Configuring the MariaDB Server

To configure the MariaDB server to connect with Cryptographic Security Platform Vault for Databases, you will need to install the entrust_key_management.so plugin. This plugin is included in the Cryptographic Security Platform Vault package and is automatically deployed in the same directory as the Policy Agent.

  1. Create a symbolic link from the plugin file entrust_key_management.so to the MariaDB Server VM plugin directory. The plugin directory may be different depending on the Linux distribution. For example, for Ubuntu it is /usr/lib/mysql/plugin, while in RHEL it is /usr/lib64/mysql/plugin.

    Copy
    ln -s </pa_installation_directory_path/lib/entrust_key_management_plugin.so> </path_of_mariadb_plugin_directory/entrust_key_management_plugin.so>
  2. Log in to MariaDB using the following command:  mariadb

    If you want to log in using a specific user, use the following command:    mariadb -u <user_name> -p

  3. Run the following MariaDB query to install the plugin: INSTALL SONAME 'entrust_key_management';