Enabling# Securing the data encryption key Using a passphrase Using a key store AWS Key Management Service example Azure Key Vault example Google Cloud KMS example HashiCorp Vault Transit Secrets Engine example Key rotation Creating a database cluster with TDE enabled Using initdb TDE options Using environment variables Setting the key parameter in postgresql.conf Example Checking for TDE presence using SQL Enabling TDE on an existing EDB Postgres Advanced Server cluster Enabling TDE on an EDB Postgres Advanced Server cluster Worked example Preparing your upgrade Creating an encrypted server Upgrading to the encrypted server Cleaning up after upgrade
