tencent cloud

Feedback

Backup Encryption

Last updated: 2023-09-13 15:48:23
    TencentDB for MySQL supports backup encryption for physical backups and log backups (binlog). To use an encrypted backup, you need to download it and its encryption key for decryption. This document describes how to enable or disable the backup encryption feature and download a key.

    Prerequisite

    The MySQL instance architecture is two-node/three-node.

    Note

    After backup encryption is enabled, the previous backup will not be encrypted, but the new backup files will be automatically encrypted for storage.
    You cannot modify the backup encryption key.
    After backup encryption is enabled, you don't need to manually decrypt a backup in the console, as the backend will decrypt it automatically before relevant operations such as cloning. However, if you download an encrypted backup, you need to download its key for decryption. For more information, see Restoring Database from Physical Backup.

    Enabling backup encryption

    1. Log in to the TencentDB for MySQL console. In the instance list, click an instance ID or Manage in the Operation column to access the instance management page.
    2. On the instance management page, select Backup and Restoration and click Backup Encryption.
    
    3. In the pop-up dialog box, select a backup encryption type and click OK.
    
    Note
    After enabling the corresponding backup encryption, the physical backup time may be extended by 20%, and the log backup time may be extended by 30%.
    4. After the backup encryption is enabled, the backup files generated based on the automatic backup settings will be automatically encrypted.
    5. You can also click Manual backup. On the manual backup setting page, select the configuration, click OK to encrypt the newly added physical backup.
    Parameter
    Description
    Select backup mode
    Select Physical cold backup.
    Object
    It is the instance by default.
    Backup Encryption
    It is enabled by default.
    Backup Name
    It can contain up to 60 letters, digits, or symbols (-_./()[]+=:@).

    Disabling backup encryption

    Note
    After backup encryption is disabled, the previous backup will not be decrypted, and the new backup files will not be encrypted for storage.
    1. Log in to the TencentDB for MySQL console. In the instance list, click the ID of the target instance or Manage in the Operation column to enter the instance management page.
    2. On the instance management page, select Backup and Restoration and click Backup Encryption.
    3. In the pop-up window, disable the corresponding backup encryption type, and click OK.
    

    Downloading a backup key

    1. Log in to the TencentDB for MySQL console. In the instance list, click the ID of the target instance or Manage in the Operation column to enter the instance management page.
    2. On the instance management page, select the Backup and Restoration > Data Backup List tab, find the target backup, and click Download Key in the Operation column.
    
    3. In the pop-up window, select the file path where to save the key and click Download.
    Contact Us

    Contact our sales team or business advisors to help your business.

    Technical Support

    Open a ticket if you're looking for further assistance. Our Ticket is 7x24 avaliable.

    7x24 Phone Support