install mysql keyring plugin

On windows you don't need this line: mysql> install plugin keyring_file soname 'keyring_file.dll'; that's the install operation for Linux (maybe you might if running under Node?)

BUT make sure you have a FULL install of MySql - I didn't realise there are cut down versions that don't have the plugin dlls (and other stuff). And make sure you have the keyring_udf.dll installed and you've also created the UDF functions.

The documentation on mySql's pages for all this is badly organised and hard to follow.

This is one of those tasks that goes on for ever.. got key set up, got everything running - keyfile gets encrypted. Then I use ALTER TABLE mytable ENCRYPTION='Y' but nothing happens.

I export the table and the export states "ENCRYPTION='Y'" but nope it's not encrypted. No error messages in mysql log, nothing.

I was facing the exact same issue on m local MySQL instance and following steps helped me resolve the ‘Encryption can't find master key, please check the keyring plugin is loaded.' issue.

• Add following line in my.ini file

  early-plugin-load=keyring_file.dll
  

• Create a folder named keyring at C:\Program Files\MySQL\MySQL Server 8.0 location.

• Grant modify access to this folder as MySQL needs to read the folder and insert keyring in the folder.
• Also Grant modify access to MySQL folder inside Program Files.
• Uninstall existing installed keyring plugin using following command -
• UNINSTALL PLUGIN keyring_file;
• Restart the MySQL server after making above changes.

• Check if the keyring plugin is loaded or not using the following command :-

  show variables like '%keyring%';
  

It should show an output like this :-

+--------------------+---------------------------------------------------------+
| Variable_name      | Value                                                   |
+--------------------+---------------------------------------------------------+
| keyring_file_data  | C:/Program Files/MySQL/MySQL Server 8.0/keyring\keyring |
| keyring_operations | ON                                                      |
+--------------------+---------------------------------------------------------+
2   rows in set (0.0024 sec)

• Now you should be able to enable encryption on your table using this command :-

  ALTER TABLE city ENCRYPTION='Y';
  

I hope the answer helps.

Check for my.ini file in "C:\Program Files\MySQL\MySQL Server 8.0" if not available create my.ini file and add the below lines

[mysqld]
early-plugin-load=keyring_file.dll

grant read,write,execute,modify permissions to MYSQL folder and its internal folders in "C:\Program Files\MYSQL"

Restart your MYSQL80 service.

once you have restarted the service you should be able to see the "keyring" file in the default location

C:\Program Files\MySQL\MySQL Server 8.0\keyring

Note: keyring file will be in keyring folder i.e., C:\Program Files\MySQL\MySQL Server 8.0\keyring\keyring

if you don't find the file try to restart your system. In my case after restarting my system, i am able to see the files.

Now open mysql command line and execute below command

install plugin keyring_file soname 'keyring_file.dll';

Result : Query OK, 0 rows affected (0.03 sec)

Now you can run the below command to see the keyring details.

SELECT PLUGIN_NAME, PLUGIN_STATUS FROM INFORMATION_SCHEMA.PLUGINS WHERE PLUGIN_NAME LIKE 'keyring%';

Result: keyring_file_data C:/Program Files/MySQL/MySQL Server 8.0/keyring\keyring keyring_operations ON

Now create your table with Encryption

ex:

CREATE TABLE dept (     deptno               int  NOT NULL 
> AUTO_INCREMENT,   dname                varchar(20)    ,   loc           
> varchar(20)    ,  CONSTRAINT pk_dept PRIMARY KEY ( deptno )  )
> engine=InnoDB    ENCRYPTION = 'Y';