Multiple keys versions and rotation

This will let you know how to use store lockers to utilise the usage of the plugin to be able to use key versions.

In this guide it will allow you to use multiple key versions automatically

First you need to create a Locker on the Store

we will name it Keys inside it we have to only create keys starts with numbers, this represents the version that you will use later.

for example we have two keys, each one starts with a number

🚧

it should be numbers only

change your config file to have the locker allowed and make sure to change the vault-url too.

[mariadb]
plugin-load-add=onboardbase_key_management.so
# when using multiple key versions, make sure to have the global api
onboardbase-key-management-vault-url="https://public.onboardbase.com/api/v1/store/get"
onboardbase-key-management-token="store_HZ6EUG3GDUA7VG6B8MHH"
onboardbase-key-management-locker-key="keys"

then you should be know have key versioning

you could test out by

CREATE TABLE t3 (a VARCHAR(8)) ENGINE=InnoDB ENCRYPTED=YES ENCRYPTION_KEY_ID=2;