When using an automatically opening keystore, you do not need to enter the passphrase and you can automatically open the keystore when the instance starts. Execute the pgx_keystore command to enable automatic opening of the keystore.
> pgx_keystore --enable-auto-open C:\key\store\location\keystore.ks Enter the passphrase: Automatic opening of the keystore is now enabled >
See
Refer to "pgx_keystore" in the Reference for information on pgx_keystore command.
When automatic opening is enabled, an automatically opening keystore is created in the same directory as the original keystore. The file name of the automatically opening keystore is keystore.aks. The file keystore.aks is an obfuscated copy of the decrypted content of the keystore.ks file. As long as this file exists, there is no need to enter the passphrase to open the keystore when starting the instance.
Do not delete the original keystore file, keystore.ks. It is required for changing the master encryption key and the passphrase. When you change the master encryption key and the passphrase, keystore.aks is recreated from the original keystore file, keystore.ks.
Protect keystore.ks, keystore.aks, and the directory that stores the keystore so that only the user who starts the instance can access them.
Configure the permission of the files so that only the user who starts the instance can access the SQL functions and commands that create these files. Accordingly, manually configure the same permission mode if the files are restored.
Set the permission mode in [Properties] in Windows(R) Explorer.
See
Refer to [Help and Support] in Windows(R) for information on [Properties].
An automatically opening keystore will only open on the computer where it was created.
To disable automatic opening of the keystore, delete keystore.aks.
Note
To use WebAdmin for recovery, you must enable automatic opening of the keystore.
Refer to "5.7 Backing Up and Restoring/Recovering the Database" after enabling or reconfiguring encryption to back up the database.
Specify a different directory from those below as the keystore storage destination:
Data storage destination
Tablespace storage destination
Transaction log storage destination
Backup data storage destination
