I need to encrypt MySQL Tables at rest.

Question

I need to encrypt MySQL Tables at rest. I know column level encryption(AES_ENCRYPT/DECRYPT) is the preferred way of encrypting my data but my db table is being populated by pentaho (third party data integration tool)and I don't have the luxury to provide MySQL Decrypt passphrase to pentaho. How can I achieve full data encryption with MySQL community 8.x?

Answer 1

Consider upgrading to MySql 8 which already comes with Data-At-Rest Encryption. Alternatively, you can upgrade to MaridaDB 10.4.

You can encrypt any InnoDB table, and once set up it's entirely transparent. All your queries will work exactly the same as before, except the data is encrypted before save and decrypted after retrieval.

https://dev.mysql.com/doc/refman/8.0/en/faqs-tablespace-encryption.html