<div id="docs-body">
 <div class="section">
  <div class="titlepage">
   <div>
    <div>
     <h4 class="title">
      <a name="keyring-system-variables">
      </a>
      8.4.4.16 Keyring System Variables
     </h4>
    </div>
   </div>
  </div>
  <a class="indexterm" name="idm46045239191424">
  </a>
  <p>
   MySQL Keyring plugins support the following system variables.
        Use them to configure keyring plugin operation. These variables
        are unavailable unless the appropriate keyring plugin is
        installed (see
   <a class="xref" href="keyring-plugin-installation.html" title="8.4.4.3 Keyring Plugin Installation">
    Section 8.4.4.3, “Keyring Plugin Installation”
   </a>
   ).
  </p>
  <div class="itemizedlist">
   <ul class="itemizedlist" style="list-style-type: disc; ">
    <li class="listitem">
     <p>
      <a name="sysvar_keyring_aws_cmk_id">
      </a>
      <a class="link" href="keyring-system-variables.html#sysvar_keyring_aws_cmk_id">
       <code class="literal">
        keyring_aws_cmk_id
       </code>
      </a>
     </p>
     <a class="indexterm" name="idm46045239186432">
     </a>
     <a class="indexterm" name="idm46045239185392">
     </a>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for keyring_aws_cmk_id">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --keyring-aws-cmk-id=value
          </code>
         </td>
        </tr>
        <tr>
         <th>
          System Variable
         </th>
         <td>
          <code class="literal">
           <a class="link" href="keyring-system-variables.html#sysvar_keyring_aws_cmk_id">
            keyring_aws_cmk_id
           </a>
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Scope
         </th>
         <td>
          Global
         </td>
        </tr>
        <tr>
         <th>
          Dynamic
         </th>
         <td>
          Yes
         </td>
        </tr>
        <tr>
         <th>
          <a class="link" href="optimizer-hints.html#optimizer-hints-set-var" title="Variable-Setting Hint Syntax">
           <code class="literal">
            SET_VAR
           </code>
          </a>
          Hint Applies
         </th>
         <td>
          No
         </td>
        </tr>
        <tr>
         <th>
          Type
         </th>
         <td>
          String
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <p>
      The KMS key ID obtained from the AWS KMS server and used by
            the
      <code class="literal">
       keyring_aws
      </code>
      plugin. This variable is
            unavailable unless that plugin is installed.
     </p>
     <p>
      This variable is mandatory. If not specified,
      <code class="literal">
       keyring_aws
      </code>
      initialization fails.
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="sysvar_keyring_aws_conf_file">
      </a>
      <a class="link" href="keyring-system-variables.html#sysvar_keyring_aws_conf_file">
       <code class="literal">
        keyring_aws_conf_file
       </code>
      </a>
     </p>
     <a class="indexterm" name="idm46045239161168">
     </a>
     <a class="indexterm" name="idm46045239160128">
     </a>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for keyring_aws_conf_file">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --keyring-aws-conf-file=file_name
          </code>
         </td>
        </tr>
        <tr>
         <th>
          System Variable
         </th>
         <td>
          <code class="literal">
           <a class="link" href="keyring-system-variables.html#sysvar_keyring_aws_conf_file">
            keyring_aws_conf_file
           </a>
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Scope
         </th>
         <td>
          Global
         </td>
        </tr>
        <tr>
         <th>
          Dynamic
         </th>
         <td>
          No
         </td>
        </tr>
        <tr>
         <th>
          <a class="link" href="optimizer-hints.html#optimizer-hints-set-var" title="Variable-Setting Hint Syntax">
           <code class="literal">
            SET_VAR
           </code>
          </a>
          Hint Applies
         </th>
         <td>
          No
         </td>
        </tr>
        <tr>
         <th>
          Type
         </th>
         <td>
          File name
         </td>
        </tr>
        <tr>
         <th>
          Default Value
         </th>
         <td>
          <code class="literal">
           platform specific
          </code>
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <p>
      The location of the configuration file for the
      <code class="literal">
       keyring_aws
      </code>
      plugin. This variable is
            unavailable unless that plugin is installed.
     </p>
     <p>
      At plugin startup,
      <code class="literal">
       keyring_aws
      </code>
      reads the
            AWS secret access key ID and key from the configuration
            file. For the
      <code class="literal">
       keyring_aws
      </code>
      plugin to start
            successfully, the configuration file must exist and contain
            valid secret access key information, initialized as
            described in
      <a class="xref" href="keyring-aws-plugin.html" title="8.4.4.7 Using the keyring_aws Amazon Web Services Keyring Plugin">
       Section 8.4.4.7, “Using the keyring_aws Amazon Web Services Keyring Plugin”
      </a>
      .
     </p>
     <p>
      The default file name is
      <code class="literal">
       keyring_aws_conf
      </code>
      , located in the default
            keyring file directory.
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="sysvar_keyring_aws_data_file">
      </a>
      <a class="link" href="keyring-system-variables.html#sysvar_keyring_aws_data_file">
       <code class="literal">
        keyring_aws_data_file
       </code>
      </a>
     </p>
     <a class="indexterm" name="idm46045239130656">
     </a>
     <a class="indexterm" name="idm46045239129616">
     </a>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for keyring_aws_data_file">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --keyring-aws-data-file
          </code>
         </td>
        </tr>
        <tr>
         <th>
          System Variable
         </th>
         <td>
          <code class="literal">
           <a class="link" href="keyring-system-variables.html#sysvar_keyring_aws_data_file">
            keyring_aws_data_file
           </a>
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Scope
         </th>
         <td>
          Global
         </td>
        </tr>
        <tr>
         <th>
          Dynamic
         </th>
         <td>
          No
         </td>
        </tr>
        <tr>
         <th>
          <a class="link" href="optimizer-hints.html#optimizer-hints-set-var" title="Variable-Setting Hint Syntax">
           <code class="literal">
            SET_VAR
           </code>
          </a>
          Hint Applies
         </th>
         <td>
          No
         </td>
        </tr>
        <tr>
         <th>
          Type
         </th>
         <td>
          File name
         </td>
        </tr>
        <tr>
         <th>
          Default Value
         </th>
         <td>
          <code class="literal">
           platform specific
          </code>
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <p>
      The location of the storage file for the
      <code class="literal">
       keyring_aws
      </code>
      plugin. This variable is
            unavailable unless that plugin is installed.
     </p>
     <p>
      At plugin startup, if the value assigned to
      <a class="link" href="keyring-system-variables.html#sysvar_keyring_aws_data_file">
       <code class="literal">
        keyring_aws_data_file
       </code>
      </a>
      specifies a file that does not exist, the
      <code class="literal">
       keyring_aws
      </code>
      plugin attempts to create it
            (as well as its parent directory, if necessary). If the file
            does exist,
      <code class="literal">
       keyring_aws
      </code>
      reads any
            encrypted keys contained in the file into its in-memory
            cache.
      <code class="literal">
       keyring_aws
      </code>
      does not cache
            unencrypted keys in memory.
     </p>
     <p>
      The default file name is
      <code class="literal">
       keyring_aws_data
      </code>
      , located in the default
            keyring file directory.
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="sysvar_keyring_aws_region">
      </a>
      <a class="link" href="keyring-system-variables.html#sysvar_keyring_aws_region">
       <code class="literal">
        keyring_aws_region
       </code>
      </a>
     </p>
     <a class="indexterm" name="idm46045239098800">
     </a>
     <a class="indexterm" name="idm46045239097760">
     </a>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for keyring_aws_region">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --keyring-aws-region=value
          </code>
         </td>
        </tr>
        <tr>
         <th>
          System Variable
         </th>
         <td>
          <code class="literal">
           <a class="link" href="keyring-system-variables.html#sysvar_keyring_aws_region">
            keyring_aws_region
           </a>
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Scope
         </th>
         <td>
          Global
         </td>
        </tr>
        <tr>
         <th>
          Dynamic
         </th>
         <td>
          Yes
         </td>
        </tr>
        <tr>
         <th>
          <a class="link" href="optimizer-hints.html#optimizer-hints-set-var" title="Variable-Setting Hint Syntax">
           <code class="literal">
            SET_VAR
           </code>
          </a>
          Hint Applies
         </th>
         <td>
          No
         </td>
        </tr>
        <tr>
         <th>
          Type
         </th>
         <td>
          Enumeration
         </td>
        </tr>
        <tr>
         <th>
          Default Value
         </th>
         <td>
          <code class="literal">
           us-east-1
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Valid Values
         </th>
         <td>
          <p class="valid-value">
           <code class="literal">
            af-south-1
           </code>
          </p>
          <p class="valid-value">
           <code class="literal">
            ap-east-1
           </code>
          </p>
          <p class="valid-value">
           <code class="literal">
            ap-northeast-1
           </code>
          </p>
          <p class="valid-value">
           <code class="literal">
            ap-northeast-2
           </code>
          </p>
          <p class="valid-value">
           <code class="literal">
            ap-northeast-3
           </code>
          </p>
          <p class="valid-value">
           <code class="literal">
            ap-south-1
           </code>
          </p>
          <p class="valid-value">
           <code class="literal">
            ap-southeast-1
           </code>
          </p>
          <p class="valid-value">
           <code class="literal">
            ap-southeast-2
           </code>
          </p>
          <p class="valid-value">
           <code class="literal">
            ca-central-1
           </code>
          </p>
          <p class="valid-value">
           <code class="literal">
            cn-north-1
           </code>
          </p>
          <p class="valid-value">
           <code class="literal">
            cn-northwest-1
           </code>
          </p>
          <p class="valid-value">
           <code class="literal">
            eu-central-1
           </code>
          </p>
          <p class="valid-value">
           <code class="literal">
            eu-north-1
           </code>
          </p>
          <p class="valid-value">
           <code class="literal">
            eu-south-1
           </code>
          </p>
          <p class="valid-value">
           <code class="literal">
            eu-west-1
           </code>
          </p>
          <p class="valid-value">
           <code class="literal">
            eu-west-2
           </code>
          </p>
          <p class="valid-value">
           <code class="literal">
            eu-west-3
           </code>
          </p>
          <p class="valid-value">
           <code class="literal">
            me-south-1
           </code>
          </p>
          <p class="valid-value">
           <code class="literal">
            sa-east-1
           </code>
          </p>
          <p class="valid-value">
           <code class="literal">
            us-east-1
           </code>
          </p>
          <p class="valid-value">
           <code class="literal">
            us-east-2
           </code>
          </p>
          <p class="valid-value">
           <code class="literal">
            us-gov-east-1
           </code>
          </p>
          <p class="valid-value">
           <code class="literal">
            us-iso-east-1
           </code>
          </p>
          <p class="valid-value">
           <code class="literal">
            us-iso-west-1
           </code>
          </p>
          <p class="valid-value">
           <code class="literal">
            us-isob-east-1
           </code>
          </p>
          <p class="valid-value">
           <code class="literal">
            us-west-1
           </code>
          </p>
          <p class="valid-value">
           <code class="literal">
            us-west-2
           </code>
          </p>
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <p>
      The AWS region for the
      <code class="literal">
       keyring_aws
      </code>
      plugin. This variable is unavailable unless that plugin is
            installed.
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="sysvar_keyring_hashicorp_auth_path">
      </a>
      <a class="link" href="keyring-system-variables.html#sysvar_keyring_hashicorp_auth_path">
       <code class="literal">
        keyring_hashicorp_auth_path
       </code>
      </a>
     </p>
     <a class="indexterm" name="idm46045239044560">
     </a>
     <a class="indexterm" name="idm46045239043456">
     </a>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for keyring_hashicorp_auth_path">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --keyring-hashicorp-auth-path=value
          </code>
         </td>
        </tr>
        <tr>
         <th>
          System Variable
         </th>
         <td>
          <code class="literal">
           <a class="link" href="keyring-system-variables.html#sysvar_keyring_hashicorp_auth_path">
            keyring_hashicorp_auth_path
           </a>
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Scope
         </th>
         <td>
          Global
         </td>
        </tr>
        <tr>
         <th>
          Dynamic
         </th>
         <td>
          Yes
         </td>
        </tr>
        <tr>
         <th>
          <a class="link" href="optimizer-hints.html#optimizer-hints-set-var" title="Variable-Setting Hint Syntax">
           <code class="literal">
            SET_VAR
           </code>
          </a>
          Hint Applies
         </th>
         <td>
          No
         </td>
        </tr>
        <tr>
         <th>
          Type
         </th>
         <td>
          String
         </td>
        </tr>
        <tr>
         <th>
          Default Value
         </th>
         <td>
          <code class="literal">
           /v1/auth/approle/login
          </code>
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <p>
      The authentication path where AppRole authentication is
            enabled within the HashiCorp Vault server, for use by the
      <code class="literal">
       keyring_hashicorp
      </code>
      plugin. This variable
            is unavailable unless that plugin is installed.
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="sysvar_keyring_hashicorp_ca_path">
      </a>
      <a class="link" href="keyring-system-variables.html#sysvar_keyring_hashicorp_ca_path">
       <code class="literal">
        keyring_hashicorp_ca_path
       </code>
      </a>
     </p>
     <a class="indexterm" name="idm46045239017984">
     </a>
     <a class="indexterm" name="idm46045239016880">
     </a>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for keyring_hashicorp_ca_path">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --keyring-hashicorp-ca-path=file_name
          </code>
         </td>
        </tr>
        <tr>
         <th>
          System Variable
         </th>
         <td>
          <code class="literal">
           <a class="link" href="keyring-system-variables.html#sysvar_keyring_hashicorp_ca_path">
            keyring_hashicorp_ca_path
           </a>
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Scope
         </th>
         <td>
          Global
         </td>
        </tr>
        <tr>
         <th>
          Dynamic
         </th>
         <td>
          Yes
         </td>
        </tr>
        <tr>
         <th>
          <a class="link" href="optimizer-hints.html#optimizer-hints-set-var" title="Variable-Setting Hint Syntax">
           <code class="literal">
            SET_VAR
           </code>
          </a>
          Hint Applies
         </th>
         <td>
          No
         </td>
        </tr>
        <tr>
         <th>
          Type
         </th>
         <td>
          File name
         </td>
        </tr>
        <tr>
         <th>
          Default Value
         </th>
         <td>
          <code class="literal">
           empty string
          </code>
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <p>
      The absolute path name of a local file accessible to the
            MySQL server that contains a properly formatted TLS
            certificate authority for use by the
      <code class="literal">
       keyring_hashicorp
      </code>
      plugin. This variable
            is unavailable unless that plugin is installed.
     </p>
     <p>
      If this variable is not set, the
      <code class="literal">
       keyring_hashicorp
      </code>
      plugin opens an HTTPS
            connection without using server certificate verification,
            and trusts any certificate delivered by the HashiCorp Vault
            server. For this to be safe, it must be assumed that the
            Vault server is not malicious and that no man-in-the-middle
            attack is possible. If those assumptions are invalid, set
      <a class="link" href="keyring-system-variables.html#sysvar_keyring_hashicorp_ca_path">
       <code class="literal">
        keyring_hashicorp_ca_path
       </code>
      </a>
      to the path of a trusted CA certificate. (For example, for
            the instructions in
      <a class="xref" href="keyring-hashicorp-plugin.html#keyring-hashicorp-certificate-configuration" title="Certificate and Key Preparation">
       Certificate and Key Preparation
      </a>
      ,
            this is the
      <code class="filename">
       company.crt
      </code>
      file.)
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="sysvar_keyring_hashicorp_caching">
      </a>
      <a class="link" href="keyring-system-variables.html#sysvar_keyring_hashicorp_caching">
       <code class="literal">
        keyring_hashicorp_caching
       </code>
      </a>
     </p>
     <a class="indexterm" name="idm46045238986896">
     </a>
     <a class="indexterm" name="idm46045238985792">
     </a>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for keyring_hashicorp_caching">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --keyring-hashicorp-caching[={OFF|ON}]
          </code>
         </td>
        </tr>
        <tr>
         <th>
          System Variable
         </th>
         <td>
          <code class="literal">
           <a class="link" href="keyring-system-variables.html#sysvar_keyring_hashicorp_caching">
            keyring_hashicorp_caching
           </a>
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Scope
         </th>
         <td>
          Global
         </td>
        </tr>
        <tr>
         <th>
          Dynamic
         </th>
         <td>
          Yes
         </td>
        </tr>
        <tr>
         <th>
          <a class="link" href="optimizer-hints.html#optimizer-hints-set-var" title="Variable-Setting Hint Syntax">
           <code class="literal">
            SET_VAR
           </code>
          </a>
          Hint Applies
         </th>
         <td>
          No
         </td>
        </tr>
        <tr>
         <th>
          Type
         </th>
         <td>
          Boolean
         </td>
        </tr>
        <tr>
         <th>
          Default Value
         </th>
         <td>
          <code class="literal">
           OFF
          </code>
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <p>
      Whether to enable the optional in-memory key cache used by
            the
      <code class="literal">
       keyring_hashicorp
      </code>
      plugin to cache
            keys from the HashiCorp Vault server. This variable is
            unavailable unless that plugin is installed. If the cache is
            enabled, the plugin populates it during initialization.
            Otherwise, the plugin populates only the key list during
            initialization.
     </p>
     <p>
      Enabling the cache is a compromise: It improves performance,
            but maintains a copy of sensitive key information in memory,
            which may be undesirable for security purposes.
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="sysvar_keyring_hashicorp_commit_auth_path">
      </a>
      <a class="link" href="keyring-system-variables.html#sysvar_keyring_hashicorp_commit_auth_path">
       <code class="literal">
        keyring_hashicorp_commit_auth_path
       </code>
      </a>
     </p>
     <a class="indexterm" name="idm46045238959408">
     </a>
     <a class="indexterm" name="idm46045238958368">
     </a>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for keyring_hashicorp_commit_auth_path">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          System Variable
         </th>
         <td>
          <code class="literal">
           <a class="link" href="keyring-system-variables.html#sysvar_keyring_hashicorp_commit_auth_path">
            keyring_hashicorp_commit_auth_path
           </a>
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Scope
         </th>
         <td>
          Global
         </td>
        </tr>
        <tr>
         <th>
          Dynamic
         </th>
         <td>
          No
         </td>
        </tr>
        <tr>
         <th>
          <a class="link" href="optimizer-hints.html#optimizer-hints-set-var" title="Variable-Setting Hint Syntax">
           <code class="literal">
            SET_VAR
           </code>
          </a>
          Hint Applies
         </th>
         <td>
          No
         </td>
        </tr>
        <tr>
         <th>
          Type
         </th>
         <td>
          String
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <p>
      This variable is associated with
      <a class="link" href="keyring-system-variables.html#sysvar_keyring_hashicorp_auth_path">
       <code class="literal">
        keyring_hashicorp_auth_path
       </code>
      </a>
      ,
            from which it takes its value during
      <code class="literal">
       keyring_hashicorp
      </code>
      plugin initialization.
            This variable is unavailable unless that plugin is
            installed. It reflects the
      <span class="quote">
       “
       <span class="quote">
        committed
       </span>
       ”
      </span>
      value
            actually used for plugin operation if initialization
            succeeds. For additional information, see
      <a class="xref" href="keyring-hashicorp-plugin.html#keyring-hashicorp-plugin-configuration" title="keyring_hashicorp Configuration">
       keyring_hashicorp Configuration
      </a>
      .
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="sysvar_keyring_hashicorp_commit_ca_path">
      </a>
      <a class="link" href="keyring-system-variables.html#sysvar_keyring_hashicorp_commit_ca_path">
       <code class="literal">
        keyring_hashicorp_commit_ca_path
       </code>
      </a>
     </p>
     <a class="indexterm" name="idm46045238935216">
     </a>
     <a class="indexterm" name="idm46045238934112">
     </a>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for keyring_hashicorp_commit_ca_path">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          System Variable
         </th>
         <td>
          <code class="literal">
           <a class="link" href="keyring-system-variables.html#sysvar_keyring_hashicorp_commit_ca_path">
            keyring_hashicorp_commit_ca_path
           </a>
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Scope
         </th>
         <td>
          Global
         </td>
        </tr>
        <tr>
         <th>
          Dynamic
         </th>
         <td>
          No
         </td>
        </tr>
        <tr>
         <th>
          <a class="link" href="optimizer-hints.html#optimizer-hints-set-var" title="Variable-Setting Hint Syntax">
           <code class="literal">
            SET_VAR
           </code>
          </a>
          Hint Applies
         </th>
         <td>
          No
         </td>
        </tr>
        <tr>
         <th>
          Type
         </th>
         <td>
          String
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <p>
      This variable is associated with
      <a class="link" href="keyring-system-variables.html#sysvar_keyring_hashicorp_ca_path">
       <code class="literal">
        keyring_hashicorp_ca_path
       </code>
      </a>
      ,
            from which it takes its value during
      <code class="literal">
       keyring_hashicorp
      </code>
      plugin initialization.
            This variable is unavailable unless that plugin is
            installed. It reflects the
      <span class="quote">
       “
       <span class="quote">
        committed
       </span>
       ”
      </span>
      value
            actually used for plugin operation if initialization
            succeeds. For additional information, see
      <a class="xref" href="keyring-hashicorp-plugin.html#keyring-hashicorp-plugin-configuration" title="keyring_hashicorp Configuration">
       keyring_hashicorp Configuration
      </a>
      .
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="sysvar_keyring_hashicorp_commit_caching">
      </a>
      <a class="link" href="keyring-system-variables.html#sysvar_keyring_hashicorp_commit_caching">
       <code class="literal">
        keyring_hashicorp_commit_caching
       </code>
      </a>
     </p>
     <a class="indexterm" name="idm46045238910992">
     </a>
     <a class="indexterm" name="idm46045238909888">
     </a>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for keyring_hashicorp_commit_caching">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          System Variable
         </th>
         <td>
          <code class="literal">
           <a class="link" href="keyring-system-variables.html#sysvar_keyring_hashicorp_commit_caching">
            keyring_hashicorp_commit_caching
           </a>
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Scope
         </th>
         <td>
          Global
         </td>
        </tr>
        <tr>
         <th>
          Dynamic
         </th>
         <td>
          No
         </td>
        </tr>
        <tr>
         <th>
          <a class="link" href="optimizer-hints.html#optimizer-hints-set-var" title="Variable-Setting Hint Syntax">
           <code class="literal">
            SET_VAR
           </code>
          </a>
          Hint Applies
         </th>
         <td>
          No
         </td>
        </tr>
        <tr>
         <th>
          Type
         </th>
         <td>
          String
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <p>
      This variable is associated with
      <a class="link" href="keyring-system-variables.html#sysvar_keyring_hashicorp_caching">
       <code class="literal">
        keyring_hashicorp_caching
       </code>
      </a>
      ,
            from which it takes its value during
      <code class="literal">
       keyring_hashicorp
      </code>
      plugin initialization.
            This variable is unavailable unless that plugin is
            installed. It reflects the
      <span class="quote">
       “
       <span class="quote">
        committed
       </span>
       ”
      </span>
      value
            actually used for plugin operation if initialization
            succeeds. For additional information, see
      <a class="xref" href="keyring-hashicorp-plugin.html#keyring-hashicorp-plugin-configuration" title="keyring_hashicorp Configuration">
       keyring_hashicorp Configuration
      </a>
      .
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="sysvar_keyring_hashicorp_commit_role_id">
      </a>
      <a class="link" href="keyring-system-variables.html#sysvar_keyring_hashicorp_commit_role_id">
       <code class="literal">
        keyring_hashicorp_commit_role_id
       </code>
      </a>
     </p>
     <a class="indexterm" name="idm46045238886768">
     </a>
     <a class="indexterm" name="idm46045238885664">
     </a>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for keyring_hashicorp_commit_role_id">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          System Variable
         </th>
         <td>
          <code class="literal">
           <a class="link" href="keyring-system-variables.html#sysvar_keyring_hashicorp_commit_role_id">
            keyring_hashicorp_commit_role_id
           </a>
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Scope
         </th>
         <td>
          Global
         </td>
        </tr>
        <tr>
         <th>
          Dynamic
         </th>
         <td>
          No
         </td>
        </tr>
        <tr>
         <th>
          <a class="link" href="optimizer-hints.html#optimizer-hints-set-var" title="Variable-Setting Hint Syntax">
           <code class="literal">
            SET_VAR
           </code>
          </a>
          Hint Applies
         </th>
         <td>
          No
         </td>
        </tr>
        <tr>
         <th>
          Type
         </th>
         <td>
          String
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <p>
      This variable is associated with
      <a class="link" href="keyring-system-variables.html#sysvar_keyring_hashicorp_role_id">
       <code class="literal">
        keyring_hashicorp_role_id
       </code>
      </a>
      ,
            from which it takes its value during
      <code class="literal">
       keyring_hashicorp
      </code>
      plugin initialization.
            This variable is unavailable unless that plugin is
            installed. It reflects the
      <span class="quote">
       “
       <span class="quote">
        committed
       </span>
       ”
      </span>
      value
            actually used for plugin operation if initialization
            succeeds. For additional information, see
      <a class="xref" href="keyring-hashicorp-plugin.html#keyring-hashicorp-plugin-configuration" title="keyring_hashicorp Configuration">
       keyring_hashicorp Configuration
      </a>
      .
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="sysvar_keyring_hashicorp_commit_server_url">
      </a>
      <a class="link" href="keyring-system-variables.html#sysvar_keyring_hashicorp_commit_server_url">
       <code class="literal">
        keyring_hashicorp_commit_server_url
       </code>
      </a>
     </p>
     <a class="indexterm" name="idm46045238862352">
     </a>
     <a class="indexterm" name="idm46045238861312">
     </a>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for keyring_hashicorp_commit_server_url">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          System Variable
         </th>
         <td>
          <code class="literal">
           <a class="link" href="keyring-system-variables.html#sysvar_keyring_hashicorp_commit_server_url">
            keyring_hashicorp_commit_server_url
           </a>
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Scope
         </th>
         <td>
          Global
         </td>
        </tr>
        <tr>
         <th>
          Dynamic
         </th>
         <td>
          No
         </td>
        </tr>
        <tr>
         <th>
          <a class="link" href="optimizer-hints.html#optimizer-hints-set-var" title="Variable-Setting Hint Syntax">
           <code class="literal">
            SET_VAR
           </code>
          </a>
          Hint Applies
         </th>
         <td>
          No
         </td>
        </tr>
        <tr>
         <th>
          Type
         </th>
         <td>
          String
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <p>
      This variable is associated with
      <a class="link" href="keyring-system-variables.html#sysvar_keyring_hashicorp_server_url">
       <code class="literal">
        keyring_hashicorp_server_url
       </code>
      </a>
      ,
            from which it takes its value during
      <code class="literal">
       keyring_hashicorp
      </code>
      plugin initialization.
            This variable is unavailable unless that plugin is
            installed. It reflects the
      <span class="quote">
       “
       <span class="quote">
        committed
       </span>
       ”
      </span>
      value
            actually used for plugin operation if initialization
            succeeds. For additional information, see
      <a class="xref" href="keyring-hashicorp-plugin.html#keyring-hashicorp-plugin-configuration" title="keyring_hashicorp Configuration">
       keyring_hashicorp Configuration
      </a>
      .
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="sysvar_keyring_hashicorp_commit_store_path">
      </a>
      <a class="link" href="keyring-system-variables.html#sysvar_keyring_hashicorp_commit_store_path">
       <code class="literal">
        keyring_hashicorp_commit_store_path
       </code>
      </a>
     </p>
     <a class="indexterm" name="idm46045238837968">
     </a>
     <a class="indexterm" name="idm46045238836928">
     </a>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for keyring_hashicorp_commit_store_path">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          System Variable
         </th>
         <td>
          <code class="literal">
           <a class="link" href="keyring-system-variables.html#sysvar_keyring_hashicorp_commit_store_path">
            keyring_hashicorp_commit_store_path
           </a>
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Scope
         </th>
         <td>
          Global
         </td>
        </tr>
        <tr>
         <th>
          Dynamic
         </th>
         <td>
          No
         </td>
        </tr>
        <tr>
         <th>
          <a class="link" href="optimizer-hints.html#optimizer-hints-set-var" title="Variable-Setting Hint Syntax">
           <code class="literal">
            SET_VAR
           </code>
          </a>
          Hint Applies
         </th>
         <td>
          No
         </td>
        </tr>
        <tr>
         <th>
          Type
         </th>
         <td>
          String
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <p>
      This variable is associated with
      <a class="link" href="keyring-system-variables.html#sysvar_keyring_hashicorp_store_path">
       <code class="literal">
        keyring_hashicorp_store_path
       </code>
      </a>
      ,
            from which it takes its value during
      <code class="literal">
       keyring_hashicorp
      </code>
      plugin initialization.
            This variable is unavailable unless that plugin is
            installed. It reflects the
      <span class="quote">
       “
       <span class="quote">
        committed
       </span>
       ”
      </span>
      value
            actually used for plugin operation if initialization
            succeeds. For additional information, see
      <a class="xref" href="keyring-hashicorp-plugin.html#keyring-hashicorp-plugin-configuration" title="keyring_hashicorp Configuration">
       keyring_hashicorp Configuration
      </a>
      .
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="sysvar_keyring_hashicorp_role_id">
      </a>
      <a class="link" href="keyring-system-variables.html#sysvar_keyring_hashicorp_role_id">
       <code class="literal">
        keyring_hashicorp_role_id
       </code>
      </a>
     </p>
     <a class="indexterm" name="idm46045238813712">
     </a>
     <a class="indexterm" name="idm46045238812608">
     </a>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for keyring_hashicorp_role_id">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --keyring-hashicorp-role-id=value
          </code>
         </td>
        </tr>
        <tr>
         <th>
          System Variable
         </th>
         <td>
          <code class="literal">
           <a class="link" href="keyring-system-variables.html#sysvar_keyring_hashicorp_role_id">
            keyring_hashicorp_role_id
           </a>
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Scope
         </th>
         <td>
          Global
         </td>
        </tr>
        <tr>
         <th>
          Dynamic
         </th>
         <td>
          Yes
         </td>
        </tr>
        <tr>
         <th>
          <a class="link" href="optimizer-hints.html#optimizer-hints-set-var" title="Variable-Setting Hint Syntax">
           <code class="literal">
            SET_VAR
           </code>
          </a>
          Hint Applies
         </th>
         <td>
          No
         </td>
        </tr>
        <tr>
         <th>
          Type
         </th>
         <td>
          String
         </td>
        </tr>
        <tr>
         <th>
          Default Value
         </th>
         <td>
          <code class="literal">
           empty string
          </code>
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <p>
      The HashiCorp Vault AppRole authentication role ID, for use
            by the
      <code class="literal">
       keyring_hashicorp
      </code>
      plugin. This
            variable is unavailable unless that plugin is installed. The
            value must be in UUID format.
     </p>
     <p>
      This variable is mandatory. If not specified,
      <code class="literal">
       keyring_hashicorp
      </code>
      initialization fails.
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="sysvar_keyring_hashicorp_secret_id">
      </a>
      <a class="link" href="keyring-system-variables.html#sysvar_keyring_hashicorp_secret_id">
       <code class="literal">
        keyring_hashicorp_secret_id
       </code>
      </a>
     </p>
     <a class="indexterm" name="idm46045238785936">
     </a>
     <a class="indexterm" name="idm46045238784832">
     </a>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for keyring_hashicorp_secret_id">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --keyring-hashicorp-secret-id=value
          </code>
         </td>
        </tr>
        <tr>
         <th>
          System Variable
         </th>
         <td>
          <code class="literal">
           <a class="link" href="keyring-system-variables.html#sysvar_keyring_hashicorp_secret_id">
            keyring_hashicorp_secret_id
           </a>
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Scope
         </th>
         <td>
          Global
         </td>
        </tr>
        <tr>
         <th>
          Dynamic
         </th>
         <td>
          Yes
         </td>
        </tr>
        <tr>
         <th>
          <a class="link" href="optimizer-hints.html#optimizer-hints-set-var" title="Variable-Setting Hint Syntax">
           <code class="literal">
            SET_VAR
           </code>
          </a>
          Hint Applies
         </th>
         <td>
          No
         </td>
        </tr>
        <tr>
         <th>
          Type
         </th>
         <td>
          String
         </td>
        </tr>
        <tr>
         <th>
          Default Value
         </th>
         <td>
          <code class="literal">
           empty string
          </code>
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <p>
      The HashiCorp Vault AppRole authentication secret ID, for
            use by the
      <code class="literal">
       keyring_hashicorp
      </code>
      plugin. This
            variable is unavailable unless that plugin is installed. The
            value must be in UUID format.
     </p>
     <p>
      This variable is mandatory. If not specified,
      <code class="literal">
       keyring_hashicorp
      </code>
      initialization fails.
     </p>
     <p>
      The value of this variable is sensitive, so its value is
            masked by
      <code class="literal">
       *
      </code>
      characters when displayed.
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="sysvar_keyring_hashicorp_server_url">
      </a>
      <a class="link" href="keyring-system-variables.html#sysvar_keyring_hashicorp_server_url">
       <code class="literal">
        keyring_hashicorp_server_url
       </code>
      </a>
     </p>
     <a class="indexterm" name="idm46045238756960">
     </a>
     <a class="indexterm" name="idm46045238755856">
     </a>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for keyring_hashicorp_server_url">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --keyring-hashicorp-server-url=value
          </code>
         </td>
        </tr>
        <tr>
         <th>
          System Variable
         </th>
         <td>
          <code class="literal">
           <a class="link" href="keyring-system-variables.html#sysvar_keyring_hashicorp_server_url">
            keyring_hashicorp_server_url
           </a>
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Scope
         </th>
         <td>
          Global
         </td>
        </tr>
        <tr>
         <th>
          Dynamic
         </th>
         <td>
          Yes
         </td>
        </tr>
        <tr>
         <th>
          <a class="link" href="optimizer-hints.html#optimizer-hints-set-var" title="Variable-Setting Hint Syntax">
           <code class="literal">
            SET_VAR
           </code>
          </a>
          Hint Applies
         </th>
         <td>
          No
         </td>
        </tr>
        <tr>
         <th>
          Type
         </th>
         <td>
          String
         </td>
        </tr>
        <tr>
         <th>
          Default Value
         </th>
         <td>
          <code class="literal">
           https://127.0.0.1:8200
          </code>
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <p>
      The HashiCorp Vault server URL, for use by the
      <code class="literal">
       keyring_hashicorp
      </code>
      plugin. This variable
            is unavailable unless that plugin is installed. The value
            must begin with
      <code class="literal">
       https://
      </code>
      .
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="sysvar_keyring_hashicorp_store_path">
      </a>
      <a class="link" href="keyring-system-variables.html#sysvar_keyring_hashicorp_store_path">
       <code class="literal">
        keyring_hashicorp_store_path
       </code>
      </a>
     </p>
     <a class="indexterm" name="idm46045238729632">
     </a>
     <a class="indexterm" name="idm46045238728528">
     </a>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for keyring_hashicorp_store_path">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --keyring-hashicorp-store-path=value
          </code>
         </td>
        </tr>
        <tr>
         <th>
          System Variable
         </th>
         <td>
          <code class="literal">
           <a class="link" href="keyring-system-variables.html#sysvar_keyring_hashicorp_store_path">
            keyring_hashicorp_store_path
           </a>
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Scope
         </th>
         <td>
          Global
         </td>
        </tr>
        <tr>
         <th>
          Dynamic
         </th>
         <td>
          Yes
         </td>
        </tr>
        <tr>
         <th>
          <a class="link" href="optimizer-hints.html#optimizer-hints-set-var" title="Variable-Setting Hint Syntax">
           <code class="literal">
            SET_VAR
           </code>
          </a>
          Hint Applies
         </th>
         <td>
          No
         </td>
        </tr>
        <tr>
         <th>
          Type
         </th>
         <td>
          String
         </td>
        </tr>
        <tr>
         <th>
          Default Value
         </th>
         <td>
          <code class="literal">
           empty string
          </code>
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <p>
      A store path within the HashiCorp Vault server that is
            writeable when appropriate AppRole credentials are provided
            by the
      <code class="literal">
       keyring_hashicorp
      </code>
      plugin. This
            variable is unavailable unless that plugin is installed. To
            specify the credentials, set the
      <a class="link" href="keyring-system-variables.html#sysvar_keyring_hashicorp_role_id">
       <code class="literal">
        keyring_hashicorp_role_id
       </code>
      </a>
      and
      <a class="link" href="keyring-system-variables.html#sysvar_keyring_hashicorp_secret_id">
       <code class="literal">
        keyring_hashicorp_secret_id
       </code>
      </a>
      system variables (for example, as shown in
      <a class="xref" href="keyring-hashicorp-plugin.html#keyring-hashicorp-plugin-configuration" title="keyring_hashicorp Configuration">
       keyring_hashicorp Configuration
      </a>
      ).
     </p>
     <p>
      This variable is mandatory. If not specified,
      <code class="literal">
       keyring_hashicorp
      </code>
      initialization fails.
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="sysvar_keyring_okv_conf_dir">
      </a>
      <a class="link" href="keyring-system-variables.html#sysvar_keyring_okv_conf_dir">
       <code class="literal">
        keyring_okv_conf_dir
       </code>
      </a>
     </p>
     <a class="indexterm" name="idm46045238698368">
     </a>
     <a class="indexterm" name="idm46045238697328">
     </a>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for keyring_okv_conf_dir">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --keyring-okv-conf-dir=dir_name
          </code>
         </td>
        </tr>
        <tr>
         <th>
          System Variable
         </th>
         <td>
          <code class="literal">
           <a class="link" href="keyring-system-variables.html#sysvar_keyring_okv_conf_dir">
            keyring_okv_conf_dir
           </a>
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Scope
         </th>
         <td>
          Global
         </td>
        </tr>
        <tr>
         <th>
          Dynamic
         </th>
         <td>
          Yes
         </td>
        </tr>
        <tr>
         <th>
          <a class="link" href="optimizer-hints.html#optimizer-hints-set-var" title="Variable-Setting Hint Syntax">
           <code class="literal">
            SET_VAR
           </code>
          </a>
          Hint Applies
         </th>
         <td>
          No
         </td>
        </tr>
        <tr>
         <th>
          Type
         </th>
         <td>
          Directory name
         </td>
        </tr>
        <tr>
         <th>
          Default Value
         </th>
         <td>
          <code class="literal">
           empty string
          </code>
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <p>
      The path name of the directory that stores configuration
            information used by the
      <code class="literal">
       keyring_okv
      </code>
      plugin. This variable is unavailable unless that plugin is
            installed. The location should be a directory considered for
            use only by the
      <code class="literal">
       keyring_okv
      </code>
      plugin. For
            example, do not locate the directory under the data
            directory.
     </p>
     <p>
      The default
      <a class="link" href="keyring-system-variables.html#sysvar_keyring_okv_conf_dir">
       <code class="literal">
        keyring_okv_conf_dir
       </code>
      </a>
      value
            is empty. For the
      <code class="literal">
       keyring_okv
      </code>
      plugin to
            be able to access Oracle Key Vault, the value must be set to
            a directory that contains Oracle Key Vault configuration and
            SSL materials. For instructions on setting up this
            directory, see
      <a class="xref" href="keyring-okv-plugin.html" title="8.4.4.6 Using the keyring_okv KMIP Plugin">
       Section 8.4.4.6, “Using the keyring_okv KMIP Plugin”
      </a>
      .
     </p>
     <p>
      The directory should have a restrictive mode and be
            accessible only to the account used to run the MySQL server.
            For example, on Unix and Unix-like systems, to use the
      <code class="filename">
       /usr/local/mysql/mysql-keyring-okv
      </code>
      directory, the following commands (executed as
      <code class="literal">
       root
      </code>
      ) create the directory and set its
            mode and ownership:
     </p>
     <div class="copytoclipboard-wrapper">
      <pre class="programlisting language-terminal"><div class="docs-select-all right" id="sa19901120"><div class="copy-help left">Press ⌘+C to copy</div> <div class="right"><button class="clipboard-btn" title="Copy to Clipboard"><span class="icon-clipboard"></span></button></div></div><code class="language-terminal">cd /usr/local/mysql
mkdir mysql-keyring-okv
chmod 750 mysql-keyring-okv
chown mysql mysql-keyring-okv
chgrp mysql mysql-keyring-okv</code></pre>
     </div>
     <p>
      If the value assigned to
      <a class="link" href="keyring-system-variables.html#sysvar_keyring_okv_conf_dir">
       <code class="literal">
        keyring_okv_conf_dir
       </code>
      </a>
      specifies a directory that does not exist, or that does not
            contain configuration information that enables a connection
            to Oracle Key Vault to be established,
      <code class="literal">
       keyring_okv
      </code>
      writes an error message to
            the error log. If an attempted runtime assignment to
      <a class="link" href="keyring-system-variables.html#sysvar_keyring_okv_conf_dir">
       <code class="literal">
        keyring_okv_conf_dir
       </code>
      </a>
      results in an error, the variable value and keyring
            operation remain unchanged.
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="sysvar_keyring_operations">
      </a>
      <a class="link" href="keyring-system-variables.html#sysvar_keyring_operations">
       <code class="literal">
        keyring_operations
       </code>
      </a>
     </p>
     <a class="indexterm" name="idm46045238660256">
     </a>
     <a class="indexterm" name="idm46045238659216">
     </a>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for keyring_operations">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          System Variable
         </th>
         <td>
          <code class="literal">
           <a class="link" href="keyring-system-variables.html#sysvar_keyring_operations">
            keyring_operations
           </a>
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Scope
         </th>
         <td>
          Global
         </td>
        </tr>
        <tr>
         <th>
          Dynamic
         </th>
         <td>
          Yes
         </td>
        </tr>
        <tr>
         <th>
          <a class="link" href="optimizer-hints.html#optimizer-hints-set-var" title="Variable-Setting Hint Syntax">
           <code class="literal">
            SET_VAR
           </code>
          </a>
          Hint Applies
         </th>
         <td>
          No
         </td>
        </tr>
        <tr>
         <th>
          Type
         </th>
         <td>
          Boolean
         </td>
        </tr>
        <tr>
         <th>
          Default Value
         </th>
         <td>
          <code class="literal">
           ON
          </code>
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <p>
      Whether keyring operations are enabled. This variable is
            used during key migration operations. See
      <a class="xref" href="keyring-key-migration.html" title="8.4.4.11 Migrating Keys Between Keyring Keystores">
       Section 8.4.4.11, “Migrating Keys Between Keyring Keystores”
      </a>
      . The privileges
            required to modify this variable are
      <a class="link" href="privileges-provided.html#priv_encryption-key-admin">
       <code class="literal">
        ENCRYPTION_KEY_ADMIN
       </code>
      </a>
      in
            addition to either
      <a class="link" href="privileges-provided.html#priv_system-variables-admin">
       <code class="literal">
        SYSTEM_VARIABLES_ADMIN
       </code>
      </a>
      or the
            deprecated
      <a class="link" href="privileges-provided.html#priv_super">
       <code class="literal">
        SUPER
       </code>
      </a>
      privilege.
     </p>
    </li>
   </ul>
  </div>
 </div>
 <br/>
</div>
