10000 Encryption at Rest key rotation by graetzer · Pull Request #332 · arangodb/docs · GitHub
[go: up one dir, main page]
Skip to content
This repository was archived by the owner on Dec 13, 2023. It is now read-only.

Encryption at Rest key rotation #332

Merged
merged 8 commits into from
May 25, 2020
Merged

Encryption at Rest key rotation #332

Show file tree
Hide file tree
Changes from 1 commit
Commits
Show all changes
8 commits
Select commit Hold shift + click to select a range
6882a2c
Encryption key rotation
graetzer Feb 12, 2020
3fca620
Formatting, clean-up
Simran-B Feb 17, 2020
6812e92
WIP
Simran-B Feb 17, 2020
11778f3
Revert "WIP"
Simran-B Feb 18, 2020
5f4a3a0
Add HTTP docs + ref, needs upstream DocuBlock
Simran-B Feb 18, 2020
8e42fbe
Add release notes
Simran-B Feb 18, 2020
1bbacad
Merge remote-tracking branch 'origin/master' into feature/encryption-…
Simran-B Feb 18, 2020
c0c05c9
Merge remote-tracking branch 'origin' into feature/encryption-key-rotate
Simran-B May 25, 2020
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
Add HTTP docs + ref, needs upstream DocuBlock
  • Loading branch information
@Simran-B
Simran-B committed Feb 18, 2020
commit 5f4a3a0c85daa4b15a70a1ac8c12aadd86e7c096
6 changes: 6 additions & 0 deletions 3.7/http/administration-and-monitoring.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -35,6 +35,12 @@ TLS
{% docublock get_admin_server_tls %}
{% docublock post_admin_server_tls %}

Encryption at Rest
------------------

<!-- arangod/RestHandler/RestAdminServerHandler.cpp -->
{% docublock post_admin_server_encryption %}

Cluster
-------

Expand Down
8 changes: 2 additions & 6 deletions 3.7/security-encryption.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -116,9 +116,5 @@ servers) and directly store them in your secret management tool.

## Rotating encryption keys

It is possible to rotate the user supplied encryption key by sending a POST
request to the `/_admin/server/jwt` endpoint. The file supplied via
`--rocksdb.encryption-keyfile` will be reloaded and the internal encryption
key will be re-encrypted with the new user key.

Also see [Hot-Reload of JWT Secrets](http/general.html#hot-reload-of-jwt-secrets).
It is possible to change the user supplied encryption at rest key via the
[HTTP API](http/administration-and-monitoring.html#encryption-at-rest).
0