Help Center/ GaussDB(DWS)/ Management Guide/ Cluster Security Management/ Encrypting Databases/ Rotating Encryption Keys
Updated on 2025-02-07 GMT+08:00
View PDF

Rotating Encryption Keys

If you have enabled the Encrypt DataStore function in Advanced Settings during cluster creation, you can rotate the encryption keys for the cluster after the cluster is created successfully. Each key rotation will update the CEK once. During the key rotation, the cluster is still in Available status.

Rotating Encryption Keys for Data Warehouse Clusters

  1. Log in to the GaussDB(DWS) console.
  2. In the navigation tree on the left, choose Clusters > Dedicated Clusters.
  3. In the cluster list, find the target cluster and click the cluster name. The Cluster Information page is displayed.
  4. In the Data Encryption Information area, click Key Rotation.
  5. In the dialog box that is displayed, click Yes.
Parent topic: Encrypting Databases