minio/docs
1
0
Fork 0
mirror of https://github.com/minio/docs.git synced 2025-07-31 18:04:52 +03:00
Code Activity

Quick Fix: KES Guidance (#1187)

Browse Source 
We already state on one page that you cannot undo KES once configured.

This ensures we make that statement on all other relevant pages.

Staged:

-
http://192.241.195.202:9000/staging/QUICKFIX/linux/operations/server-side-encryption.html
- SSE-KMS and SSE-S3 tabs
-
http://192.241.195.202:9000/staging/QUICKFIX/linux/operations/server-side-encryption/configure-minio-kes.html
-
http://192.241.195.202:9000/staging/QUICKFIX/linux/administration/server-side-encryption.html
SSE KMS and SSE-S3 Tabs
-
http://192.241.195.202:9000/staging/QUICKFIX/linux/administration/server-side-encryption/server-side-encryption-sse-kms.html#quickstart
-
http://192.241.195.202:9000/staging/QUICKFIX/linux/administration/server-side-encryption/server-side-encryption-sse-s3.html#quickstart
This commit is contained in:
Ravind Kumar
2024-04-15 14:58:26 -04:00
committed by GitHub
parent 24dd7edf49
commit e71bbe9040
6 changed files with 33 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
source/operations/server-side-encryption.rst
View File

@ -56,6 +56,9 @@ supports the following encryption strategies:
For buckets without automatic SSE-KMS encryption, clients can specify
an |EK| as part of the write operation instead.
MinIO encrypts backend data as part of enabling server-side encryption.
You cannot disable SSE-KMS encryption once enabled.
SSE-KMS provides more granular and customizable encryption compared to
SSE-S3 and SSE-C and is recommended over the other supported encryption
methods.
@ -72,6 +75,9 @@ supports the following encryption strategies:
For buckets without automatic SSE-S3 encryption, clients can request
SSE encryption as part of the write operation instead.
MinIO encrypts backend data as part of enabling server-side encryption.
You cannot disable SSE-KMS encryption once enabled.
For a tutorial on enabling SSE-s3 in a local (non-production) MinIO Deployment, see :ref:`minio-encryption-sse-s3-quickstart`.
.. tab-item:: SSE-C
@ -87,4 +93,4 @@ supports the following encryption strategies:
:titlesonly:
:hidden:
/operations/server-side-encryption/configure-minio-kes
/operations/server-side-encryption/configure-minio-kes