Configuring encryption key storage for backups
About this task
Configure whether OpsCenter stores the encryption keys for each node along with the SSTables. When tables in a cluster use the DataStax Enterprise Transparent data encryption, encryption keys from each node are stored in remote locations alongside the data. Encryption key storage is enabled by default in the OpsCenter Backup Service and is highly recommended.
Any encryption keys associated with a table are backed up. |
Procedure
-
Select cluster name > Services.
-
Select the Details link for the Backup Service.
-
Click the Settings tab.
-
Click the Configure link for Encryption Key Storage.
-
Set the slider to On to enable or Off to disable storing encryption keys alongside the backup data.
If Encryption Key Storage is enabled and a cluster has encrypted keyspaces, the encryption key for each node is stored in the backup location along with the data. If you disable this option, you must ensure that the encryption key is available on all nodes prior to restoring encrypted tables.
-
Click Save.