<div id="docs-body">
 <div class="section">
  <div class="titlepage">
   <div>
    <div>
     <h2 class="title">
      <a name="mysql-enterprise-security">
      </a>
      32.2 MySQL Enterprise Security Overview
     </h2>
    </div>
   </div>
  </div>
  <a class="indexterm" name="idm46045060245648">
  </a>
  <a class="indexterm" name="idm46045060244560">
  </a>
  <p>
   MySQL Enterprise Edition provides plugins that implement security features using
      external services:
  </p>
  <div class="itemizedlist">
   <ul class="itemizedlist" style="list-style-type: disc; ">
    <li class="listitem">
     <p>
      MySQL Enterprise Edition includes an authentication plugin that enables MySQL
          Server to use LDAP (Lightweight Directory Access Protocol) to
          authenticate MySQL users. LDAP Authentications supports user
          name and password, SASL, and GSSAPI/Kerberos authentication
          methods to LDAP services. For more information, see
      <a class="xref" href="ldap-pluggable-authentication.html" title="8.4.1.7 LDAP Pluggable Authentication">
       Section 8.4.1.7, “LDAP Pluggable Authentication”
      </a>
      .
     </p>
    </li>
    <li class="listitem">
     <p>
      MySQL Enterprise Edition includes an authentication plugin that enables MySQL
          Server to use Native Kerberos to authenticate MySQL users
          using there Kerberos Principals. For more information, see
      <a class="xref" href="kerberos-pluggable-authentication.html" title="8.4.1.8 Kerberos Pluggable Authentication">
       Section 8.4.1.8, “Kerberos Pluggable Authentication”
      </a>
      .
     </p>
    </li>
    <li class="listitem">
     <p>
      MySQL Enterprise Edition includes an authentication plugin that enables MySQL
          Server to use PAM (Pluggable Authentication Modules) to
          authenticate MySQL users. PAM enables a system to use a
          standard interface to access various kinds of authentication
          methods, such as Unix passwords or an LDAP directory. For more
          information, see
      <a class="xref" href="pam-pluggable-authentication.html" title="8.4.1.5 PAM Pluggable Authentication">
       Section 8.4.1.5, “PAM Pluggable Authentication”
      </a>
      .
     </p>
    </li>
    <li class="listitem">
     <p>
      MySQL Enterprise Edition includes an authentication plugin that performs external
          authentication on Windows, enabling MySQL Server to use native
          Windows services to authenticate client connections. Users who
          have logged in to Windows can connect from MySQL client
          programs to the server based on the information in their
          environment without specifying an additional password. For
          more information, see
      <a class="xref" href="windows-pluggable-authentication.html" title="8.4.1.6 Windows Pluggable Authentication">
       Section 8.4.1.6, “Windows Pluggable Authentication”
      </a>
      .
     </p>
    </li>
    <li class="listitem">
     <p>
      MySQL Enterprise Edition includes a suite of masking and de-identification
          functions that perform subsetting, random generation, and
          dictionary replacement to de-identify strings, numerics, phone
          numbers, emails and more. These functions enable masking
          existing data using several methods such as obfuscation
          (removing identifying characteristics), generation of
          formatted random data, and data replacement or substitution.
          For more information, see
      <a class="xref" href="data-masking.html" title="8.5 MySQL Enterprise Data Masking and De-Identification">
       Section 8.5, “MySQL Enterprise Data Masking and De-Identification”
      </a>
      .
     </p>
    </li>
    <li class="listitem">
     <p>
      MySQL Enterprise Edition includes a set of encryption functions based on the
          OpenSSL library that expose OpenSSL capabilities at the SQL
          level. For more information, see
      <a class="xref" href="mysql-enterprise-encryption.html" title="32.3 MySQL Enterprise Encryption Overview">
       Section 32.3, “MySQL Enterprise Encryption Overview”
      </a>
      .
     </p>
    </li>
    <li class="listitem">
     <p>
      MySQL Enterprise Edition 5.7 and higher includes a keyring plugin that uses
          Oracle Key Vault as a backend for keyring storage. For more
          information, see
      <a class="xref" href="keyring.html" title="8.4.4 The MySQL Keyring">
       Section 8.4.4, “The MySQL Keyring”
      </a>
      .
     </p>
    </li>
    <li class="listitem">
     <p>
      MySQL Transparent Data Encryption (TDE) provides at-rest
          encryption for MySQL Server for all files that might contain
          sensitive data. For more information, see
      <a class="xref" href="innodb-data-encryption.html" title="17.13 InnoDB Data-at-Rest Encryption">
       Section 17.13, “InnoDB Data-at-Rest Encryption”
      </a>
      ,
      <a class="xref" href="replication-binlog-encryption.html" title="19.3.2 Encrypting Binary Log Files and Relay Log Files">
       Section 19.3.2, “Encrypting Binary Log Files and Relay Log Files”
      </a>
      , and
      <a class="xref" href="audit-log-logging-configuration.html#audit-log-file-encryption" title="Encrypting Audit Log Files">
       Encrypting Audit Log Files
      </a>
      .
     </p>
    </li>
   </ul>
  </div>
  <p>
   For other related Enterprise security features, see
   <a class="xref" href="mysql-enterprise-encryption.html" title="32.3 MySQL Enterprise Encryption Overview">
    Section 32.3, “MySQL Enterprise Encryption Overview”
   </a>
   .
  </p>
 </div>
 <br/>
</div>
