The MySQL Keyring At plugin startup, if the value assigned to  keyring_file_data  specifies a file that does not exist, the keyring_file  plugin attempts to create it (as well as its parent directory, if necessary). If you create the directory manually, it should have a restrictive mode and be accessible only to the account used to run the MySQL server. For example, on Unix and Unix-like systems, to use the  /usr/ local/mysql/mysql-keyring  directory, the following commands (executed as  root ) create the directory and set its mode and ownership: INSTALL_LAYOUT  Value Default  keyring_file_data  Value Otherwise keyring/keyring  under the CMAKE_INSTALL_PREFIX  value cd /usr/local/mysql mkdir mysql-keyring chmod 750 mysql-keyring chown mysql mysql-keyring chgrp mysql mysql-keyring If the  keyring_file  plugin cannot create or access its data file, it writes an error message to the error log. If an attempted runtime assignment to  keyring_file_data  results in an error, the variable value remains unchanged. Important Once the  keyring_file  plugin has created its data file and started to use it, it is important not to remove the file. For example,  InnoDB  uses the file to store the master key used to decrypt the data in tables that use  InnoDB  tablespace encryption; see Section 15.13, “InnoDB Data-at-Rest Encryption” . Loss of the file causes data in such tables to become inaccessible. (It is permissible to rename or move the file, as long as you change the value of  keyring_file_data  to match.) It is recommended that you create a separate backup of the keyring data file immediately after you create the first encrypted table and before and after master key rotation. • keyring_hashicorp_auth_path Command-Line Format --keyring-hashicorp-auth-path=value Introduced 8.0.18 System Variable keyring_hashicorp_auth_path Scope Global Dynamic Yes SET_VAR  Hint Applies No Type String Default Value /v1/auth/approle/login The authentication path where AppRole authentication is enabled within the HashiCorp Vault server, for use by the  keyring_hashicorp  plugin. This variable is unavailable unless that plugin is installed. • keyring_hashicorp_ca_path 1454 Command-Line Format --keyring-hashicorp-ca-path=file_name Introduced 8.0.18