mysql_migrate_keyring — Keyring Key Migration Utility authenticate as. To create or modify a login path file, use the  mysql_config_editor  utility. See Section 4.6.7, “mysql_config_editor — MySQL Configuration Utility” . For additional information about this and other option-file options, see Section 4.2.2.3, “Command-Line Options that Affect Option-File Handling” . Do not read any option files. If program startup fails due to reading unknown options from an option file, --no-defaults  can be used to prevent them from being read. The exception is that the  .mylogin.cnf  file is read in all cases, if it exists. This permits passwords to be specified in a safer way than on the command line even when  --no-defaults  is used. To create .mylogin.cnf , use the  mysql_config_editor  utility. See Section 4.6.7, “mysql_config_editor — MySQL Configuration Utility” . For additional information about this and other option-file options, see Section 4.2.2.3, “Command-Line Options that Affect Option-File Handling” . This option is mandatory when a running server is using the keyring. It tells  mysql_migrate_keyring to perform an online key migration. The option has these effects: The password of the MySQL account used for connecting to the running server that is currently using one of the key migration keystores. The password value is optional. If not given, mysql_migrate_keyring  prompts for one. If given, there must be  no space  between  --password= or  -p  and the password following it. If no password option is specified, the default is to send no password. Specifying a password on the command line should be considered insecure. To avoid giving the password on the command line, use an option file. See Section 6.1.2.1, “End-User Guidelines for Password Security” . To explicitly specify that there is no password and that  mysql_migrate_keyring  should not prompt for one, use the  --skip-password  option. For TCP/IP connections, the port number for connecting to the running server that is currently using one of the key migration keystores. Print the program name and all options that it gets from option files. For additional information about this and other option-file options, see Section 4.2.2.3, “Command-Line Options that Affect Option-File Handling” . 596 • --print-defaults • --port= port_num ,  -P  port_num • --password[= password ] ,  -p[ password ] • mysql_migrate_keyring  connects to the server using any connection options specified; these options are otherwise ignored. •After  mysql_migrate_keyring  connects to the server, it tells the server to pause keyring operations. When key copying is complete,  mysql_migrate_keyring  tells the server it can resume keyring operations before disconnecting. • --online-migration • --no-defaults