TencentDB for MySQL supports backup encryption for physical backups and log backups (binlog). To use an encrypted backup, you need to download it and its encryption key for decryption. This document describes how to enable or disable the backup encryption feature and download a key.
Prerequisite
The MySQL instance architecture is two-node/three-node.
Note
After backup encryption is enabled, the previous backup will not be encrypted, but the new backup files will be automatically encrypted for storage.
You cannot modify the backup encryption key.
After backup encryption is enabled, you don't need to manually decrypt a backup in the console, as the backend will decrypt it automatically before relevant operations such as cloning. However, if you download an encrypted backup, you need to download its key for decryption. For more information, see Restoring Database from Physical Backup.
Enabling backup encryption
1. Log in to the TencentDB for MySQL console. In the instance list, click an instance ID or Manage in the Operation column to access the instance management page.
2. On the instance management page, select Backup and Restoration and click Backup Encryption.
3. In the pop-up dialog box, select a backup encryption type and click OK.
Note
After enabling the corresponding backup encryption, the physical backup time may be extended by 20%, and the log backup time may be extended by 30%.
4. After the backup encryption is enabled, the backup files generated based on the automatic backup settings will be automatically encrypted.
5. You can also click Manual backup. On the manual backup setting page, select the configuration, click OK to encrypt the newly added physical backup.
Parameter
Description
Select backup mode
Select Physical cold backup.
Object
It is the instance by default.
Backup Encryption
It is enabled by default.
Backup Name
It can contain up to 60 letters, digits, or symbols (-_./()[]+=:@).
Disabling backup encryption
Note
After backup encryption is disabled, the previous backup will not be decrypted, and the new backup files will not be encrypted for storage.
1. Log in to the TencentDB for MySQL console. In the instance list, click the ID of the target instance or Manage in the Operation column to enter the instance management page.
2. On the instance management page, select Backup and Restoration and click Backup Encryption.
3. In the pop-up window, disable the corresponding backup encryption type, and click OK.
Downloading a backup key
1. Log in to the TencentDB for MySQL console. In the instance list, click the ID of the target instance or Manage in the Operation column to enter the instance management page.
2. On the instance management page, select the Backup and Restoration > Data Backup List tab, find the target backup, and click Download Key in the Operation column.
3. In the pop-up window, select the file path where to save the key and click Download.
