Data-at-Rest Encryption

MariaDB Enterprise Server and MariaDB Community Server supports data-at-rest encryption, which secures data on the file system. The server and storage engines encrypt data before writes and decrypts during reads, ensuring that the data is only unencrypted when accessed directly through the server.

Encryption Plugins

Topic

Resources

Encryption Plugins

HashiCorp Vault

Amazon Web Services (AWS) KMS

File Key Management

Storage Engine Encryption

Topic

Resources

InnoDB

Aria

Replication Cache Encryption

Topic

Resources

Binary Logs

Galera Cluster Gcache

Additional information is available on the MariaDB Knowledge Base.