Configure encryption key storage for backups
Configure whether OpsCenter stores the encryption keys for each node along with the SSTables. When tables in a cluster use the DataStax Enterprise Transparent Data Encryption, encryption keys from each node are stored in remote locations alongside the data. Encryption key storage is enabled by default in the OpsCenter Backup Service and is highly recommended.
Any encryption keys associated with a table are backed up.
-
In the OpsCenter navigation menu, click your cluster’s name, and then select Services.
-
Click the Backup Service’s Details link.
-
Click the Settings tab.
-
Click the Configure link for Encryption Key Storage.
-
To store encryption keys alongside the backup data, toggle Encryption Key Storage to On.
To disable this functionality, toggle Encryption Key Storage to Off. This isn’t recommended.
If Encryption Key Storage is enabled, and a cluster has encrypted keyspaces, then the encryption key for each node is stored in the backup location along with the data. If you disable this option, you must ensure that the encryption key is available on all nodes prior to restoring encrypted tables.
-
Click Save.
