Project Security and TDE keys
The security settings page allows you to manage the security settings for your project. Specifically this enables you to add and delete TDE keys for your project.
Note
TDE (Transparent Data Encryption) uses keys which must be securely stored in the cloud. This requires that you have configured your own cloud account and have the necessary permissions to manage keys in that account. EDB Postgres AI does not store the keys you use for TDE.
You can add and delete TDE keys for your project in the EDB Postgres AI console.
Adding a TDE key
- From the Projects page, select an existing project.
- Go to Settings on the left-side navigation.
- From the Settings list, select Security.
- Select Add a key.
- On the Add a key page, select the Cloud Service Provider.
- Select the Region for the key. The interface only displays the regions available in the cloud account you configured.
- Complete the remaining fields according to your cloud provider.
- Select Add Key to finalize the configuration.
Note for GCP keys
If the key you added was created in a different Google Cloud Platform account than the TDE-enabled cluster you want to create, ensure you enable the Cloud KMS API in the Google console before assigning it to your cluster in EDB Postgres AI.
Now, use this TDE key to create a cluster.
For more information about TDE support, see Transparent Data Encryption
Deleting a TDE key
From the Projects page, select an existing project.
Go to Settings on the left-side navigation.
From the Settings list, select Security.
Select a key and select the delete icon for the key you want to delete.
You're prompted to type delete key name in the field.
To delete the key, enter the text as instructed and select Yes, Delete key.
Note
A TDE key is deleted only when it isn't used and not associated with any cluster.
- On this page
- Adding a TDE key
- Deleting a TDE key
Could this page be better? Report a problem or suggest an addition!