You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: docs/encrypt-logs.md
+2-2Lines changed: 2 additions & 2 deletions
Original file line number
Diff line number
Diff line change
@@ -12,7 +12,7 @@ Changing the encryption does not change existing redo log pages. Setting the opt
12
12
13
13
The metadata for the redo log encryption includes the tablespace encryption key and is stored the in redo log file header. Removing the encryption metadata disables the redo log encryption.
14
14
15
-
Without the keyring plugin or component or the encryption key, a normal restart is not possible. InnoDB scans the redo log pages during startup. If the encryption options are not available, InnoDB cannot scan these pages. A forced startup without the redo logs is possible.
15
+
Without the keyring component or the encryption key, a normal restart is not possible. InnoDB scans the redo log pages during startup. If the encryption options are not available, InnoDB cannot scan these pages. A forced startup without the redo logs is possible.
16
16
17
17
## Option
18
18
@@ -44,7 +44,7 @@ Changing the encryption does not change existing undo log pages. Setting the opt
44
44
45
45
The metadata for the redo log encryption includes the tablespace encryption key and is stored the in undo log file header.
46
46
47
-
The server requires the keyring plugin or keyring component used to encrypt log data until that data is truncated, even if the current option setting is `OFF`. When the undo tablespace is truncated, the encryption header is removed.
47
+
The server requires the keyring component used to encrypt log data until that data is truncated, even if the current option setting is `OFF`. When the undo tablespace is truncated, the encryption header is removed.
Copy file name to clipboardExpand all lines: docs/keyring-components-plugins-overview.md
+5-5Lines changed: 5 additions & 5 deletions
Original file line number
Diff line number
Diff line change
@@ -1,14 +1,14 @@
1
-
# Keyring components and plugins overview
1
+
# Keyring components overview
2
2
3
-
Percona Server supports a keyring that enables internal server components and plugins to store sensitive information securely for later retrieval.
3
+
Percona Server supports a keyring that enables internal server components to store sensitive information securely for later retrieval.
4
4
5
5
!!! warning
6
6
7
-
Enable only one keyring plugin or one keyring component at a time for each server instance. Enabling multiple keyring plugins or keyring components or mixing keyring plugins or keyring components is not supported and may result in data loss.
7
+
Enable only one keyring component at a time for each server instance. Enabling multiple keyring components is not supported and may result in data loss.
8
8
9
-
Percona Server supports the following keyring components and plugins:
9
+
Percona Server supports the following keyring components:
10
10
11
-
[Use the keyring file component or plugin :material-arrow-right:](use-keyring-file.md){.md-button}
11
+
[Use the keyring file component :material-arrow-right:](use-keyring-file.md){.md-button}
12
12
13
13
[Use the keyring vault component :material-arrow-right:](use-keyring-vault-component.md){.md-button}
# Use the keyring file component or keyring file plugin
1
+
# Use the keyring file component
2
2
3
-
## Use the keyring file plugin
4
-
5
-
Percona Server for MySQL supports the keyring_file plugin that stores the keyring data locally.
6
-
7
-
!!! warning
8
-
9
-
The `keyring_file` plugin should not be used for regulatory compliance.
10
-
11
-
To install the plugin, follow the [installing and uninstalling plugins] instructions.
12
-
13
-
### Load the keyring plugin
14
-
15
-
You should load the plugin at server startup with the `--early-plugin-load` option to enable keyrings.
16
-
17
-
We recommend that you load the plugin in the configuration file to facilitate recovery for encrypted tables. Also, the redo log encryption and the undo log encryption cannot be used without `--early-plugin-load`. The normal plugin load happens too late at startup.
18
-
19
-
To load the keyring_file plugin, run the following command:
If a server starts with different plugins loaded early, the `--early-plugin-load` option should contain the plugin names in a double-quoted list with each plugin name separated by a semicolon. The use of double quotes ensures the semicolons do not create issues when the list is executed in a script.
3
+
The `keyring_file` component is part of the component-based MySQL infrastructure which extends the server capabilities.
26
4
27
-
## Use the keyring file component
5
+
!!! important
28
6
29
-
The `keyring_file` component is part of the component-based MySQL infrastructure which extends the server capabilities.
7
+
Percona Server for MySQL {{vers}} does not support the `keyring_file` plugin.
30
8
31
9
See the MySQL documentation on the [component installation] and on the [keyring_file component usage] for more information.
32
10
@@ -51,5 +29,4 @@ An example of `/lib/plugin/component_keyring_file.cnf`:
0 commit comments