Working with encrypted files

Certain Postgres utilities and operations require access to files to read data and deliver the required output.

In a TDE-enabled database server, data is encrypted and therefore not accesible without a decryption mechanism. For these utilities to be able to perform read operations on encrypted files, you must provide a decryption mechanism.

• :ref:`Working with encrypted backup files <Working with encrypted backup files>`  provides guidance on how to work with and troubleshoot any issues with backup files.
  

• :ref:`Working with encrypted WAL files <Working with encrypted WAL files>`  provides guidance on how to work with and troubleshoot any issues with WAL files.
  

• Working with encrypted WAL files
  • Dumping a TDE-encrypted WAL file
    • –data-encryption
    • –key-file-name=
    • –key-unwrap-command=
    • Example
  • Resetting a corrupt TDE-encrypted WAL file
    • –key-unwrap-command=
    • Example
• Working with encrypted backup files
  • Verify a backup of a TDE system
    • --key-unwrap-command=<command>
  • Resynchronize timelines in a TDE system
    • –key-unwrap-command=