Skip to content

Commit

Permalink
docs: improve encryption section (#4745)
Browse files Browse the repository at this point in the history
  • Loading branch information
sleto-it authored Feb 12, 2020
1 parent b311f56 commit b2b0d79
Showing 1 changed file with 6 additions and 4 deletions.
10 changes: 6 additions & 4 deletions wiki/content/enterprise-features/index.md
Original file line number Diff line number Diff line change
Expand Up @@ -402,12 +402,11 @@ To enable encryption, we need to pass a file that stores the data encryption key
`--encryption_key_file`. The key size must be 16, 24, or 32 bytes long, and the key size determines
the corresponding block size for AES encryption ,i.e. AES-128, AES-192, and AES-256, respectively.

Here is an example encryption key file of size 16 bytes:

*enc_key_file*
You can use the following command to create the encryption key file (set _count_ equals to the
desired key size):

```
123456789012345
dd if=/dev/random bs=1 count=32 of=enc_key_file
```

### Turn on Encryption
Expand All @@ -419,6 +418,9 @@ dgraph zero --my=localhost:5080 --replicas 1 --idx 1
dgraph alpha --encryption_key_file "./enc_key_file" --my=localhost:7080 --lru_mb=1024 --zero=localhost:5080
```

If multiple alpha nodes are part of the cluster, you will need to pass the `--encryption_key_file` option to
each of the alphas.

### Bulk loader with Encryption

Even before Dgraph cluster starts, we can load data using bulk loader with encryption feature turned on.
Expand Down

0 comments on commit b2b0d79

Please sign in to comment.