Answers.Body: <p>Just to close the loop on this, i ended up using LUKS to encrypt harddisk where mysql lived.  CIVICRM didn't seem to mind it so far and performance doesn't seem impacted.</p>
  
Answers.ContentLicense: CC BY-SA 4.0
Answers.CreationDate: 2020-08-25T10:06:48.457Z
Answers.LastActivityDate: 2020-08-25T10:06:48.457Z
Answers.UserDisplayName: Clement Leong
Answers.Body: <p>Logging tables until recently wouldn't be supported. If your install is older and you have logging turned on you might need to update the engine for the logging tables to InnoDB.</p>
  
  <p>Otherwise I think it would just be regular system administration stuff not specific to CiviCRM.</p>
  
  <p>But for me the issue with at-rest encryption has always been that storing the keys on the same server defeats the purpose, unless you're willing to password protect them and also not store the password on the server, i.e. manually start mysql any time the server needs rebooting and manually provide the password, and that may not even be doable depending on the hosting setup.</p>
  
  <p>I see there is an eperi gateway plugin for mariadb which I was unaware of. That seems interesting.</p>
  
Answers.ContentLicense: CC BY-SA 4.0
Answers.CreationDate: 2019-12-13T07:36:56.433Z
Answers.Text: Thanks Demerit!  Your post actually prompted me to look at eperi and other solutions which i later did a setup with ecryptFS.  there is also another promising solution Acra: https://github.com/cossacklabs/acra
Answers.UserDisplayName: Clement Leong
Answers.ContentLicense: CC BY-SA 4.0
Answers.CreationDate: 2019-07-21T20:20:40.743Z
Answers.LastActivityDate: 2019-07-21T20:20:40.743Z
Answers.UserDisplayName: Demerit
Body: <p>is there any insights on installing civicrm on mariadb with data encryption turned on? Is it workable? Thanks.</p>
  
Tags: <mariadb>
Title: Civicrm on mariadb with data encryption
ThreadText: # Civicrm on mariadb with data encryption
  
  (Asked by: username_0 on 2019-07-21)
  
  is there any insights on installing civicrm on mariadb with data encryption turned on? Is it workable? Thanks.
  
  **Tags:** mariadb
  
  
  ---
  
  ## 2 answers
  
  ### Answer by username_0 on 2020-08-25. Score: 1 | Accepted answer
  
  Just to close the loop on this, i ended up using LUKS to encrypt harddisk where mysql lived. CIVICRM didn't seem to mind it so far and performance doesn't seem impacted.
  
  
  ---
  
  ### Answer by username_1 on 2019-07-21. Score: 1
  
  Logging tables until recently wouldn't be supported. If your install is older and you have logging turned on you might need to update the engine for the logging tables to InnoDB.
  
  Otherwise I think it would just be regular system administration stuff not specific to CiviCRM.
  
  But for me the issue with at-rest encryption has always been that storing the keys on the same server defeats the purpose, unless you're willing to password protect them and also not store the password on the server, i.e. manually start mysql any time the server needs rebooting and manually provide the password, and that may not even be doable depending on the hosting setup.
  
  I see there is an eperi gateway plugin for mariadb which I was unaware of. That seems interesting.
  
  > **Comments:**
  > **username_0**: Thanks username_1!  Your post actually prompted me to look at eperi and other solutions which i later did a setup with ecryptFS.  there is also another promising solution Acra: https://github.com/cossacklabs/acra  
  
  ---
  
  