# Data at Rest Encryption for MySQL

**URL:** https://forums.percona.com/t/data-at-rest-encryption-for-mysql/9470
**Category:** MySQL & MariaDB
**Tags:** mysql
**Created:** [March 1, 2021, 6:35am UTC](https://forums.percona.com/t/data-at-rest-encryption-for-mysql/9470 "2021-03-01T06:35:50Z")
**Posts on this page:** 2
**Page:** 1

<div class="post-metadata">

### Author: ![Nehemia](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/nehemia/32/3025_2.png) [@Nehemia](https://forums.percona.com/u/Nehemia)
#### Post date: [March 1, 2021, 6:35am UTC](https://forums.percona.com/t/data-at-rest-encryption-for-mysql/9470/1 "2021-03-01T06:35:50Z")

</div>

Reading this document [to enable TDE](https://www.percona.com/doc/percona-server/8.0/security/data-at-rest-encryption.html)  
I could not understand if using this feature will also encrypt the logs, temps tables, etc or I need to take care of each in addition to the TDE

---

<div class="post-metadata">

### Author: ![matthewb](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/matthewb/32/34_2.png) [@matthewb](https://forums.percona.com/u/matthewb)
#### Post date: [March 1, 2021, 1:30pm UTC](https://forums.percona.com/t/data-at-rest-encryption-for-mysql/9470/2 "2021-03-01T13:30:54Z")

</div>

MySQL allows for full customization, so you need to handle each aspect. You can encrypt a single table via ALTER TABLE, and you can turn on binary log encryption via ‘binlog\_encryption=ON’. Those are just two examples, consult the manual pages for all the other options.