Encryption at rest using KMIP Server . Where can we see the database keys and master keys?

Working with Data
#1

Need to know where master key and database keys are stored when using encryption at rest with KMIP server . How we can rotate the database keys using master keys .

#2

Hello Arvind, if I understood your question correctly, master key reside in KMIP server and with this master key the key used to encrypt database is encrypted. You can rotate/refresh the master key in KMIP server with its inbuilt functionality.

#3

To rotate the database key you can refer to this documentation: https://docs.mongodb.com/manual/tutorial/rotate-encryption-key/