Breadcrumbs

keyring_okv Plugin On Windows

The configuration directory used by keyring_okv as the location for its support files should have a restrictive mode and be accessible only to the account used to run the MySQL server. For example, on Windows-like systems, to use the

Create mysql-keyring-okv folder in following location C:\Program Files\MySQL\MySQL Server 8.0\mysql-keyring-okv folder and allow following permission to the folder.

  1. After creating the mysql-keyring-okv folder in C:\Program Files\MySQL\MySQL Server 8.0\mysql-keyring-okv right-click, then Properties -> Security, then Edit -> Add etc.

  2. Once the user is added check "Modify" in addition to Read & execute, List folder contents, Read and Write.

  3. Also, Grant modify access to MySQL folder inside Program Files.

  4. Restart the MySQL server after making above changes.

  5. To be usable during the server startup process, keyring_okv must be loaded using the -early-plugin-load option. Also, set the keyring_okv_conf_dir system variable to tell keyring_okv where to find its configuration directory.

›_ Console

 
[mysqld] 
early-plugin-load=keyring_okv.dll 
keyring_okv_conf_dir=" C:\Program Files\MySQL\MySQL Server 8.0\mysql
keyring-okv”

Edit the C:\ProgramData\MySQL\MySQL Server 8.0\my.ini file and add the plugin into the mysqld section.

  1. Download the CA.pem, cert.pem to our MySQL server under the SSL folder.

  2. In the configuration directory, create a file named okvclient.ora. It should have following format:

›_ Console

 
SERVER=xxx.xxx.xxx.xxx:5696 
STANDBY_SERVER=xxx.xxx.xxx.xxx:5696 STANDBY_SERVER is optional. 
Example: 
SERVER=10.44.223.144:5696 
STANDBY_SERVER=10.44.223.145:5696

  1. Set the mysql permissions on the file.

C:\Program Files\MySQL\MySQL Server 8.0\mysql-keyring-okv\okvclient.ora

  1. After completing the preceding procedure, restart the MySQL server. It loads the keyring_okv plugin and keyring_okv uses the files in its configuration folder to communicate with ESKM.

  2. Verify that the keyring_okv plugin is working.

mysql›

 
mysql> SELECT PLUGIN_NAME, PLUGIN_STATUS FROM INFORMATION_SCHEMA.PLUGINS WHERE PLUGIN_NAME LIKE 'keyring%';