Technical reference overview¶
This section covers the internal components and tools that power pg_tde.
Use it to understand how encryption is implemented, fine-tune a configuration, leverage advanced CLI tools and functions for diagnostics and customization.
Usage guide¶
Step-by-step instructions for using pg_tde. Set up the extension, configure key providers, create and rotate keys, manage permissions, and encrypt tables.
Streaming replication¶
Learn how to configure PostgreSQL streaming replication with pg_tde using the tde_heap access method. Covers primary and standby setup, key management requirements, and validation steps.
GUC Variables¶
Configure how pg_tde behaves with PostgreSQL. Control WAL encryption, enforce encryption for new tables, and manage global provider inheritance. Includes scope levels, defaults, and permission requirements.
Functions¶
Use built-in functions to manage key providers, create and rotate principal keys, and verify encryption status. Includes commands for Vault, KMIP, and local providers, plus utilities to inspect or validate keys.