[IGNITE-8262] TDE - MEK and CEK processing

• Type: Sub-task
• Status: Closed
• Priority: Major
• Resolution: Invalid
• Labels: IEP-18
• Assignee: Unassigned
• Reporter: Nikolay Izhikov
• Created: 13/Apr/18 17:28
• Updated: 14/May/18 14:29
• Resolved: 14/May/18 14:29

Description

To get TDE working we should implement managing MEK and CEK's

• MEK should be loaded from configured KeyStore
• CEK's should be stored in some internal data storage and be encrypted with MEK.
• Cluster shouldn't get activated before MEK are loaded.