Skip to content
Percona Software for MySQL Documentation

For help, click the link below to get free database assistance or contact our experts for personalized support.

Get help from Percona

Encrypt File-Per-Table Tablespace

A file-per-table tablespace stores the table data and the indexes for a single InnoDB table. In this tablespace configuration, each table is stored in a .ibd file.

The architecture for data at rest encryption for file-per-table tablespace has two tiers:

  • Master key

  • Tablespace keys

The keyring plugin must be installed and enabled. The file_per_table tablespace inherits the schema default encryption setting unless you explicitly define encryption in CREATE TABLE or ALTER TABLE.

mysql> CREATE TABLE ... ENCRYPTION='Y';

mysql> ALTER TABLE ... ENCRYPTION='Y';

Using ALTER TABLE without the ENCRYPTION option does not change the encryption state. An encrypted table remains encrypted or an unencrypted table remains unencrypted.

Last update: 2023-09-27