Technical reference overview¶
This section covers the internal components and tools that power pg_tde.
Use it to understand how encryption is implemented, fine-tune a configuration, leverage advanced CLI tools and functions for diagnostics and customization.
Usage reference¶
A description of the main pg_tde operations available, including configuring key providers, managing principal keys, setting permissions, and encrypting tables.
Functions¶
Use built-in functions to manage key providers, create and rotate principal keys, and verify encryption status. Includes commands for Vault, KMIP, and local providers, plus utilities to inspect or validate keys.
GUC Variables¶
Configure how pg_tde behaves with PostgreSQL. Control WAL encryption, enforce encryption for new tables, and manage global provider inheritance. Includes scope levels, defaults, and permission requirements.
Streaming replication¶
Learn how to configure PostgreSQL streaming replication with pg_tde using the tde_heap access method. Covers primary and standby setup, key management requirements, and validation steps.