How to create an encrypted field in Dynamics 365 Finance and Operations

Getting started with encrypted field in Dynamics 365 for Finance and Operations

Now let’s see how encryption works under the hood and learn how to implement it in your tables and forms in Dynamics 365 Finance and Operations.

Encrypted fields in Microsoft Dynamics 365 Finance and Operations

Encrypted fields are not stored as plain text in the database. Instead, their values are encrypted using a specific key, and the encrypted data is saved. It’s important to note that each environment has its own unique encryption key. As a result, when data from one environment (e.g., Production) is refreshed into another (e.g., Sandbox or Development), the values of encrypted fields cannot be decrypted because the keys are different.

Steps for creating an encrypted field

To add a new field to a form in Dynamics 365 Finance and Operations, the first step is to create the field in the corresponding table. In this example, we’ll add an encrypted field to the RetailParameters table and display it on its form.

Step 1: Extend the table

1. 1. Create a table extension: In your model, extend the RetailParameters table.

2. Add the encrypted field:

• • Go to the EDTs in the AOT.

• • Locate the EncryptedField EDT.

• • Drag and drop the EncryptedField EDT into your RetailParameters table extension.

  3. Rename the field: Assign a meaningful name to your new field. For example, we’ll name it EncryptedField as given in the following screenshot.

Step 2: Add a code extension

To handle encrypted fields effectively, you need methods to encrypt and decrypt the field content. These methods will allow the field to function properly on forms, where the encrypted data will be presented as editable text. Create a code extension for RetailParameters: Extend the RetailParameters table in your model. [ExtensionOf(tableStr(RetailParameters))] final class RetailParameter_Extension { public edit Name EncryptedNameEdit(boolean _set, Name _value) { return Global::editEncryptedField(this, _value, fieldNum(RetailParameters, EncryptedField), _set); } } When working with encrypted fields, a regular edit method is used, but it leverages existing system methods to handle encryption and decryption securely. Specifically, the Global::editEncryptedField method is called, which internally invokes the Appl class's kernel methods, EncryptForPurpose and DecryptForPurpose, to handle the actual encryption and decryption operations.