content_image/706404.jpg
Type String 

The OCID of the Oracle Cloud Infrastructure Vault that the keyring_oci  plugin uses for encryption operations. This variable is unavailable unless that plugin is installed. 

Prior to using keyring_oci , you must create a new vault in the MySQL compartment if it does not exist. (Alternatively, you can reuse an existing vault that is in a parent compartment of the MySQL compartment.) Compartment users can see and use only the keys in their respective compartments. 

For information about creating a vault and obtaining the vault OCID, see Managing Vaults. 

This variable is mandatory. If not specified, keyring_oci  initialization fails. 

• keyring_okv_conf_dir 

<img src='content_image/706404.jpg'>

The path name of the directory that stores configuration information used by the keyring_okv  plugin. This variable is unavailable unless that plugin is installed. The location should be a directory considered for use only by the keyring_okv  plugin. For example, do not locate the directory under the data directory. 

The default keyring_okv_conf_dir  value is empty. For the keyring_okv  plugin to be able to access Oracle Key Vault, the value must be set to a directory that contains Oracle Key Vault configuration and SSL materials. For instructions on setting up this directory, see Section 6.4.4.8, “Using the keyring_okv KMIP Plugin” . 

The directory should have a restrictive mode and be accessible only to the account used to run the MySQL server. For example, on Unix and Unix-like systems, to use the /usr/local/mysql/mysql- keyring-okv  directory, the following commands (executed as root ) create the directory and set its mode and ownership: 

cd /usr/local/mysql mkdir mysql-keyring-okv chmod 750 mysql-keyring-okv chown mysql mysql-keyring-okv chgrp mysql mysql-keyring-okv 

If the value assigned to keyring_okv_conf_dir  specifies a directory that does not exist, or that does not contain configuration information that enables a connection to Oracle Key Vault to be established, keyring_okv  writes an error message to the error log. If an attempted runtime assignment to keyring_okv_conf_dir  results in an error, the variable value and keyring operation remain unchanged. 

• keyring_operations 

System Variable keyring_operations 

