# Keyring\_component plugin and pxb

**URL:** <https://forums.percona.com/t/keyring-component-plugin-and-pxb/31740>\
**Category:** Percona XtraBackup\
**Created:** [July 22, 2024, 6:09am UTC](https://forums.percona.com/t/keyring-component-plugin-and-pxb/31740 "2024-07-22T06:09:11Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Charly\_Wu](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/charly_wu/32/16997_2.png) [@Charly\_Wu](https://forums.percona.com/u/Charly_Wu)\
**Post date:** [July 22, 2024, 6:09am UTC](https://forums.percona.com/t/keyring-component-plugin-and-pxb/31740/1 "2024-07-22T06:09:11Z")

</div>

Hi,

What is the process of backup and restore if the mysql is using keyring component?

Based on [this](https://docs.percona.com/percona-xtrabackup/8.0/encrypted-innodb-tablespace-backups.html#prepare-the-backup-with-component-keyring-config), is my understanding correct that for performing backup, we don’t need to specify the keyring component path but to prepare the backup?

Do we need to have a copy of keyring component file which is pointed by the path specified in component\_keyring\_file.cnf file, e.g.? everytime we perform backup with pxb?

```auto
component_keyring_file.cnf: 
    {
      "path": "/bitnami/mysql/data/component_keyring_file",
      "read_only": false
    }

```

---

<div class="post-metadata">

**Author:** ![Denis\_Subbota](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/denis_subbota/32/23607_2.png) [@Denis\_Subbota](https://forums.percona.com/u/Denis_Subbota)\
**Post date:** [September 2, 2024, 7:00am UTC](https://forums.percona.com/t/keyring-component-plugin-and-pxb/31740/2 "2024-09-02T07:00:51Z")

</div>

Hello Charly,  
Yes, that’s correct. To take a backup, you don’t need to provide the keyring path. However, to prepare a backup, you need to have access to the keyring file on the instance from which you took the backup.

Regards,  
Denis Subbota.  
Managed Services, Percona.