Single-user mode

If you invoke Setting the key parameter in postgresql.conf in single-user mode with TDE enabled, the postgres command reads either:

  • The PGDATAKEYUNWRAPCMD environment variable, if set

  • The data_encryption_key_unwrap_command value in the postgresql.conf file