Skip to content
Release: Australia · Updated: 2026-03-12 · Official documentation · View source

Module keys for Field Encryption

The Module Keys tab shows you summary level information about your Field Encryption Data Encryption Key(s). You can view the Key alias, Key type, Algorithm, Key lifecycle state, and Key version.

Accessing module key information

Access your module keys by from records in the Cryptographic Module [sys_kmf_crypto_module] table. From a Cryptographic Module record, you can select the Key alias field in records in the Module Keys related list.

The information available depends on which version of Field Encryption you have active on your instance.

  • Field Encryption Starter

    Using Field Encryption Starter, you can view key usage audit data.

  • Field Encryption Enterprise

    You to perform manual key operations such as Renew, Revoke, Rotate, or Suspend, in addition to viewing key usage audit data.

Module key information

Information on your module keys is displayed on the module key record in the fields listed here. These fields are read-only and used for information purposes only.

FieldDescription
Generation dateWhen the Module key was generated
Activation dateWhen the Module key was activated.
Last renewal dateWhen the Module key was last renewed.
Last rotated dateWhen the Module Key was last rotated.
Deactivation dateWhen the Module Key was deactivated.
Destruction dateWhen the Module Key was destroyed.
Future activation dateWhen the Module Key will be activated.
Future renewal dateWhen the Module Key will be renewed.
Future rotation dateWhen the Module Key will be rotated.
Future destruction dateWhen the Module Key will be destroyed.
Key lifecycle stateCurrent the state of the Module Key.

Parent Topic:Configuring Field Encryption