Using Creative Cloud or Document Cloud for enterprise, end users can store files safely and securely. Users can also share files and collaborate with others. Files are accessible to users via the Creative Cloud website, Creative Cloud desktop app, and Creative Cloud mobile app. Storage is available with Creative Cloud or Document Cloud for enterprise only if it is a part of your organization's agreement with Adobe.

While all data on Creative Cloud and Document Cloud is encrypted, for extra layers of control and security, you can choose to have Adobe generate a dedicated encryption key for some or all the domains in your organization. Contents are then encrypted using the dedicated encryption key. If necessary, you can revoke the encryption key from the Admin Console.

Dedicated encryption keys are available only with the Creative Cloud or Document Cloud for enterprise shared services plans that include storage and services.

Before enabling dedicated encryption keys for your domains, see Adobe Creative Cloud for enterprise security overview or Adobe Document Cloud security.

To upgrade your plan to include storage and services, contact your Adobe Account Manager.

Manage encryption keys for domains

You can use dedicated encryption keys on a domain-by-domain basis, for the domains in your organization.

Make note of the following when working with encryption keys:

  • Ensure that you have claimed and activated your domains to enable dedicated encryption keys for them.
  • Once you enable a dedicated encryption key, you cannot revert to using standard encryption keys.
  • You can revoke a dedicated encryption key, if necessary. If you revoke the encryption key, your users can no longer access content that has been encrypted using the encryption key. For example, if you suspect a data breach, you can immediately revoke the dedicated encryption key from the Admin Console.
  • To restore access to content whose encryption key has been revoked, re-enable the encryption key from the Admin Console.

The following data is not encrypted using the dedicated encryption key and is therefore not affected if the key is revoked:

  • Data of members of an organization with an Adobe ID account (unless the user is collaborating on content when Enterprise ID or Federated ID users initiated the collaboration)
  • Metadata (file name, collection name, font use, MIME type, and other attributes necessary to browse a collection)
  • Videos published by Premiere Clip and Adobe Spark Video
  • Lightroom photos
  • Colors that are stored by the Adobe Color service
  • All data that is managed by the Behance and Typekit services
  • All data managed by the Marketing Cloud
  • Saved application preferences
  • Information about the account holder such as name, email, licenses, and other basic user account information

Enable dedicated encryption keys

To use a dedicated encryption key for your domain, follow the below process:

  1. Sign in to the Admin Console, and navigate to Settings > Identity.

    The Identity page lists the domains in your organization.

  2. Click the domain name to enable a dedicated encryption key.
    The details of the selected domain are displayed.

    Note:

    You can enable encryption keys only for active domains.

  3. Click Enable Encryption Key.

    The Enable Dedicated Encryption Key dialog box appears.

    Enable Dedicated Encryption Key
  4. Click Enable to confirm.

    When the dedicated encryption key is successfully enabled, a message indicating the success is displayed. If you have existing assets, asset encryption begins and the encryption progress is displayed. Users can continue working, uninterrupted, while the encryption process in progress.

Also, a message is displayed if, for any reason, the enabling of the encryption key fails or the key is enabled but asset encryption has failed.

Revoke dedicated encryption keys

If you revoke a dedicated encryption key, data encrypted with the encryption key is no longer accessible to users.

Note:

Users may still be able to browse files and folders and view attributes.

To revoke the dedicated encryption key for a domain, do the following:

  1. Sign in to the Admin Console, and navigate to Settings > Identity.

    The Identity page lists the domains in your organization.

  2. Click the domain name to revoke the encryption key.
    The details of the selected domain are displayed.

  3. Click Disable Encryption Key.

    The Disable Dedicated Encryption Key dialog box appears.

    Disable Dedicated Encryption Key
  4. Click Disable to confirm.

    When the dedicated encryption key has been successfully revoked, a message indicating the success displays. 

This work is licensed under a Creative Commons Attribution-Noncommercial-Share Alike 3.0 Unported License  Twitter™ and Facebook posts are not covered under the terms of Creative Commons.

Legal Notices   |   Online Privacy Policy