Question about pg_tde use HashiCorp Vault to achieve rotate key

[kevin310007]

Hi, I’m trying to use pg_tde and HashiCorp Vault to achieve rotate key.
Here are my steps below:

1. I start the HashiCorp Vault:
   
   

2. Set the environment variable
   

3. Check the vault service is running ok.
   

   

4. Store two keys
   

   

5. Valid the keys
   

   

6. Set the pg_tde_policy.hcl
   

   

7. Write in and read the pg_tde_policy
   

   

8.Create a new token relate to the pg_tde_policy

9. Valid the new token
   

   

10. Connect to database and check the status
    

    

11. Create a new provider through HashiCorp Vault and set the principal key
    

    

12. Restart the percona postgrsql service
    

13. When I try to connect database again, it seems core dumped…
    

    

Any suggestions for my problem?

Thx!

[Robert_Bernier]

Hi,

I’ve notified our pg_tde developers to get back to you on this issue!

[Dragos_Andriciuc]

Hello Kevin,

We have recently updated our documentation site here: pg_tde documentation

Please let us know your thoughts, and if you have the time to go through the setup again, let us know your feedback, we really appreciate it, thank you!