Encryption
Manage master keys, data keys, and TLS certificates for database backups and encrypted connections.
Default behavior
By default, myStack does not create a master key. When you create a database cluster, myStack automatically provisions a dedicated data key for that cluster and uses it to encrypt backups. You do not need to create keys before you create a database.
Components
| Component | Description |
|---|---|
| Master key | Optional account-level key. Not created unless you add one |
| Data key | Encrypts backup data. One managed data key is provisioned per cluster by default |
| Certificate | TLS certificate material for database SSL. Optional; a default certificate attaches to new clusters when one exists |
In the console
Choose Encryption in the navigation pane, then Master Keys, Data Keys, or Certificates.