# Clustered at-rest encryption

**URL:** https://forums.percona.com/t/clustered-at-rest-encryption/5297
**Category:** Percona XtraDB Cluster 5.x
**Created:** [December 15, 2016, 8:23am UTC](https://forums.percona.com/t/clustered-at-rest-encryption/5297 "2016-12-15T08:23:37Z")
**Posts on this page:** 2
**Page:** 1

<div class="post-metadata">

### Author: ![Ron\_Johnson](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/ron_johnson/32/1135_2.png) [@Ron\_Johnson](https://forums.percona.com/u/Ron_Johnson)
#### Post date: [December 15, 2016, 8:23am UTC](https://forums.percona.com/t/clustered-at-rest-encryption/5297/1 "2016-12-15T08:23:37Z")

</div>

Hello,

From this blog post ([url][https://www.percona.com/blog/2016/04/08/mysql-data-at-rest-encryption/[/url]](https://www.percona.com/blog/2016/04/08/mysql-data-at-rest-encryption/%5B/url%5D)), I see that a few changes are needed to the my.cnf file, and then you just run “alter table table\_name encryption=‘Y’”.

Is that replicated across all cluster nodes?

Thanks

---

<div class="post-metadata">

### Author: ![Kenn\_Takara](https://avatars.discourse-cdn.com/v4/letter/k/b2d939/32.png) [@Kenn\_Takara](https://forums.percona.com/u/Kenn_Takara)
#### Post date: [December 15, 2016, 12:29pm UTC](https://forums.percona.com/t/clustered-at-rest-encryption/5297/2 "2016-12-15T12:29:15Z")

</div>

Hi,

The "alter table table\_name encryption=‘Y’ " will replicate. However, for this to work the keyring-file-data must be configured on each node.

[url][https://dev.mysql.com/doc/refman/5.7/en/innodb-tablespace-encryption.html[/url]](https://dev.mysql.com/doc/refman/5.7/en/innodb-tablespace-encryption.html%5B/url%5D)

On nodes where the keyring is not configured, the tables will not be encrypted.