<div id="docs-body">
 <div class="section">
  <div class="titlepage">
   <div>
    <div>
     <h3 class="title">
      <a name="mysql-migrate-keyring">
      </a>
      6.6.8 mysql_migrate_keyring — Keyring Key Migration Utility
     </h3>
    </div>
   </div>
  </div>
  <a class="indexterm" name="idm46045305880480">
  </a>
  <p>
   The
   <a class="link" href="mysql-migrate-keyring.html" title="6.6.8 mysql_migrate_keyring — Keyring Key Migration Utility">
    <span class="command">
     <strong>
      mysql_migrate_keyring
     </strong>
    </span>
   </a>
   utility migrates
        keys between one keyring component and another. It supports
        offline and online migrations.
  </p>
  <p>
   Invoke
   <a class="link" href="mysql-migrate-keyring.html" title="6.6.8 mysql_migrate_keyring — Keyring Key Migration Utility">
    <span class="command">
     <strong>
      mysql_migrate_keyring
     </strong>
    </span>
   </a>
   like this (enter
        the command on a single line):
  </p>
  <div class="copytoclipboard-wrapper">
   <pre class="programlisting language-terminal"><div class="docs-select-all right" id="sa54370315"><div class="copy-help left">Press ⌘+C to copy</div> <div class="right"><button class="clipboard-btn" title="Copy to Clipboard"><span class="icon-clipboard"></span></button></div></div><code class="language-terminal">mysql_migrate_keyring
  <span class="token constant">--component-dir</span><span class="token attr-value"><span class="token punctuation">=</span><em class="replaceable">dir_name</em></span>
  <span class="token constant">--source-keyring</span><span class="token attr-value"><span class="token punctuation">=</span><em class="replaceable">name</em></span>
  <span class="token constant">--destination-keyring</span><span class="token attr-value"><span class="token punctuation">=</span><em class="replaceable">name</em></span>
  <span class="token punctuation">[</span><em class="replaceable">other options</em><span class="token punctuation">]</span></code></pre>
  </div>
  <p>
   For information about key migrations and instructions describing
        how to perform them using
   <a class="link" href="mysql-migrate-keyring.html" title="6.6.8 mysql_migrate_keyring — Keyring Key Migration Utility">
    <span class="command">
     <strong>
      mysql_migrate_keyring
     </strong>
    </span>
   </a>
   and other methods, see
   <a class="xref" href="keyring-key-migration.html" title="8.4.4.11 Migrating Keys Between Keyring Keystores">
    Section 8.4.4.11, “Migrating Keys Between Keyring Keystores”
   </a>
   .
  </p>
  <p>
   <a class="link" href="mysql-migrate-keyring.html" title="6.6.8 mysql_migrate_keyring — Keyring Key Migration Utility">
    <span class="command">
     <strong>
      mysql_migrate_keyring
     </strong>
    </span>
   </a>
   supports the following
        options, which can be specified on the command line or in the
   <code class="literal">
    [mysql_migrate_keyring]
   </code>
   group of an option
        file. For information about option files used by MySQL programs,
        see
   <a class="xref" href="option-files.html" title="6.2.2.2 Using Option Files">
    Section 6.2.2.2, “Using Option Files”
   </a>
   .
  </p>
  <div class="table">
   <a name="idm46045305867536">
   </a>
   <p class="title">
    <b>
     Table 6.19 mysql_migrate_keyring Options
    </b>
   </p>
   <div class="table-contents">
    <table frame="box" rules="all" summary="Command-line options available for mysql_migrate_keyring.">
     <colgroup>
      <col style="width: 35%"/>
      <col style="width: 64%"/>
     </colgroup>
     <thead>
      <tr>
       <th>
        Option Name
       </th>
       <th>
        Description
       </th>
      </tr>
     </thead>
     <tbody>
      <tr>
       <td>
        <a class="link" href="mysql-migrate-keyring.html#option_mysql_migrate_keyring_component-dir">
         --component-dir
        </a>
       </td>
       <td>
        Directory for keyring components
       </td>
      </tr>
      <tr>
       <td>
        <a class="link" href="mysql-migrate-keyring.html#option_mysql_migrate_keyring_defaults-extra-file">
         --defaults-extra-file
        </a>
       </td>
       <td>
        Read named option file in addition to usual option files
       </td>
      </tr>
      <tr>
       <td>
        <a class="link" href="mysql-migrate-keyring.html#option_mysql_migrate_keyring_defaults-file">
         --defaults-file
        </a>
       </td>
       <td>
        Read only named option file
       </td>
      </tr>
      <tr>
       <td>
        <a class="link" href="mysql-migrate-keyring.html#option_mysql_migrate_keyring_defaults-group-suffix">
         --defaults-group-suffix
        </a>
       </td>
       <td>
        Option group suffix value
       </td>
      </tr>
      <tr>
       <td>
        <a class="link" href="mysql-migrate-keyring.html#option_mysql_migrate_keyring_destination-keyring">
         --destination-keyring
        </a>
       </td>
       <td>
        Destination keyring component name
       </td>
      </tr>
      <tr>
       <td>
        <a class="link" href="mysql-migrate-keyring.html#option_mysql_migrate_keyring_destination-keyring-configuration-dir">
         --destination-keyring-configuration-dir
        </a>
       </td>
       <td>
        Destination keyring component configuration directory
       </td>
      </tr>
      <tr>
       <td>
        <a class="link" href="mysql-migrate-keyring.html#option_mysql_migrate_keyring_get-server-public-key">
         --get-server-public-key
        </a>
       </td>
       <td>
        Request RSA public key from server
       </td>
      </tr>
      <tr>
       <td>
        <a class="link" href="mysql-migrate-keyring.html#option_mysql_migrate_keyring_help">
         --help
        </a>
       </td>
       <td>
        Display help message and exit
       </td>
      </tr>
      <tr>
       <td>
        <a class="link" href="mysql-migrate-keyring.html#option_mysql_migrate_keyring_host">
         --host
        </a>
       </td>
       <td>
        Host on which MySQL server is located
       </td>
      </tr>
      <tr>
       <td>
        <a class="link" href="mysql-migrate-keyring.html#option_mysql_migrate_keyring_login-path">
         --login-path
        </a>
       </td>
       <td>
        Read login path options from .mylogin.cnf
       </td>
      </tr>
      <tr>
       <td>
        <a class="link" href="mysql-migrate-keyring.html#option_mysql_migrate_keyring_no-defaults">
         --no-defaults
        </a>
       </td>
       <td>
        Read no option files
       </td>
      </tr>
      <tr>
       <td>
        <a class="link" href="mysql-migrate-keyring.html#option_mysql_migrate_keyring_no-login-paths">
         --no-login-paths
        </a>
       </td>
       <td>
        Do not read login paths from the login path file
       </td>
      </tr>
      <tr>
       <td>
        <a class="link" href="mysql-migrate-keyring.html#option_mysql_migrate_keyring_online-migration">
         --online-migration
        </a>
       </td>
       <td>
        Migration source is an active server
       </td>
      </tr>
      <tr>
       <td>
        <a class="link" href="mysql-migrate-keyring.html#option_mysql_migrate_keyring_password">
         --password
        </a>
       </td>
       <td>
        Password to use when connecting to server
       </td>
      </tr>
      <tr>
       <td>
        <a class="link" href="mysql-migrate-keyring.html#option_mysql_migrate_keyring_port">
         --port
        </a>
       </td>
       <td>
        TCP/IP port number for connection
       </td>
      </tr>
      <tr>
       <td>
        <a class="link" href="mysql-migrate-keyring.html#option_mysql_migrate_keyring_print-defaults">
         --print-defaults
        </a>
       </td>
       <td>
        Print default options
       </td>
      </tr>
      <tr>
       <td>
        <a class="link" href="mysql-migrate-keyring.html#option_mysql_migrate_keyring_server-public-key-path">
         --server-public-key-path
        </a>
       </td>
       <td>
        Path name to file containing RSA public key
       </td>
      </tr>
      <tr>
       <td>
        <a class="link" href="mysql-migrate-keyring.html#option_mysql_migrate_keyring_socket">
         --socket
        </a>
       </td>
       <td>
        Unix socket file or Windows named pipe to use
       </td>
      </tr>
      <tr>
       <td>
        <a class="link" href="mysql-migrate-keyring.html#option_mysql_migrate_keyring_source-keyring">
         --source-keyring
        </a>
       </td>
       <td>
        Source keyring component name
       </td>
      </tr>
      <tr>
       <td>
        <a class="link" href="mysql-migrate-keyring.html#option_mysql_migrate_keyring_source-keyring-configuration-dir">
         --source-keyring-configuration-dir
        </a>
       </td>
       <td>
        Source keyring component configuration directory
       </td>
      </tr>
      <tr>
       <td>
        <a class="link" href="mysql-migrate-keyring.html#option_mysql_migrate_keyring_ssl">
         --ssl-ca
        </a>
       </td>
       <td>
        File that contains list of trusted SSL Certificate Authorities
       </td>
      </tr>
      <tr>
       <td>
        <a class="link" href="mysql-migrate-keyring.html#option_mysql_migrate_keyring_ssl">
         --ssl-capath
        </a>
       </td>
       <td>
        Directory that contains trusted SSL Certificate Authority certificate files
       </td>
      </tr>
      <tr>
       <td>
        <a class="link" href="mysql-migrate-keyring.html#option_mysql_migrate_keyring_ssl">
         --ssl-cert
        </a>
       </td>
       <td>
        File that contains X.509 certificate
       </td>
      </tr>
      <tr>
       <td>
        <a class="link" href="mysql-migrate-keyring.html#option_mysql_migrate_keyring_ssl">
         --ssl-cipher
        </a>
       </td>
       <td>
        Permissible ciphers for connection encryption
       </td>
      </tr>
      <tr>
       <td>
        <a class="link" href="mysql-migrate-keyring.html#option_mysql_migrate_keyring_ssl">
         --ssl-crl
        </a>
       </td>
       <td>
        File that contains certificate revocation lists
       </td>
      </tr>
      <tr>
       <td>
        <a class="link" href="mysql-migrate-keyring.html#option_mysql_migrate_keyring_ssl">
         --ssl-crlpath
        </a>
       </td>
       <td>
        Directory that contains certificate revocation-list files
       </td>
      </tr>
      <tr>
       <td>
        <a class="link" href="mysql-migrate-keyring.html#option_mysql_migrate_keyring_ssl-fips-mode">
         --ssl-fips-mode
        </a>
       </td>
       <td>
        Whether to enable FIPS mode on client side
       </td>
      </tr>
      <tr>
       <td>
        <a class="link" href="mysql-migrate-keyring.html#option_mysql_migrate_keyring_ssl">
         --ssl-key
        </a>
       </td>
       <td>
        File that contains X.509 key
       </td>
      </tr>
      <tr>
       <td>
        <a class="link" href="mysql-migrate-keyring.html#option_mysql_migrate_keyring_ssl">
         --ssl-mode
        </a>
       </td>
       <td>
        Desired security state of connection to server
       </td>
      </tr>
      <tr>
       <td>
        <a class="link" href="mysql-migrate-keyring.html#option_mysql_migrate_keyring_ssl">
         --ssl-session-data
        </a>
       </td>
       <td>
        File that contains SSL session data
       </td>
      </tr>
      <tr>
       <td>
        <a class="link" href="mysql-migrate-keyring.html#option_mysql_migrate_keyring_ssl">
         --ssl-session-data-continue-on-failed-reuse
        </a>
       </td>
       <td>
        Whether to establish connections if session reuse fails
       </td>
      </tr>
      <tr>
       <td>
        <a class="link" href="mysql-migrate-keyring.html#option_mysql_migrate_keyring_tls-ciphersuites">
         --tls-ciphersuites
        </a>
       </td>
       <td>
        Permissible TLSv1.3 ciphersuites for encrypted connections
       </td>
      </tr>
      <tr>
       <td>
        <a class="link" href="mysql-migrate-keyring.html#option_mysql_migrate_keyring_tls-sni-servername">
         --tls-sni-servername
        </a>
       </td>
       <td>
        Server name supplied by the client
       </td>
      </tr>
      <tr>
       <td>
        <a class="link" href="mysql-migrate-keyring.html#option_mysql_migrate_keyring_tls-version">
         --tls-version
        </a>
       </td>
       <td>
        Permissible TLS protocols for encrypted connections
       </td>
      </tr>
      <tr>
       <td>
        <a class="link" href="mysql-migrate-keyring.html#option_mysql_migrate_keyring_user">
         --user
        </a>
       </td>
       <td>
        MySQL user name to use when connecting to server
       </td>
      </tr>
      <tr>
       <td>
        <a class="link" href="mysql-migrate-keyring.html#option_mysql_migrate_keyring_verbose">
         --verbose
        </a>
       </td>
       <td>
        Verbose mode
       </td>
      </tr>
      <tr>
       <td>
        <a class="link" href="mysql-migrate-keyring.html#option_mysql_migrate_keyring_version">
         --version
        </a>
       </td>
       <td>
        Display version information and exit
       </td>
      </tr>
     </tbody>
    </table>
   </div>
   <div class="table-contents">
    <table cellpadding="0" cellspacing="0" style="position: fixed; top: 0px; display: none; left: 401px; width: 739px;">
     <thead>
      <tr>
       <th style="width: 260.906px;">
        Option Name
       </th>
       <th style="width: 477.094px;">
        Description
       </th>
      </tr>
     </thead>
    </table>
   </div>
  </div>
  <br class="table-break"/>
  <div class="itemizedlist">
   <ul class="itemizedlist" style="list-style-type: disc; ">
    <li class="listitem">
     <p>
      <a name="option_mysql_migrate_keyring_help">
      </a>
      <a class="link" href="mysql-migrate-keyring.html#option_mysql_migrate_keyring_help">
       <code class="option">
        --help
       </code>
      </a>
      ,
      <code class="option">
       -h
      </code>
     </p>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for help">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --help
          </code>
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <a class="indexterm" name="idm46045305751472">
     </a>
     <a class="indexterm" name="idm46045305749984">
     </a>
     <p>
      Display a help message and exit.
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="option_mysql_migrate_keyring_component-dir">
      </a>
      <a class="link" href="mysql-migrate-keyring.html#option_mysql_migrate_keyring_component-dir">
       <code class="option">
        --component-dir=
        <em class="replaceable">
         <code>
          dir_name
         </code>
        </em>
       </code>
      </a>
     </p>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for component-dir">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --component-dir=dir_name
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Type
         </th>
         <td>
          Directory name
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <a class="indexterm" name="idm46045305737888">
     </a>
     <a class="indexterm" name="idm46045305736400">
     </a>
     <p>
      The directory where keyring components are located. This is
            typically the value of the
      <a class="link" href="server-system-variables.html#sysvar_plugin_dir">
       <code class="literal">
        plugin_dir
       </code>
      </a>
      system variable
            for the local MySQL server.
     </p>
     <div class="note" style="margin-left: 0.5in; margin-right: 0.5in;">
      <div class="admon-title">
       Note
      </div>
      <p>
       <a class="link" href="mysql-migrate-keyring.html#option_mysql_migrate_keyring_component-dir">
        <code class="option">
         --component-dir
        </code>
       </a>
       ,
       <a class="link" href="mysql-migrate-keyring.html#option_mysql_migrate_keyring_source-keyring">
        <code class="option">
         --source-keyring
        </code>
       </a>
       ,
              and
       <a class="link" href="mysql-migrate-keyring.html#option_mysql_migrate_keyring_destination-keyring">
        <code class="option">
         --destination-keyring
        </code>
       </a>
       are mandatory for all keyring migration operations
              performed by
       <a class="link" href="mysql-migrate-keyring.html" title="6.6.8 mysql_migrate_keyring — Keyring Key Migration Utility">
        <span class="command">
         <strong>
          mysql_migrate_keyring
         </strong>
        </span>
       </a>
       . In
              addition, the source and destination components must
              differ, and both components must be properly configured so
              that
       <a class="link" href="mysql-migrate-keyring.html" title="6.6.8 mysql_migrate_keyring — Keyring Key Migration Utility">
        <span class="command">
         <strong>
          mysql_migrate_keyring
         </strong>
        </span>
       </a>
       can load and
              use them.
      </p>
     </div>
    </li>
    <li class="listitem">
     <p>
      <a name="option_mysql_migrate_keyring_defaults-extra-file">
      </a>
      <a class="link" href="mysql-migrate-keyring.html#option_mysql_migrate_keyring_defaults-extra-file">
       <code class="option">
        --defaults-extra-file=
        <em class="replaceable">
         <code>
          file_name
         </code>
        </em>
       </code>
      </a>
     </p>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for defaults-extra-file">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --defaults-extra-file=file_name
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Type
         </th>
         <td>
          File name
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <a class="indexterm" name="idm46045305716400">
     </a>
     <a class="indexterm" name="idm46045305714896">
     </a>
     <p>
      Read this option file after the global option file but (on
            Unix) before the user option file. If the file does not
            exist or is otherwise inaccessible, an error occurs. If
      <em class="replaceable">
       <code>
        file_name
       </code>
      </em>
      is not an absolute path
            name, it is interpreted relative to the current directory.
     </p>
     <p>
      For additional information about this and other option-file
            options, see
      <a class="xref" href="option-file-options.html" title="6.2.2.3 Command-Line Options that Affect Option-File Handling">
       Section 6.2.2.3, “Command-Line Options that Affect Option-File Handling”
      </a>
      .
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="option_mysql_migrate_keyring_defaults-file">
      </a>
      <a class="link" href="mysql-migrate-keyring.html#option_mysql_migrate_keyring_defaults-file">
       <code class="option">
        --defaults-file=
        <em class="replaceable">
         <code>
          file_name
         </code>
        </em>
       </code>
      </a>
     </p>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for defaults-file">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --defaults-file=file_name
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Type
         </th>
         <td>
          File name
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <a class="indexterm" name="idm46045305700992">
     </a>
     <a class="indexterm" name="idm46045305699504">
     </a>
     <p>
      Use only the given option file. If the file does not exist
            or is otherwise inaccessible, an error occurs. If
      <em class="replaceable">
       <code>
        file_name
       </code>
      </em>
      is not an absolute path
            name, it is interpreted relative to the current directory.
     </p>
     <p>
      Exception: Even with
      <a class="link" href="option-file-options.html#option_general_defaults-file">
       <code class="option">
        --defaults-file
       </code>
      </a>
      , client
            programs read
      <code class="filename">
       .mylogin.cnf
      </code>
      .
     </p>
     <p>
      For additional information about this and other option-file
            options, see
      <a class="xref" href="option-file-options.html" title="6.2.2.3 Command-Line Options that Affect Option-File Handling">
       Section 6.2.2.3, “Command-Line Options that Affect Option-File Handling”
      </a>
      .
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="option_mysql_migrate_keyring_defaults-group-suffix">
      </a>
      <a class="link" href="mysql-migrate-keyring.html#option_mysql_migrate_keyring_defaults-group-suffix">
       <code class="option">
        --defaults-group-suffix=
        <em class="replaceable">
         <code>
          str
         </code>
        </em>
       </code>
      </a>
     </p>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for defaults-group-suffix">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --defaults-group-suffix=str
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Type
         </th>
         <td>
          String
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <a class="indexterm" name="idm46045305683472">
     </a>
     <a class="indexterm" name="idm46045305681968">
     </a>
     <p>
      Read not only the usual option groups, but also groups with
            the usual names and a suffix of
      <em class="replaceable">
       <code>
        str
       </code>
      </em>
      . For example,
      <a class="link" href="mysql-migrate-keyring.html" title="6.6.8 mysql_migrate_keyring — Keyring Key Migration Utility">
       <span class="command">
        <strong>
         mysql_migrate_keyring
        </strong>
       </span>
      </a>
      normally reads the
      <code class="literal">
       [mysql_migrate_keyring]
      </code>
      group. If this
            option is given as
      <a class="link" href="mysql-migrate-keyring.html#option_mysql_migrate_keyring_defaults-group-suffix">
       <code class="option">
        --defaults-group-suffix=_other
       </code>
      </a>
      ,
      <a class="link" href="mysql-migrate-keyring.html" title="6.6.8 mysql_migrate_keyring — Keyring Key Migration Utility">
       <span class="command">
        <strong>
         mysql_migrate_keyring
        </strong>
       </span>
      </a>
      also reads the
      <code class="literal">
       [mysql_migrate_keyring_other]
      </code>
      group.
     </p>
     <p>
      For additional information about this and other option-file
            options, see
      <a class="xref" href="option-file-options.html" title="6.2.2.3 Command-Line Options that Affect Option-File Handling">
       Section 6.2.2.3, “Command-Line Options that Affect Option-File Handling”
      </a>
      .
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="option_mysql_migrate_keyring_destination-keyring">
      </a>
      <a class="link" href="mysql-migrate-keyring.html#option_mysql_migrate_keyring_destination-keyring">
       <code class="option">
        --destination-keyring=
        <em class="replaceable">
         <code>
          name
         </code>
        </em>
       </code>
      </a>
     </p>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for destination-keyring">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --destination-keyring=name
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Type
         </th>
         <td>
          String
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <a class="indexterm" name="idm46045305663168">
     </a>
     <a class="indexterm" name="idm46045305661664">
     </a>
     <p>
      The destination keyring component for key migration. The
            format and interpretation of the option value is the same as
            described for the
      <a class="link" href="mysql-migrate-keyring.html#option_mysql_migrate_keyring_source-keyring">
       <code class="option">
        --source-keyring
       </code>
      </a>
      option.
     </p>
     <div class="note" style="margin-left: 0.5in; margin-right: 0.5in;">
      <div class="admon-title">
       Note
      </div>
      <p>
       <a class="link" href="mysql-migrate-keyring.html#option_mysql_migrate_keyring_component-dir">
        <code class="option">
         --component-dir
        </code>
       </a>
       ,
       <a class="link" href="mysql-migrate-keyring.html#option_mysql_migrate_keyring_source-keyring">
        <code class="option">
         --source-keyring
        </code>
       </a>
       ,
              and
       <a class="link" href="mysql-migrate-keyring.html#option_mysql_migrate_keyring_destination-keyring">
        <code class="option">
         --destination-keyring
        </code>
       </a>
       are mandatory for all keyring migration operations
              performed by
       <a class="link" href="mysql-migrate-keyring.html" title="6.6.8 mysql_migrate_keyring — Keyring Key Migration Utility">
        <span class="command">
         <strong>
          mysql_migrate_keyring
         </strong>
        </span>
       </a>
       . In
              addition, the source and destination components must
              differ, and both components must be properly configured so
              that
       <a class="link" href="mysql-migrate-keyring.html" title="6.6.8 mysql_migrate_keyring — Keyring Key Migration Utility">
        <span class="command">
         <strong>
          mysql_migrate_keyring
         </strong>
        </span>
       </a>
       can load and
              use them.
      </p>
     </div>
    </li>
    <li class="listitem">
     <p>
      <a name="option_mysql_migrate_keyring_destination-keyring-configuration-dir">
      </a>
      <a class="link" href="mysql-migrate-keyring.html#option_mysql_migrate_keyring_destination-keyring-configuration-dir">
       <code class="option">
        --destination-keyring-configuration-dir=
        <em class="replaceable">
         <code>
          dir_name
         </code>
        </em>
       </code>
      </a>
     </p>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for destination-keyring-configuration-dir">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --destination-keyring-configuration-dir=dir_name
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Type
         </th>
         <td>
          Directory name
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <a class="indexterm" name="idm46045305641680">
     </a>
     <a class="indexterm" name="idm46045305640160">
     </a>
     <p>
      This option applies only if the destination keyring
            component global configuration file contains
      <code class="literal">
       "read_local_config": true
      </code>
      , indicating
            that component configuration is contained in the local
            configuration file. The option value specifies the directory
            containing that local file.
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="option_mysql_migrate_keyring_get-server-public-key">
      </a>
      <a class="link" href="mysql-migrate-keyring.html#option_mysql_migrate_keyring_get-server-public-key">
       <code class="option">
        --get-server-public-key
       </code>
      </a>
     </p>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for get-server-public-key">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --get-server-public-key
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Type
         </th>
         <td>
          Boolean
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <a class="indexterm" name="idm46045305627360">
     </a>
     <a class="indexterm" name="idm46045305625856">
     </a>
     <p>
      Request from the server the public key required for RSA key
            pair-based password exchange. This option applies to clients
            that authenticate with the
      <code class="literal">
       caching_sha2_password
      </code>
      authentication
            plugin. For that plugin, the server does not send the public
            key unless requested. This option is ignored for accounts
            that do not authenticate with that plugin. It is also
            ignored if RSA-based password exchange is not used, as is
            the case when the client connects to the server using a
            secure connection.
     </p>
     <p>
      If
      <a class="link" href="mysql-migrate-keyring.html#option_mysql_migrate_keyring_server-public-key-path">
       <code class="option">
        --server-public-key-path=
        <em class="replaceable">
         <code>
          file_name
         </code>
        </em>
       </code>
      </a>
      is given and specifies a valid public key file, it takes
            precedence over
      <a class="link" href="mysql-migrate-keyring.html#option_mysql_migrate_keyring_get-server-public-key">
       <code class="option">
        --get-server-public-key
       </code>
      </a>
      .
     </p>
     <p>
      For information about the
      <code class="literal">
       caching_sha2_password
      </code>
      plugin, see
      <a class="xref" href="caching-sha2-pluggable-authentication.html" title="8.4.1.2 Caching SHA-2 Pluggable Authentication">
       Section 8.4.1.2, “Caching SHA-2 Pluggable Authentication”
      </a>
      .
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="option_mysql_migrate_keyring_host">
      </a>
      <a class="link" href="mysql-migrate-keyring.html#option_mysql_migrate_keyring_host">
       <code class="option">
        --host=
        <em class="replaceable">
         <code>
          host_name
         </code>
        </em>
       </code>
      </a>
      ,
      <code class="option">
       -h
       <em class="replaceable">
        <code>
         host_name
        </code>
       </em>
      </code>
     </p>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for host">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --host=host_name
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Type
         </th>
         <td>
          String
         </td>
        </tr>
        <tr>
         <th>
          Default Value
         </th>
         <td>
          <code class="literal">
           localhost
          </code>
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <a class="indexterm" name="idm46045305604784">
     </a>
     <a class="indexterm" name="idm46045305603296">
     </a>
     <p>
      The host location of the running server that is currently
            using one of the key migration keystores. Migration always
            occurs on the local host, so the option always specifies a
            value for connecting to a local server, such as
      <code class="literal">
       localhost
      </code>
      ,
      <code class="literal">
       127.0.0.1
      </code>
      ,
      <code class="literal">
       ::1
      </code>
      , or the local host IP address or host
            name.
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="option_mysql_migrate_keyring_login-path">
      </a>
      <a class="link" href="mysql-migrate-keyring.html#option_mysql_migrate_keyring_login-path">
       <code class="option">
        --login-path=
        <em class="replaceable">
         <code>
          name
         </code>
        </em>
       </code>
      </a>
     </p>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for login-path">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --login-path=name
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Type
         </th>
         <td>
          String
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <a class="indexterm" name="idm46045305589072">
     </a>
     <a class="indexterm" name="idm46045305587584">
     </a>
     <p>
      Read options from the named login path in the
      <code class="filename">
       .mylogin.cnf
      </code>
      login path file. A
      <span class="quote">
       “
       <span class="quote">
        login path
       </span>
       ”
      </span>
      is an option group containing
            options that specify which MySQL server to connect to and
            which account to authenticate as. To create or modify a
            login path file, use the
      <a class="link" href="mysql-config-editor.html" title="6.6.7 mysql_config_editor — MySQL Configuration Utility">
       <span class="command">
        <strong>
         mysql_config_editor
        </strong>
       </span>
      </a>
      utility. See
      <a class="xref" href="mysql-config-editor.html" title="6.6.7 mysql_config_editor — MySQL Configuration Utility">
       Section 6.6.7, “mysql_config_editor — MySQL Configuration Utility”
      </a>
      .
     </p>
     <p>
      For additional information about this and other option-file
            options, see
      <a class="xref" href="option-file-options.html" title="6.2.2.3 Command-Line Options that Affect Option-File Handling">
       Section 6.2.2.3, “Command-Line Options that Affect Option-File Handling”
      </a>
      .
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="option_mysql_migrate_keyring_no-login-paths">
      </a>
      <a class="link" href="mysql-migrate-keyring.html#option_mysql_migrate_keyring_no-login-paths">
       <code class="option">
        --no-login-paths
       </code>
      </a>
     </p>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for no-login-paths">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --no-login-paths
          </code>
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <a class="indexterm" name="idm46045305573376">
     </a>
     <a class="indexterm" name="idm46045305571888">
     </a>
     <p>
      Skips reading options from the login path file.
     </p>
     <p>
      See
      <a class="link" href="mysql-migrate-keyring.html#option_mysql_migrate_keyring_login-path">
       <code class="option">
        --login-path
       </code>
      </a>
      for related information.
     </p>
     <p>
      For additional information about this and other option-file
            options, see
      <a class="xref" href="option-file-options.html" title="6.2.2.3 Command-Line Options that Affect Option-File Handling">
       Section 6.2.2.3, “Command-Line Options that Affect Option-File Handling”
      </a>
      .
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="option_mysql_migrate_keyring_no-defaults">
      </a>
      <a class="link" href="mysql-migrate-keyring.html#option_mysql_migrate_keyring_no-defaults">
       <code class="option">
        --no-defaults
       </code>
      </a>
     </p>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for no-defaults">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --no-defaults
          </code>
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <a class="indexterm" name="idm46045305559536">
     </a>
     <a class="indexterm" name="idm46045305558048">
     </a>
     <p>
      Do not read any option files. If program startup fails due
            to reading unknown options from an option file,
      <a class="link" href="mysql-migrate-keyring.html#option_mysql_migrate_keyring_no-defaults">
       <code class="option">
        --no-defaults
       </code>
      </a>
      can be used to prevent them from being read.
     </p>
     <p>
      The exception is that the
      <code class="filename">
       .mylogin.cnf
      </code>
      file is read in all cases, if it exists. This permits
            passwords to be specified in a safer way than on the command
            line even when
      <a class="link" href="mysql-migrate-keyring.html#option_mysql_migrate_keyring_no-defaults">
       <code class="option">
        --no-defaults
       </code>
      </a>
      is used. To create
      <code class="filename">
       .mylogin.cnf
      </code>
      , use
            the
      <a class="link" href="mysql-config-editor.html" title="6.6.7 mysql_config_editor — MySQL Configuration Utility">
       <span class="command">
        <strong>
         mysql_config_editor
        </strong>
       </span>
      </a>
      utility. See
      <a class="xref" href="mysql-config-editor.html" title="6.6.7 mysql_config_editor — MySQL Configuration Utility">
       Section 6.6.7, “mysql_config_editor — MySQL Configuration Utility”
      </a>
      .
     </p>
     <p>
      For additional information about this and other option-file
            options, see
      <a class="xref" href="option-file-options.html" title="6.2.2.3 Command-Line Options that Affect Option-File Handling">
       Section 6.2.2.3, “Command-Line Options that Affect Option-File Handling”
      </a>
      .
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="option_mysql_migrate_keyring_online-migration">
      </a>
      <a class="link" href="mysql-migrate-keyring.html#option_mysql_migrate_keyring_online-migration">
       <code class="option">
        --online-migration
       </code>
      </a>
     </p>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for online-migration">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --online-migration
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Type
         </th>
         <td>
          Boolean
         </td>
        </tr>
        <tr>
         <th>
          Default Value
         </th>
         <td>
          <code class="literal">
           FALSE
          </code>
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <a class="indexterm" name="idm46045305536512">
     </a>
     <a class="indexterm" name="idm46045305535024">
     </a>
     <p>
      This option is mandatory when a running server is using the
            keyring. It tells
      <a class="link" href="mysql-migrate-keyring.html" title="6.6.8 mysql_migrate_keyring — Keyring Key Migration Utility">
       <span class="command">
        <strong>
         mysql_migrate_keyring
        </strong>
       </span>
      </a>
      to perform an online key migration. The option has these
            effects:
     </p>
     <div class="itemizedlist">
      <ul class="itemizedlist" style="list-style-type: circle; ">
       <li class="listitem">
        <p>
         <a class="link" href="mysql-migrate-keyring.html" title="6.6.8 mysql_migrate_keyring — Keyring Key Migration Utility">
          <span class="command">
           <strong>
            mysql_migrate_keyring
           </strong>
          </span>
         </a>
         connects to the
                server using any connection options specified; these
                options are otherwise ignored.
        </p>
       </li>
       <li class="listitem">
        <p>
         After
         <a class="link" href="mysql-migrate-keyring.html" title="6.6.8 mysql_migrate_keyring — Keyring Key Migration Utility">
          <span class="command">
           <strong>
            mysql_migrate_keyring
           </strong>
          </span>
         </a>
         connects
                to the server, it tells the server to pause keyring
                operations. When key copying is complete,
         <a class="link" href="mysql-migrate-keyring.html" title="6.6.8 mysql_migrate_keyring — Keyring Key Migration Utility">
          <span class="command">
           <strong>
            mysql_migrate_keyring
           </strong>
          </span>
         </a>
         tells the
                server it can resume keyring operations before
                disconnecting.
        </p>
       </li>
      </ul>
     </div>
    </li>
    <li class="listitem">
     <p>
      <a name="option_mysql_migrate_keyring_password">
      </a>
      <a class="link" href="mysql-migrate-keyring.html#option_mysql_migrate_keyring_password">
       <code class="option">
        --password[=
        <em class="replaceable">
         <code>
          password
         </code>
        </em>
        ]
       </code>
      </a>
      ,
      <code class="option">
       -p[
       <em class="replaceable">
        <code>
         password
        </code>
       </em>
       ]
      </code>
     </p>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for password">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --password[=password]
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Type
         </th>
         <td>
          String
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <a class="indexterm" name="idm46045305514800">
     </a>
     <a class="indexterm" name="idm46045305513312">
     </a>
     <p>
      The password of the MySQL account used for connecting to the
            running server that is currently using one of the key
            migration keystores. The password value is optional. If not
            given,
      <a class="link" href="mysql-migrate-keyring.html" title="6.6.8 mysql_migrate_keyring — Keyring Key Migration Utility">
       <span class="command">
        <strong>
         mysql_migrate_keyring
        </strong>
       </span>
      </a>
      prompts for
            one. If given, there must be
      <span class="emphasis">
       <em>
        no space
       </em>
      </span>
      between
      <a class="link" href="mysql-migrate-keyring.html#option_mysql_migrate_keyring_password">
       <code class="option">
        --password=
       </code>
      </a>
      or
      <code class="option">
       -p
      </code>
      and the password following it. If no
            password option is specified, the default is to send no
            password.
     </p>
     <p>
      Specifying a password on the command line should be
            considered insecure. To avoid giving the password on the
            command line, use an option file. See
      <a class="xref" href="password-security-user.html" title="8.1.2.1 End-User Guidelines for Password Security">
       Section 8.1.2.1, “End-User Guidelines for Password Security”
      </a>
      .
     </p>
     <p>
      To explicitly specify that there is no password and that
      <a class="link" href="mysql-migrate-keyring.html" title="6.6.8 mysql_migrate_keyring — Keyring Key Migration Utility">
       <span class="command">
        <strong>
         mysql_migrate_keyring
        </strong>
       </span>
      </a>
      should not prompt
            for one, use the
      <a class="link" href="mysql-migrate-keyring.html#option_mysql_migrate_keyring_password">
       <code class="option">
        --skip-password
       </code>
      </a>
      option.
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="option_mysql_migrate_keyring_port">
      </a>
      <a class="link" href="mysql-migrate-keyring.html#option_mysql_migrate_keyring_port">
       <code class="option">
        --port=
        <em class="replaceable">
         <code>
          port_num
         </code>
        </em>
       </code>
      </a>
      ,
      <code class="option">
       -P
       <em class="replaceable">
        <code>
         port_num
        </code>
       </em>
      </code>
     </p>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for port">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --port=port_num
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Type
         </th>
         <td>
          Numeric
         </td>
        </tr>
        <tr>
         <th>
          Default Value
         </th>
         <td>
          <code class="literal">
           0
          </code>
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <a class="indexterm" name="idm46045305490816">
     </a>
     <a class="indexterm" name="idm46045305489328">
     </a>
     <a class="indexterm" name="idm46045305487840">
     </a>
     <p>
      For TCP/IP connections, the port number for connecting to
            the running server that is currently using one of the key
            migration keystores.
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="option_mysql_migrate_keyring_print-defaults">
      </a>
      <a class="link" href="mysql-migrate-keyring.html#option_mysql_migrate_keyring_print-defaults">
       <code class="option">
        --print-defaults
       </code>
      </a>
     </p>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for print-defaults">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --print-defaults
          </code>
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <a class="indexterm" name="idm46045305478384">
     </a>
     <a class="indexterm" name="idm46045305476896">
     </a>
     <p>
      Print the program name and all options that it gets from
            option files.
     </p>
     <p>
      For additional information about this and other option-file
            options, see
      <a class="xref" href="option-file-options.html" title="6.2.2.3 Command-Line Options that Affect Option-File Handling">
       Section 6.2.2.3, “Command-Line Options that Affect Option-File Handling”
      </a>
      .
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="option_mysql_migrate_keyring_server-public-key-path">
      </a>
      <a class="link" href="mysql-migrate-keyring.html#option_mysql_migrate_keyring_server-public-key-path">
       <code class="option">
        --server-public-key-path=
        <em class="replaceable">
         <code>
          file_name
         </code>
        </em>
       </code>
      </a>
     </p>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for server-public-key-path">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --server-public-key-path=file_name
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Type
         </th>
         <td>
          File name
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <a class="indexterm" name="idm46045305463648">
     </a>
     <a class="indexterm" name="idm46045305462144">
     </a>
     <p>
      The path name to a file in PEM format containing a
            client-side copy of the public key required by the server
            for RSA key pair-based password exchange. This option
            applies to clients that authenticate with the
      <code class="literal">
       sha256_password
      </code>
      (deprecated) or
      <code class="literal">
       caching_sha2_password
      </code>
      authentication
            plugin. This option is ignored for accounts that do not
            authenticate with one of those plugins. It is also ignored
            if RSA-based password exchange is not used, as is the case
            when the client connects to the server using a secure
            connection.
     </p>
     <p>
      If
      <a class="link" href="mysql-migrate-keyring.html#option_mysql_migrate_keyring_server-public-key-path">
       <code class="option">
        --server-public-key-path=
        <em class="replaceable">
         <code>
          file_name
         </code>
        </em>
       </code>
      </a>
      is given and specifies a valid public key file, it takes
            precedence over
      <a class="link" href="mysql-migrate-keyring.html#option_mysql_migrate_keyring_get-server-public-key">
       <code class="option">
        --get-server-public-key
       </code>
      </a>
      .
     </p>
     <p>
      For
      <code class="literal">
       sha256_password
      </code>
      (deprecated), this
            option applies only if MySQL was built using OpenSSL.
     </p>
     <p>
      For information about the
      <code class="literal">
       sha256_password
      </code>
      and
      <code class="literal">
       caching_sha2_password
      </code>
      plugins, see
      <a class="xref" href="sha256-pluggable-authentication.html" title="8.4.1.3 SHA-256 Pluggable Authentication">
       Section 8.4.1.3, “SHA-256 Pluggable Authentication”
      </a>
      , and
      <a class="xref" href="caching-sha2-pluggable-authentication.html" title="8.4.1.2 Caching SHA-2 Pluggable Authentication">
       Section 8.4.1.2, “Caching SHA-2 Pluggable Authentication”
      </a>
      .
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="option_mysql_migrate_keyring_socket">
      </a>
      <a class="link" href="mysql-migrate-keyring.html#option_mysql_migrate_keyring_socket">
       <code class="option">
        --socket=
        <em class="replaceable">
         <code>
          path
         </code>
        </em>
       </code>
      </a>
      ,
      <code class="option">
       -S
       <em class="replaceable">
        <code>
         path
        </code>
       </em>
      </code>
     </p>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for socket">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --socket={file_name|pipe_name}
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Type
         </th>
         <td>
          String
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <a class="indexterm" name="idm46045305440128">
     </a>
     <a class="indexterm" name="idm46045305438640">
     </a>
     <p>
      For Unix socket file or Windows named pipe connections, the
            socket file or named pipe for connecting to the running
            server that is currently using one of the key migration
            keystores.
     </p>
     <p>
      On Windows, this option applies only if the server was
            started with the
      <a class="link" href="server-system-variables.html#sysvar_named_pipe">
       <code class="literal">
        named_pipe
       </code>
      </a>
      system variable enabled to support named-pipe connections.
            In addition, the user making the connection must be a member
            of the Windows group specified by the
      <a class="link" href="server-system-variables.html#sysvar_named_pipe_full_access_group">
       <code class="literal">
        named_pipe_full_access_group
       </code>
      </a>
      system variable.
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="option_mysql_migrate_keyring_source-keyring">
      </a>
      <a class="link" href="mysql-migrate-keyring.html#option_mysql_migrate_keyring_source-keyring">
       <code class="option">
        --source-keyring=
        <em class="replaceable">
         <code>
          name
         </code>
        </em>
       </code>
      </a>
     </p>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for source-keyring">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --source-keyring=name
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Type
         </th>
         <td>
          String
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <a class="indexterm" name="idm46045305423168">
     </a>
     <a class="indexterm" name="idm46045305421680">
     </a>
     <p>
      The source keyring component for key migration. This is the
            component library file name specified without any
            platform-specific extension such as
      <code class="filename">
       .so
      </code>
      or
      <code class="filename">
       .dll
      </code>
      . For example, to use the
            component for which the library file is
      <code class="filename">
       component_keyring_file.so
      </code>
      , specify the
            option as
      <a class="link" href="mysql-migrate-keyring.html#option_mysql_migrate_keyring_source-keyring">
       <code class="option">
        --source-keyring=component_keyring_file
       </code>
      </a>
      .
     </p>
     <div class="note" style="margin-left: 0.5in; margin-right: 0.5in;">
      <div class="admon-title">
       Note
      </div>
      <p>
       <a class="link" href="mysql-migrate-keyring.html#option_mysql_migrate_keyring_component-dir">
        <code class="option">
         --component-dir
        </code>
       </a>
       ,
       <a class="link" href="mysql-migrate-keyring.html#option_mysql_migrate_keyring_source-keyring">
        <code class="option">
         --source-keyring
        </code>
       </a>
       ,
              and
       <a class="link" href="mysql-migrate-keyring.html#option_mysql_migrate_keyring_destination-keyring">
        <code class="option">
         --destination-keyring
        </code>
       </a>
       are mandatory for all keyring migration operations
              performed by
       <a class="link" href="mysql-migrate-keyring.html" title="6.6.8 mysql_migrate_keyring — Keyring Key Migration Utility">
        <span class="command">
         <strong>
          mysql_migrate_keyring
         </strong>
        </span>
       </a>
       . In
              addition, the source and destination components must
              differ, and both components must be properly configured so
              that
       <a class="link" href="mysql-migrate-keyring.html" title="6.6.8 mysql_migrate_keyring — Keyring Key Migration Utility">
        <span class="command">
         <strong>
          mysql_migrate_keyring
         </strong>
        </span>
       </a>
       can load and
              use them.
      </p>
     </div>
    </li>
    <li class="listitem">
     <p>
      <a name="option_mysql_migrate_keyring_source-keyring-configuration-dir">
      </a>
      <a class="link" href="mysql-migrate-keyring.html#option_mysql_migrate_keyring_source-keyring-configuration-dir">
       <code class="option">
        --source-keyring-configuration-dir=
        <em class="replaceable">
         <code>
          dir_name
         </code>
        </em>
       </code>
      </a>
     </p>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for source-keyring-configuration-dir">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --source-keyring-configuration-dir=dir_name
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Type
         </th>
         <td>
          Directory name
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <a class="indexterm" name="idm46045305399488">
     </a>
     <a class="indexterm" name="idm46045305397984">
     </a>
     <p>
      This option applies only if the source keyring component
            global configuration file contains
      <code class="literal">
       "read_local_config": true
      </code>
      , indicating
            that component configuration is contained in the local
            configuration file. The option value specifies the directory
            containing that local file.
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="option_mysql_migrate_keyring_ssl">
      </a>
      <code class="option">
       --ssl*
      </code>
     </p>
     <a class="indexterm" name="idm46045305393328">
     </a>
     <a class="indexterm" name="idm46045305391840">
     </a>
     <p>
      Options that begin with
      <code class="option">
       --ssl
      </code>
      specify
            whether to connect to the server using encryption and
            indicate where to find SSL keys and certificates. See
      <a class="xref" href="connection-options.html#encrypted-connection-options" title="Command Options for Encrypted Connections">
       Command Options for Encrypted Connections
      </a>
      .
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="option_mysql_migrate_keyring_ssl-fips-mode">
      </a>
      <a class="link" href="mysql-migrate-keyring.html#option_mysql_migrate_keyring_ssl-fips-mode">
       <code class="option">
        --ssl-fips-mode={OFF|ON|STRICT}
       </code>
      </a>
     </p>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for ssl-fips-mode">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --ssl-fips-mode={OFF|ON|STRICT}
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Deprecated
         </th>
         <td>
          Yes
         </td>
        </tr>
        <tr>
         <th>
          Type
         </th>
         <td>
          Enumeration
         </td>
        </tr>
        <tr>
         <th>
          Default Value
         </th>
         <td>
          <code class="literal">
           OFF
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Valid Values
         </th>
         <td>
          <p class="valid-value">
           <code class="literal">
            OFF
           </code>
          </p>
          <p class="valid-value">
           <code class="literal">
            ON
           </code>
          </p>
          <p class="valid-value">
           <code class="literal">
            STRICT
           </code>
          </p>
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <a class="indexterm" name="idm46045305369680">
     </a>
     <a class="indexterm" name="idm46045305368192">
     </a>
     <p>
      Controls whether to enable FIPS mode on the client side. The
      <a class="link" href="mysql-migrate-keyring.html#option_mysql_migrate_keyring_ssl-fips-mode">
       <code class="option">
        --ssl-fips-mode
       </code>
      </a>
      option differs from other
      <code class="option">
       --ssl-
       <em class="replaceable">
        <code>
         xxx
        </code>
       </em>
      </code>
      options in that it is not used to establish encrypted
            connections, but rather to affect which cryptographic
            operations to permit. See
      <a class="xref" href="fips-mode.html" title="8.8 FIPS Support">
       Section 8.8, “FIPS Support”
      </a>
      .
     </p>
     <p>
      These
      <a class="link" href="mysql-migrate-keyring.html#option_mysql_migrate_keyring_ssl-fips-mode">
       <code class="option">
        --ssl-fips-mode
       </code>
      </a>
      values are permitted:
     </p>
     <div class="itemizedlist">
      <ul class="itemizedlist" style="list-style-type: circle; ">
       <li class="listitem">
        <p>
         <code class="literal">
          OFF
         </code>
         : Disable FIPS mode.
        </p>
       </li>
       <li class="listitem">
        <p>
         <code class="literal">
          ON
         </code>
         : Enable FIPS mode.
        </p>
       </li>
       <li class="listitem">
        <p>
         <code class="literal">
          STRICT
         </code>
         : Enable
         <span class="quote">
          “
          <span class="quote">
           strict
          </span>
          ”
         </span>
         FIPS mode.
        </p>
       </li>
      </ul>
     </div>
     <div class="note" style="margin-left: 0.5in; margin-right: 0.5in;">
      <div class="admon-title">
       Note
      </div>
      <p>
       If the OpenSSL FIPS Object Module is not available, the
              only permitted value for
       <a class="link" href="mysql-migrate-keyring.html#option_mysql_migrate_keyring_ssl-fips-mode">
        <code class="option">
         --ssl-fips-mode
        </code>
       </a>
       is
       <code class="literal">
        OFF
       </code>
       . In this case, setting
       <a class="link" href="mysql-migrate-keyring.html#option_mysql_migrate_keyring_ssl-fips-mode">
        <code class="option">
         --ssl-fips-mode
        </code>
       </a>
       to
       <code class="literal">
        ON
       </code>
       or
       <code class="literal">
        STRICT
       </code>
       causes the client to produce a warning at startup and to
              operate in non-FIPS mode.
      </p>
     </div>
     <p>
      This option is deprecated. Expect it to be removed in a
            future version of MySQL.
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="option_mysql_migrate_keyring_tls-ciphersuites">
      </a>
      <a class="link" href="mysql-migrate-keyring.html#option_mysql_migrate_keyring_tls-ciphersuites">
       <code class="option">
        --tls-ciphersuites=
        <em class="replaceable">
         <code>
          ciphersuite_list
         </code>
        </em>
       </code>
      </a>
     </p>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for tls-ciphersuites">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --tls-ciphersuites=ciphersuite_list
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Type
         </th>
         <td>
          String
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <a class="indexterm" name="idm46045305341088">
     </a>
     <a class="indexterm" name="idm46045305339600">
     </a>
     <p>
      The permissible ciphersuites for encrypted connections that
            use TLSv1.3. The value is a list of one or more
            colon-separated ciphersuite names. The ciphersuites that can
            be named for this option depend on the SSL library used to
            compile MySQL. For details, see
      <a class="xref" href="encrypted-connection-protocols-ciphers.html" title="8.3.2 Encrypted Connection TLS Protocols and Ciphers">
       Section 8.3.2, “Encrypted Connection TLS Protocols and Ciphers”
      </a>
      .
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="option_mysql_migrate_keyring_tls-sni-servername">
      </a>
      <a class="link" href="mysql-migrate-keyring.html#option_mysql_migrate_keyring_tls-sni-servername">
       <code class="option">
        --tls-sni-servername=
        <em class="replaceable">
         <code>
          server_name
         </code>
        </em>
       </code>
      </a>
     </p>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for tls-sni-servername">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --tls-sni-servername=server_name
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Type
         </th>
         <td>
          String
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <a class="indexterm" name="idm46045305326544">
     </a>
     <a class="indexterm" name="idm46045305325040">
     </a>
     <p>
      When specified, the name is passed to the
      <code class="literal">
       libmysqlclient
      </code>
      C API library using the
      <code class="literal">
       MYSQL_OPT_TLS_SNI_SERVERNAME
      </code>
      option of
      <a class="ulink" href="/doc/c-api/8.4/en/mysql-options.html" target="_top">
       <code class="literal">
        mysql_options()
       </code>
      </a>
      . The server
            name is not case-sensitive. To show which server name the
            client specified for the current session, if any, check the
      <a class="link" href="server-status-variables.html#statvar_Tls_sni_server_name">
       <code class="literal">
        Tls_sni_server_name
       </code>
      </a>
      status
            variable.
     </p>
     <p>
      Server Name Indication (SNI) is an extension to the TLS
            protocol (OpenSSL must be compiled using TLS extensions for
            this option to function). The MySQL implementation of SNI
            represents the client-side only.
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="option_mysql_migrate_keyring_tls-version">
      </a>
      <a class="link" href="mysql-migrate-keyring.html#option_mysql_migrate_keyring_tls-version">
       <code class="option">
        --tls-version=
        <em class="replaceable">
         <code>
          protocol_list
         </code>
        </em>
       </code>
      </a>
     </p>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for tls-version">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --tls-version=protocol_list
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Type
         </th>
         <td>
          String
         </td>
        </tr>
        <tr>
         <th>
          Default Value
         </th>
         <td>
          <p class="valid-value">
           <code class="literal">
            TLSv1,TLSv1.1,TLSv1.2,TLSv1.3
           </code>
           (OpenSSL 1.1.1 or higher)
          </p>
          <p class="valid-value">
           <code class="literal">
            TLSv1,TLSv1.1,TLSv1.2
           </code>
           (otherwise)
          </p>
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <a class="indexterm" name="idm46045305304112">
     </a>
     <a class="indexterm" name="idm46045305302624">
     </a>
     <p>
      The permissible TLS protocols for encrypted connections. The
            value is a list of one or more comma-separated protocol
            names. The protocols that can be named for this option
            depend on the SSL library used to compile MySQL. For
            details, see
      <a class="xref" href="encrypted-connection-protocols-ciphers.html" title="8.3.2 Encrypted Connection TLS Protocols and Ciphers">
       Section 8.3.2, “Encrypted Connection TLS Protocols and Ciphers”
      </a>
      .
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="option_mysql_migrate_keyring_user">
      </a>
      <a class="link" href="mysql-migrate-keyring.html#option_mysql_migrate_keyring_user">
       <code class="option">
        --user=
        <em class="replaceable">
         <code>
          user_name
         </code>
        </em>
       </code>
      </a>
      ,
      <code class="option">
       -u
       <em class="replaceable">
        <code>
         user_name
        </code>
       </em>
      </code>
     </p>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for user">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --user=user_name
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Type
         </th>
         <td>
          String
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <a class="indexterm" name="idm46045305289008">
     </a>
     <a class="indexterm" name="idm46045305287520">
     </a>
     <p>
      The user name of the MySQL account used for connecting to
            the running server that is currently using one of the key
            migration keystores.
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="option_mysql_migrate_keyring_verbose">
      </a>
      <a class="link" href="mysql-migrate-keyring.html#option_mysql_migrate_keyring_verbose">
       <code class="option">
        --verbose
       </code>
      </a>
      ,
      <code class="option">
       -v
      </code>
     </p>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for verbose">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --verbose
          </code>
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <a class="indexterm" name="idm46045305277392">
     </a>
     <a class="indexterm" name="idm46045305275904">
     </a>
     <p>
      Verbose mode. Produce more output about what the program
            does.
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="option_mysql_migrate_keyring_version">
      </a>
      <a class="link" href="mysql-migrate-keyring.html#option_mysql_migrate_keyring_version">
       <code class="option">
        --version
       </code>
      </a>
      ,
      <code class="option">
       -V
      </code>
     </p>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for version">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --version
          </code>
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <a class="indexterm" name="idm46045305265808">
     </a>
     <a class="indexterm" name="idm46045305264320">
     </a>
     <p>
      Display version information and exit.
     </p>
    </li>
   </ul>
  </div>
 </div>
 <br/>
</div>
