Skip to content

Commit 01b2293

Browse files
fixed disabling wrapping key page
1 parent 4f78800 commit 01b2293

File tree

1 file changed

+4
-6
lines changed

1 file changed

+4
-6
lines changed

product_docs/docs/tde/15/secure_key/disabling_key.mdx

Lines changed: 4 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -4,14 +4,12 @@ description: Learn how to omit using a wrapping key.
44
deepToc: true
55
---
66

7-
If you don't want key wrapping, for example for testing purposes, you have two options:
7+
If you don't want key wrapping, for example, for testing purposes, you can use either one of the following options to disable key wrapping:
88

99
- You can set the wrap and unwrap commands to the special value `-` when initializing the cluster with `initdb`. For example, with the flags `--key-wrap-command=-` and `--key-unwrap-command=-`.
1010

11-
With this configuration TDE generates encryption key files, but leaves them unprotected.
11+
- Or you can disable key wrapping when initializing the cluster with `initdb` by adding the flag `--no-key-wrap`.
1212

13-
- You can disable key wrapping when initializing the cluster with `initdb` by adding the flag `--no-key-wrap`.
13+
With either one of the configurations, TDE generates encryption key files, but leaves them unprotected.
1414

15-
With this configuration TDE generates encryption key files, but leaves them unprotected.
16-
17-
For `intidb --data-encryption` to run successfully, you have to either, specify a wrapping/unwrapping command, set a fallback environment variable with wrapping/unwrapping commands, or disable key wrapping with the one of the previous mechanisms. Otherwise, the database cluster will fail.
15+
For `intidb --data-encryption` to run successfully, you have to either specify a wrapping/unwrapping command, set a fallback environment variable with wrapping/unwrapping commands, or disable key wrapping with the one of the previous mechanisms. Otherwise, the creation of an encrypted database cluster will fail.

0 commit comments

Comments
 (0)