Migrate encrypted tables from earlier versions

Back up the entire keyspace that has a hcd_system.encrypted_keys table.

Back up all system keys.

Upgrade the cluster to HCD 1.2.

Perform a rolling restart of all nodes in the cluster.

Check that the hcd_system.encrypted_keys table was created using the cqlsh DESCRIBE KEYSPACE command.

If the hcd_system.encrypted_keys table was created, go to the next step; otherwise, create the table manually:

CREATE KEYSPACE hcd_system WITH replication = {'class': 'EverywhereStrategy'};

USE hcd_system;

CREATE TABLE encrypted_keys (
  key_file text,
  cipher text,
  strength int,
  key_id timeuuid,
  key text,
  PRIMARY KEY (key_file, cipher, strength, key_id)
);

Rewrite all SSTables.

nodetool upgradesstables --include-all-sstables