smaller updates

improved doc for test.md and get-help.md fixed heading title for key providers.
percona · Andriciuc · May 8, 2025 · Apr 17, 2025 · Apr 17, 2025 · Apr 22, 2025
commit 7d4b5148c83c087d23ce74b16ceee875d89bdf81
@@ -17,12 +17,11 @@ Percona experts bring years of experience in tackling tough database performance
 <div data-tf-live="01JKGYHB4DKYX1CC6KNF0VHP1A"></div><script src="//embed.typeform.com/next/embed.js"></script>
 We understand your challenges when managing complex database environments. That's why we offer various services to help you simplify your operations and achieve your goals.
 
-
 | Service                    | Description                                                                                                                                                           |
 |----------------------------|-----------------------------------------------------------------------------------------------------------------------------------------------------------------------|
 | 24/7 Expert Support        | Our dedicated team of database experts is available 24/7 to assist you with any database issues. We provide flexible support plans tailored to your specific needs.   |
 | Hands-On Database Management | Our managed services team can take over the day-to-day management of your database infrastructure, freeing up your time to focus on other priorities.               |
 | Expert Consulting          | Our experienced consultants provide guidance on database topics like architecture design, migration planning, performance optimization, and security best practices.  |
 | Comprehensive Training     | Our training programs help your team develop skills to manage databases effectively, offering virtual and in-person courses.                                          |
 
-We're here to help you every step of the way. Whether you need a quick fix or a long-term partnership, we're ready to provide your expertise and support.
+We're here to help you every step of the way. Whether you need a quick fix or a long-term partnership, we're ready to provide your expertise and support.
@@ -1,4 +1,4 @@
-# Configure local keyring file
+# Keyring File Configuration
 
 This setup is intended for development and stores the keys unencrypted in the specified data file. See [how to use external reference to parameters](../how-to/external-parameters.md) to add an extra security layer to your setup.
 

@@ -1,4 +1,4 @@
-# Configure KMIP server
+# KMIP Configuration
 
 To use a Key Management Interoperability Protocol (KMIP) server with `pg_tde`, you must configure it as a global key provider. This setup enables `pg_tde` to securely fetch and manage encryption keys from a centralized key management appliance.
 

@@ -1,4 +1,4 @@
-# Configure HashiCorp Vault
+# Vault Configuration
 
 You can configure `pg_tde` to use HashiCorp Vault as a global key provider for managing encryption keys securely.
 

@@ -31,7 +31,9 @@ After enabling the `pg_tde` extension for a database, you can begin encrypting d
 
     The function returns `t` if the table is encrypted and `f` - if not.
 
-3. Rotate the principal key when needed, see [Principal key management](functions.md#principal-key-management))
+3. (Optional) Rotate the principal key.
+
+To re-encrypt the data using a new key, see [Principal key management](functions.md#principal-key-management)
 
 ## Encrypt existing table
 
@@ -43,11 +45,14 @@ Run the following command:
     ALTER TABLE table_name SET ACCESS METHOD tde_heap;
 ```
 
-Note that the `SET ACCESS METHOD` command drops hint bits and this may affect the performance. Running a plain `SELECT count(*)` or `VACUUM` commands on the entire table will check every tuple for visibility and set its hint bits. Therefore, after executing the `ALTER TABLE` command, run a simple `count(*)` on your tables:
+!!! important
+    Using `SET ACCESS METHOD` drops hint bits which can impact query performance. To restore performance, run:
 
-```sql
-    SELECT count(*) FROM table_name;
-```
+    ```sql
+        SELECT count(*) FROM table_name;
+    ```
+
+    This forces PostgreSQL to check every tuple for visibility and reset the hint bits.
 
 !!! hint
-    If you no longer wish to use `pg_tde` or wish to switch the access method, see how you can [decrypt your data](how-to/decrypt.md).
+    Want to remove encryption later? See how to [decrypt your data](how-to/decrypt.md).