<div id="docs-body">
 <div class="section">
  <div class="titlepage">
   <div>
    <div>
     <h4 class="title">
      <a name="mysql-cluster-tde-limitations">
      </a>
      25.6.14.3 NDB File System Encryption Limitations
     </h4>
    </div>
   </div>
  </div>
  <p>
   Transparent data encryption in NDB Cluster is subject to the
        following restrictions and limitations:
  </p>
  <div class="itemizedlist">
   <ul class="itemizedlist" style="list-style-type: disc; ">
    <li class="listitem">
     <p>
      The file system password must be supplied to each individual
            data node.
     </p>
    </li>
    <li class="listitem">
     <p>
      File system password rotation requires an initial rolling
            restart of the data nodes; this must be performed manually,
            or by an application external to
      <code class="literal">
       NDB
      </code>
      ).
     </p>
    </li>
    <li class="listitem">
     <p>
      For a cluster with only a single replica
            (
      <a class="link" href="mysql-cluster-ndbd-definition.html#ndbparam-ndbd-noofreplicas">
       <code class="literal">
        NoOfReplicas = 1
       </code>
      </a>
      ),
            a full backup and restore is required for file system
            password rotation.
     </p>
    </li>
    <li class="listitem">
     <p>
      Rotation of all data encryption keys requires an initial
            node restart.
     </p>
    </li>
   </ul>
  </div>
  <p>
   <a name="mysql-cluster-tde-limitations-replication">
   </a>
   <b>
    NDB TDE and NDB Replication.
   </b>
   The use of an encrypted filesystem does not have any effect on
          NDB Replication. All of the following scenarios are supported:
  </p>
  <div class="itemizedlist">
   <ul class="itemizedlist" style="list-style-type: disc; ">
    <li class="listitem">
     <p>
      Replication of an NDB Cluster having an encrypted file
            system to an NDB Cluster whose file system is not encrypted.
     </p>
    </li>
    <li class="listitem">
     <p>
      Replication of an NDB Cluster whose file system is not
            encrypted to an NDB Cluster whose file system is encrypted.
     </p>
    </li>
    <li class="listitem">
     <p>
      Replication of an NDB Cluster whose file system is encrypted
            to a standalone MySQL server using
      <a class="link" href="innodb-storage-engine.html" title="Chapter 17 The InnoDB Storage Engine">
       <code class="literal">
        InnoDB
       </code>
      </a>
      tables which are not
            encrypted.
     </p>
    </li>
    <li class="listitem">
     <p>
      Replication of an NDB Cluster with an unencrypted file
            system to a standalone MySQL server using
      <code class="literal">
       InnoDB
      </code>
      tables with file sytem encryption.
     </p>
    </li>
   </ul>
  </div>
 </div>
 <br/>
</div>
