Reference# Commands affected by TDE initdb TDE options Option: --data-encryption or -y Supported values Option: --key-wrap-command=<command> Supported values Option: --key-unwrap-command=<command> Supported values Option: --no-key-wrap Supported values Option: --copy-key-from=<file> Supported values pg_upgrade TDE options Option: --copy-by-block Option: --key-unwrap-command=<command> Limitations FILE_COPY