

This course provides the information needed to set up, configure, and utilize CLE Enterprise to encrypt and decrypt sensitive data.

Column Level Encryption Enterprise: Limitations and Considerations

This course reviews the limitations and considerations of the CLE Enterprise functionality and provides links to additional resources for further learning.

Column Level Encryption Enterprise: Administration

This course covers CLE Enterprise maintenance topics including key lifecycle management, audit support, and using the Resource Exchange feature to transfer keys across instances.

Key Management Framework: Introduction

This course provides an introduction to Key Management Framework (KMF). You will explore the different KMF roles used in encryption and understand the KMF lifecycle states and actions. You will also be participating in an intriguing game, tasked with solving a puzzle using an ancient encryption technique.