Validate Data Encryption Features

Description

In order to validate the current state of data encryption features a complete validation is requested. 

The current state is believed to be as documented below.  Please verify on latest PXB 8.0.x supports these features on both PS 8.0 and PXC 8.0 (PXB 8.0) and PXC 5.7.x (PXB 2.4.x)

Encryption Features

PS 8.0.20

.0.19-10-debug

.0.13

Storing Keyring in a File

Y

Y

Backup Successful

Storing Keyring in Hashicorp Vault

Y

Y

Backup Successful

Encrypt InnoDB Data

Y

Y

Backup Successful

Encrypt Built-In InnoDB Tablespaces (System, Undo, Temp)

Y

Y

Backup Successful

Encrypt InnoDB Logs

Y

Y

Backup Successful

Encrypt Binary Logs

Y

Y

Backup Successful

Encrypt Temporary Files

Y

Y

Backup Successful

Key Rotation with Scrubbing

N

N

 Not supported

Enforce Encryption

Y

Y

Backup Successful

Also verified .7 backup using .4 and the backup was successful. Concurrent Load was generated using sysbench scripts. lua scripts were modified to add support for encrypted tables.
Steps to take backup for both .0 and .7 are documented and uploaded with this Jira ticket

Environment

In order to validate the current state of data encryption features a complete validation is requested. 

The current state is believed to be as documented below.  Please verify on latest PXB 8.0.x supports these features on both PS 8.0 and PXC 8.0 (PXB 8.0) and PXC 5.7.x (PXB 2.4.x)

Encryption Features

PS 8.0.13

Storing Keyring in a File

Y

Storing Keyring in Hashicorp Vault

Y

Encrypt InnoDB Data

Y

Encrypt Built-In InnoDB Tablespaces (System, Undo, Temp)

Y

Encrypt InnoDB Logs

Y

Encrypt Binary Logs

Y

Encrypt Temporary Files

Y

Key Rotation with Scrubbing

N

Enforce Encryption

Y

 

Attachments

1

Smart Checklist

Activity

Show:
Done

Details

Assignee

Reporter

Time tracking

3d 6h 10m logged

Components

Affects versions

Priority

Smart Checklist

Created May 6, 2020 at 6:17 PM
Updated March 6, 2024 at 6:59 PM
Resolved June 25, 2020 at 11:35 AM