Re: Reg: Filesystem level encryption support for postgreSQL

[pradeep pandey <pandeyp@xxxxxxxxxxx>]

Thanks but i am looking for solution which is more specific to postgreSQL in line with TDE and HSM 

---

From: jwiencek3 <jwiencek3@xxxxxxxxxxx>
Sent: Thursday, September 12, 2019 9:42 PM
To: pradeep pandey <pandeyp@xxxxxxxxxxx>; pgsql-admin@xxxxxxxxxxxxxxxxxxxx <pgsql-admin@xxxxxxxxxxxxxxxxxxxx>
Subject: Re: Reg: Filesystem level encryption support for postgreSQL

 

I'm working on an environment that is using Hytrust.   Other than taking a long time encrypt the disk there have been no issues at all.

FYI encryption of a 1Tb mount takes approx. 12 hours.  We had to decrypt at one point and that effort was about the same as an encrypt. 

Storage admins owned this not the DBA.

Sent via the Samsung Galaxy S9+, an AT&T 5G Evolution capable smartphone

-------- Original message --------

From: pradeep pandey <pandeyp@xxxxxxxxxxx>

Date: 9/12/19 3:59 PM (GMT-06:00)

To: pgsql-admin@xxxxxxxxxxxxxxxxxxxx

Subject: Reg: Filesystem level encryption support for postgreSQL

Hi folks, 

i am new to postgreSQL and i need to implement Filesystem level encryption  and we use EKM for encryption keys

i am seeking you folks help to know 2 things here 

• if i implment EKM which is third party encryption is that supported by postgreSQL 
• what is the best practice and supported method of implmenting the filesytem level of encyption/protection in postgreSQL 
  
• i searched google but did not find much info 
  
• any pointer or link to read would alos help 

Thanks in advance folks 

Pradeep