MariaDB Encryption at Rest - Existing Database Tables Not Encrypted

Michael Legg

• April 09, 2020 21:41

I just upgraded our db server to MariaDB 10.4 with the express purpose of utilizing MariaDB's encryption at rest capabilities. I've configured the server for encryption and now if I create a new table it appears to be encrypted. (It appears in the "information_schema.innodb_tablespaces_encryption" table.) But the existing database tables do not appear in "information_schema.innodb_tablespaces_encryption". I can't find anything on the web about how to encrypt existing tables, all the resources I can find seem to imply that it's supposed to happen automatically. Has anyone here had any experience enabling encryption on an existing MariaDB database and getting the existing tables to encrypt?

• 

  Michael Legg

  • April 10, 2020 02:51

  Found the answer ... When innodb_encryption_threads is set to a non-zero value, so that InnoDB can perform any necessary encryption operations in the background. See innodb_encryption_rotate_key_age must also be set to a non-zero value for the initial encryption operations to happen in the background.

  0
• 

  cPanelLauren

  • April 10, 2020 21:43

  Glad to see you were able to find the answer! And thanks for posting what you found out, this is helpful information!

  0

Please sign in to leave a comment.