MariaDB Encryption at Rest - Existing Database Tables Not Encrypted

[Michael Legg]

I just upgraded our db server to MariaDB 10.4 with the express purpose of utilizing MariaDB's encryption at rest capabilities.

I've configured the server for encryption and now if I create a new table it appears to be encrypted. (It appears in the "information_schema.innodb_tablespaces_encryption" table.)

But the existing database tables do not appear in "information_schema.innodb_tablespaces_encryption".

I can't find anything on the web about how to encrypt existing tables, all the resources I can find seem to imply that it's supposed to happen automatically.

Has anyone here had any experience enabling encryption on an existing MariaDB database and getting the existing tables to encrypt?

 

[Michael Legg]

Found the answer ...
When innodb_encrypt_tables is set to ON or FORCE, then you must ensure that innodb_encryption_threads is set to a non-zero value, so that InnoDB can perform any necessary encryption operations in the background. See background operations for more information about that. innodb_encryption_rotate_key_age must also be set to a non-zero value for the initial encryption operations to happen in the background.

 

[cPanelLauren]

Glad to see you were able to find the answer! And thanks for posting what you found out, this is helpful information!