检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
Encryption and Decryption Functions AES_DECRYPT AES_DECRYPT(crypt_str, key_str[, init_vector][, kdf_name][, salt][, info | iterations]) Description: Based on AES algorithm, uses the decryption password key_str, initialization vector init_vector, and KDF-related options (kdf_name,
DROP COLUMN ENCRYPTION KEY Description Drops a CEK. Precautions Only the CEK owner or a user who has been granted the DROP permission can run this command. System administrators have this permission by default. Syntax 1 DROP COLUMN ENCRYPTION KEY [ IF EXISTS ] client_column_key_name
CREATE COLUMN ENCRYPTION KEY Description Creates a CEK that can be used to encrypt a specified column in a table. Precautions This syntax is specific to a fully-encrypted database. When using gsql to connect to a database server, you need to use the -C parameter to enable the fully-encrypted
CREATE COLUMN ENCRYPTION KEY Description Creates a CEK that can be used to encrypt a specified column in a table. Precautions This syntax is specific to a fully-encrypted database. When using gsql to connect to a database server, you need to use the -C parameter to enable the fully-encrypted
DROP COLUMN ENCRYPTION KEY Description Drops a CEK. Precautions Only the CEK owner or a user who has been granted the DROP permission can run this command. System administrators have this permission by default. Syntax 1 DROP COLUMN ENCRYPTION KEY [ IF EXISTS ] client_column_key_name
DROP COLUMN ENCRYPTION KEY Description Deletes a column encryption key (CEK). Precautions Only the CEK owner or a user who has been granted the DROP permission can run this command. By default, the system administrator has this permission. Syntax 1 DROP COLUMN ENCRYPTION KEY [ IF
CREATE COLUMN ENCRYPTION KEY Description Creates a CEK that can be used to encrypt a specified column in a table. Precautions This syntax is specific to a fully-encrypted database. When using gsql to connect to a database server, you need to use the -C parameter to enable the fully-encrypted
CREATE COLUMN ENCRYPTION KEY Description Creates a CEK that can be used to encrypt a specified column in a table. Precautions This syntax is specific to a fully-encrypted database. When using gsql to connect to a database server, you need to use the -C parameter to enable the fully-encrypted
DROP COLUMN ENCRYPTION KEY Description Deletes a column encryption key (CEK). Precautions Only the CEK owner or a user who has been granted the DROP permission can run this command. System administrators have this permission by default. Syntax 1 DROP COLUMN ENCRYPTION KEY [ IF EXISTS
Enabling Transparent Data Encryption Function This API is used to enable transparent data encryption (TDE) for an instance. Before calling this API: Learn how to authenticate this API. Obtain the required region and endpoint. Debugging You can debug this API in API Explorer. Constraints
Enabling Transparent Data Encryption for a GaussDB Instance Scenarios You can enable transparent data encryption (TDE) for your instance on the instance details page. Introduction Video Precautions TDE can be enabled only when KMS is used. After enabling TDE, you need to manually
Will Backups Be Encrypted After Disk Encryption Is Enabled for My GaussDB Instance? If you enable disk encryption during instance creation, the disk encryption status and the key cannot be changed later. Disk encryption will not encrypt backup data stored in OBS. To enable backup
