Question Plesk: Encrypt Data At Rest?

[Paul Larson]

My Ubuntu server runs MariadB 10.6. Based on this old thread about encrypting data at rest (2018), it would seem a Plesk domain could have MariaDB at rest encryption enabled... and everything is fine.

Is this correct?

I don't even know how to enable encryption for a MariaDB database: I've even googled it.

I assume data at rest, in a Plesk sense, would only be for databases and not the file system. (I don't even know how to make my server or CMS handle a at rest file encryption.)

 

[Peter Debik]

Does this get you further? Securing Connections to Remote MySQL Database Servers

 

[eduo]

Did you ever get this working?

The installation by default includes an "enabled_encryption.preset" which enables encryption at rest, but that in turn requires a plug-in to be installed in MariaDB and points to this:

https://mariadb.com/kb/en/mariadb/data-at-rest-encryption/#encryption-key-management

I am not sure how to do this in Plesk with the built-in version.