检测到您已登录华为云国际站账号,为了您更好的体验,建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
Table 1 PG_TDE_INFO columns Name Type Description is_encrypt Boolean Specifies whether to encrypt a database. f: The database is not encrypted. t: The database is encrypted. g_tde_algo text Encryption algorithm. SM4-CTR-128 AES-CTR-128 remain text Reserved column.
Disk encryption will not encrypt backup data stored in OBS. To enable backup data encryption, submit a service ticket. If disk encryption or backup data encryption is enabled, keep the key properly.
Can I Encrypt the Disk After Purchasing a GaussDB Instance? Will Backups Be Encrypted After Disk Encryption Is Enabled for My GaussDB Instance? Will Different GaussDB Instances Share CPU and Memory Resources? What Is the Relationship Between GaussDB and PostgreSQL?
Can I Encrypt the Disk After Purchasing a GaussDB Instance? You can enable disk encryption when purchasing a GaussDB instance. For details, see Buying a DB Instance. After an instance is created, the disk encryption status and the key cannot be changed.
Connecting to a Database in SSL Mode When establishing connections to the GaussDB server using JDBC, you can enable SSL connections to encrypt client and server communications for security of sensitive data transmission on the Internet.
Connecting to a Database in SSL Mode When establishing connections to the GaussDB server using JDBC, you can enable SSL connections to encrypt client and server communications for security of sensitive data transmission on the Internet.
Connecting to a Database in SSL Mode When establishing connections to the GaussDB server using JDBC, you can enable SSL connections to encrypt client and server communications for security of sensitive data transmission on the Internet.
Connecting to a Database in SSL Mode When establishing connections to the GaussDB server using JDBC, you can enable SSL connections to encrypt client and server communications for security of sensitive data transmission on the Internet.
Connecting to a Database in SSL Mode When establishing connections to the GaussDB server using JDBC, you can enable SSL connections to encrypt client and server communications for security of sensitive data transmission on the Internet.
If you specify the SM4 algorithm to encrypt CEKs when creating a CMK, you must specify the SM3 and SM4 algorithms (SM4_SM3) to encrypt data when creating CEKs.
If you specify the SM4 algorithm to encrypt CEKs when creating a CMK, you must specify the SM3 and SM4 algorithms (SM4_SM3) to encrypt data when creating CEKs.
If you specify the SM4 algorithm to encrypt CEKs when creating a CMK, you must specify the SM3 and SM4 algorithms (SM4_SM3) to encrypt data when creating CEKs.
If you specify the SM4 algorithm to encrypt CEKs when creating a CMK, you must specify the SM3 and SM4 algorithms (SM4_SM3) to encrypt data when creating CEKs.
Connecting to a Database in SM-based TLS Mode When connecting to the GaussDB server through JDBC, you can enable SM-based TLS to encrypt the communication between the client and server. This mode provides a highly secure channel for sensitive data transmission on the Internet.
Connecting to a Database in SM-based TLS Mode When connecting to a GaussDB server through JDBC, you can enable SM-based TLS to encrypt communication between a client and a server. This mode provides a highly secure channel for sensitive data transmission on the Internet.
It must comply with the naming convention. client_master_key_name Specifies the CMK used to encrypt the CEK. The value is the CMK name, which is created using the CREATE CLIENT MASTER KEY syntax. The encrypted CMKs are different from those specified before RR encryption.
Connecting to the Database (Using SSL) When establishing connections to the GaussDB server using JDBC, you can enable SSL connections to encrypt client and server communications for security of sensitive data transmission on the Internet.
Introduction to Sensitive Operation Protection SSL You can use SSL to encrypt the connection between GaussDB and the client. It ensures the privacy, authentication, and integrity of Internet communications.
The option name must be unique, and the name and value are also validated with the foreign data wrapper library of the server. encrypt Specifies whether to encrypt data. This parameter can be set only when type is set to OBS. The default value is off.
The option name must be unique, and the name and value are also validated with the foreign data wrapper library of the server. encrypt Specifies whether to encrypt data. This parameter can be set only when type is set to OBS. The default value is off.