A customer prefers to generate an encryption key for Salesforce to use. They prefer to generate it manually, once a year.
What key management capability should the admin advise them to use?
Export the tenant secret
Implement a custom Apex key generation class
Bring your own key, plus opt-out of key derivation
Upload your own tenant secret
Submit