content_image/716753.jpg
runtime reconfiguration procedure to initialize the plugin without restarting the server. 

For additional information about the keyring_hashicorp  plugin-specific system variables and function, see Section 6.4.4.18, “Keyring System Variables” , and Section 6.4.4.15, “Plugin-Specific Keyring Key- Management Functions” . 

## 6.4.4.11 Using the Oracle Cloud Infrastructure Vault Keyring Plugin 

<img src='content_image/716753.jpg'>

## Note 

The keyring_oci  plugin is an extension included in MySQL Enterprise Edition, a commercial product. To learn more about commercial products, see https:// www.mysql.com/products/. 

The keyring_oci  plugin is a keyring plugin that communicates with Oracle Cloud Infrastructure Vault for back end storage. No key information is permanently stored in MySQL server local storage. All keys are stored in Oracle Cloud Infrastructure Vault, making this plugin well suited for Oracle Cloud Infrastructure MySQL customers for management of their MySQL Enterprise Edition keys. 

The keyring_oci  plugin supports the functions that comprise the standard MySQL Keyring service interface. Keyring operations performed by those functions are accessible at two levels: 

•SQL interface: In SQL statements, call the functions described in Section 6.4.4.14, “General-Purpose Keyring Key-Management Functions” . 

•C interface: In C-language code, call the keyring service functions described in Section 5.6.9.2, “The Keyring Service” . 

Example (using the SQL interface): 

SELECT keyring_key_generate(’MyKey’, ’AES’, 32); SELECT keyring_key_remove(’MyKey’); 

For information about the characteristics of key values permitted by keyring_oci , see Section 6.4.4.12, “Supported Keyring Key Types and Lengths” . 

To install keyring_oci , use the general instructions found in Section 6.4.4.3, “Keyring Plugin Installation” , together with the configuration information specific to keyring_oci  found here. Plugin- specific configuration involves setting a number of system variables to indicate the names or values of Oracle Cloud Infrastructure resources. 

You are assumed to be familiar with Oracle Cloud Infrastructure concepts, but the following documentation may be helpful when setting up resources to be used by the keyring_oci  plugin: 

•Overview of Vault 

•Resource Identifiers 

•Required Keys and OCIDs 

•Managing Keys 

•Managing Compartments 

•Managing Vaults 

•Managing Secrets 

