PG-1241 Documented KMIP integration and setup #368
Conversation
Performance test results:
|
nastena1606
changed the title
modified: documentation/docs/_images/tde-flow.png
modified: documentation/docs/setup.md
modified: documentation/docs/tde.md
nastena1606
force-pushed
the
Doc-KMIP-support
branch
from
763088c to
aaf93e3
Compare
nastena1606
force-pushed
the
Doc-KMIP-support
branch
from
8211309 to
4bcae30
Compare
documentation/docs/tde.md
Outdated
| @@ -6,7 +6,7 @@ Transparent Data Encryption is a technology to protect data at rest. The encrypt | |||
|
|
|||
| To encrypt the data, two types of keys are used: | |||
|
|
|||
| * Database keys to encrypt user data. These are stored internally, near the data that they encrypt. | |||
| * Table encryption keys (TEK) to encrypt user data. These keys are stored internally, near the data that they encrypt. | |||
There was a problem hiding this comment.
Do we need this acronym? We never used that before (TEK).
There was a problem hiding this comment.
It's been used in Jan's talks. But TBH I like database keys more)
Changing back
There was a problem hiding this comment.
Both are incorrect. we are simply calling them internal keys in the code, because that's what they are.
These can encrypt in theory any database file - tables, indexes, WAl, who knows what in the future...
documentation/docs/setup.md
Outdated
| @@ -58,12 +58,14 @@ Load the `pg_tde` at the start time. The extension requires additional shared me | |||
|
|
|||
| * `provider-name` is the name of the provider. You can specify any name, it's for you to identify the provider. | |||
| * `kmip-IP` is the IP address of a domain name of the KMIP server | |||
| * The port to communicate with the KMIP server. The default port is `5696`. | |||
| * `5696` is the port to communicate with the KMIP server. | |||
There was a problem hiding this comment.
port is the port to communicate with the KMIP server? It can be anything, depending on the KMIP server, 5696 is just the official port mot servers use...
There was a problem hiding this comment.
But it is hardcoded now? So not a default one, but required one, correct? Why does the current wording not suit?
There was a problem hiding this comment.
No, it is a parameter the user has to specify.
Description
Documented KMIP integration and setup
modified: documentation/docs/_images/tde-flow.png
modified: documentation/docs/setup.md
modified: documentation/docs/tde.md