Upgrading a TDE-enabled database

You can use the pg_upgrade with additional TDE-arguments to perform a number of upgrading and migrating operations. This table provides an overview of supported use cases.

Use case	Source unencrypted server	Target encrypted server
Perform a minor upgrade and add encryption	Unencrypted EDB Postgres Extended Server 16.1	Encrypted EDB Postgres Extended Server 16.2
Change the Postgres distribution and add encryption	Unencrypted PostgreSQL 16	Encrypted EDB Postgres Advanced Server 16
Maintain the Postgres distribution and add encryption	Unencrypted EDB Postgres Advanced Server 15	Encrypted EDB Postgres Advanced Server 15
Maintain the Postgres distribution and rotate encryption keys	Encrypted EDB Postgres Advanced Server 15	Encrypted EDB Postgres Advanced Server 15 with new encryption keys

Important

Both source and target servers must be in the same Postgres major version. pg_upgrade only supports upgrades between minor versions.

Tutorials

See Tutorials for a list of step-by-step tutorials that highlight different migration scenarios.