mysql_migrate_keyring — Keyring Key Migration Utility • --server-public-key-path= file_name • --socket= path ,  -S  path • --source-keyring= name • --source-keyring-configuration-dir= dir_name • --ssl* • --ssl-fips-mode={OFF|ON|STRICT} The path name to a file in PEM format containing a client-side copy of the public key required by the server for RSA key pair-based password exchange. This option applies to clients that authenticate with the  sha256_password  or  caching_sha2_password  authentication plugin. This option is ignored for accounts that do not authenticate with one of those plugins. It is also ignored if RSA-based password exchange is not used, as is the case when the client connects to the server using a secure connection. If  --server-public-key-path= file_name  is given and specifies a valid public key file, it takes precedence over  --get-server-public-key . For  sha256_password , this option applies only if MySQL was built using OpenSSL. For information about the  sha256_password  and  caching_sha2_password  plugins, see Section 6.4.1.3, “SHA-256 Pluggable Authentication” , and Section 6.4.1.2, “Caching SHA-2 Pluggable Authentication” . For Unix socket file or Windows named pipe connections, the socket file or named pipe for connecting to the running server that is currently using one of the key migration keystores. On Windows, this option applies only if the server was started with the  named_pipe  system variable enabled to support named-pipe connections. In addition, the user making the connection must be a member of the Windows group specified by the  named_pipe_full_access_group  system variable. The source keyring component for key migration. This is the component library file name specified without any platform-specific extension such as  .so  or  .dll . For example, to use the component for which the library file is  component_keyring_file.so , specify the option as  --source- keyring=component_keyring_file . --component-dir ,  --source-keyring , and  --destination- keyring  are mandatory for all keyring migration operations performed by  mysql_migrate_keyring . In addition, the source and destination components must differ, and both components must be properly configured so that  mysql_migrate_keyring  can load and use them. This option applies only if the source keyring component global configuration file contains "read_local_config": true , indicating that component configuration is contained in the local configuration file. The option value specifies the directory containing that local file. Options that begin with  --ssl  specify whether to connect to the server using encryption and indicate where to find SSL keys and certificates. See Command Options for Encrypted Connections. Controls whether to enable FIPS mode on the client side. The  --ssl-fips-mode  option differs from other  --ssl- xxx  options in that it is not used to establish encrypted connections, but rather to affect which cryptographic operations to permit. See Section 6.8, “FIPS Support” . 597 Note