# Mysql backup encryption

**URL:** <https://forums.percona.com/t/mysql-backup-encryption/14390>\
**Category:** Percona XtraDB Cluster 8.x\
**Tags:** mysql, closed-no-reply\
**Created:** [February 14, 2022, 9:03am UTC](https://forums.percona.com/t/mysql-backup-encryption/14390 "2022-02-14T09:03:58Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![paul\_sinke](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/paul_sinke/32/5748_2.png) [@paul\_sinke](https://forums.percona.com/u/paul_sinke)\
**Post date:** [February 14, 2022, 9:03am UTC](https://forums.percona.com/t/mysql-backup-encryption/14390/1 "2022-02-14T09:03:58Z")

</div>

Hello,  
I want to have encrypted backups. In order to do this I found [this](https://www.percona.com/doc/kubernetes-operator-for-pxc/encryption.html) documentation, where data at rest encryption is described. After following installation process I added `Vault` to my cluster with few demo records in the database, and tried to make backup using `backup.yaml` file, and ended up with pod status of `Error`. Does backups with encrypted data should work by default after adding vault, or some additional configuration is required? If taking this approach, is it possible to use that backup outside the cluster, where it was made?  
Also I checked XtraBackup documentation, and found that it has `encrypt`, `decrypt`, and `encrypt-key` options which should enable file encryption. This sounds like a perfect solution for me. I assume that these parameters should be provided in `configuration` section of `cr.yaml.` file. After doing that and applying `backup.yaml` file it gets `Error` status. What made me confused, is that in [this](https://www.percona.com/doc/percona-xtradb-cluster/8.0/manual/xtrabackup_sst.html) documents, `XtraBackup-based Encryption` section, previously mentioned options are described as not available. I am not sure if it is relevant, but are these options still supported for backups using `PXC 8.0`?  
To summarize I don’t really need data at rest encryption. I want to have encrypted backup files in volume, and be able to move it to other cluster or use that data in my local machine if needed. Maybe I can get any suggestions about encryption options also?