DomGarguilo commented on code in PR #342:
URL: https://github.com/apache/accumulo-website/pull/342#discussion_r981697278
##########
_docs-2/security/on-disk-encryption.md:
##########
@@ -5,23 +5,57 @@ order: 5
---
For an additional layer of security, Accumulo can encrypt files stored on
disk. On Disk encryption was reworked
-for 2.0, making it easier to configure and more secure. The files that can be
encrypted include: [RFiles][design] and Write Ahead Logs (WALs). NOTE: This
feature is considered experimental. For more information, see the [notes
below](#things-to-keep-in-mind).
+for 2.0, making it easier to configure and more secure. Starting with 2.1 On
Disk Encryption can now be configured
+per table as well as for the entire instance (all tables). The files that can
be encrypted include: [RFiles][design] and Write Ahead
+Logs (WALs). NOTE: This feature is considered experimental. For more
information, see the [notes below](#things-to-keep-in-mind).
## Configuration
-To encrypt all tables on disk, encryption must be enabled before an Accumulo
instance is initialized. If on disk
-encryption is enabled on an existing cluster, only files created after it is
enabled will be encrypted
-(root and metadata tables will not be encrypted in this case) and existing
data won't be encrypted until compaction. To configure on disk encryption, add
the
-{% plink instance.crypto.service %} property to your `accumulo.properties`
file. The value of this property is the
+To encrypt tables on disk, encryption must be enabled before an Accumulo
instance is initialized. This is
+done by configuring a crypto service factory. If on disk encryption is enabled
on an existing cluster, only files
Review Comment:
looks like there are multiple places that could make this change
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
