The MySQL Keyring The  keyring_oci  plugin supports the configuration parameters shown in the following table. To specify these parameters, assign values to the corresponding system variables. Configuration Parameter System Variable Mandatory User OCID keyring_oci_user Yes Tenancy OCID keyring_oci_tenancy Yes Compartment OCID keyring_oci_compartment Yes Vault OCID keyring_oci_virtual_vault Yes Master key OCID keyring_oci_master_key Yes Encryption server endpoint keyring_oci_encryption_endpoint Yes Key management server endpoint keyring_oci_management_endpoint Yes Vaults server endpoint keyring_oci_vaults_endpoint Yes Secrets server endpoint keyring_oci_secrets_endpoint Yes RSA private key file keyring_oci_key_file Yes RSA private key fingerprint keyring_oci_key_fingerprint Yes CA certificate bundle file keyring_oci_ca_certificate No •Oracle Cloud Infrastructure uses Oracle Cloud IDs (OCIDs) extensively to designate resources, and several  keyring_oci  parameters specify OCID values of the resources to use. Consequently, prior to using the  keyring_oci  plugin, these prerequisites must be satisfied: •A user for connecting to Oracle Cloud Infrastructure must exist. Create the user if necessary and assign the user OCID to the  keyring_oci_user  system variable. •The Oracle Cloud Infrastructure tenancy to be used must exist, as well as the MySQL compartment within the tenancy, and the vault within the compartment. Create these resources if necessary and make sure the user is enabled to use them. Assign the OCIDs for the tenancy, compartment and vault to the  keyring_oci_tenancy ,  keyring_oci_compartment , and keyring_oci_virtual_vault  system variables. •A master key for encryption must exist. Create it if necessary and assign its OCID to the keyring_oci_master_key  system variable. •Several server endpoints must be specified. These endpoints are vault specific and Oracle Cloud Infrastructure assigns them at vault-creation time. Obtain their values from the vault details page and assign them to the  keyring_oci_encryption_endpoint , keyring_oci_management_endpoint ,  keyring_oci_vaults_endpoint , and keyring_oci_secrets_endpoint  system variables. •The Oracle Cloud Infrastructure API uses an RSA private/public key pair for authentication. To create this key pair and obtain the key fingerprint, use the instructions at Required Keys and OCIDs. Assign the private key file name and key fingerprint to the  keyring_oci_key_file  and keyring_oci_key_fingerprint  system variables. To be usable during the server startup process,  keyring_oci  must be loaded using the  --early- plugin-load  option. As indicated by the preceding table, several plugin-related system variables are mandatory and must also be set: In addition to the mandatory system variables,  keyring_oci_ca_certificate  optionally may be set to specify a certificate authority (CA) certificate bundle file for peer authentication. 1428