I’ve previously evaluated MariaDB’s 10.1 implementation of data encryption at rest (https://www.pythian.com/blog/data-encryption-rest), and recently did the same for Oracle’s implementation (https://dev.mysql.com/doc/refman/5.7/en/innodb-tablespace-encryption.html) in their MySQL 5.7.
First, here’s a walkthrough of enabling encryption for MySQL 5.7:
1. Install keyring plugin.
1a. Add the following to the [mysqld] section of /etc/my.cnf:
View the code on Gist.
1b. Restart the server:
... service mysqld restart
1c. Verify:
... …[Read more]