mirror of
https://github.com/grafana/grafana.git
synced 2025-07-30 07:52:28 +08:00
18 lines
1.1 KiB
Markdown
18 lines
1.1 KiB
Markdown
+++
|
||
title = "Database encryption"
|
||
description = "Grafana database encryption"
|
||
keywords = ["grafana", "database", "encryption", "documentation"]
|
||
aliases = [""]
|
||
weight = 450
|
||
+++
|
||
|
||
# Grafana database encryption
|
||
|
||
Grafana’s database contains secrets, which are used to query data sources, send alert notifications and perform other functions within Grafana.
|
||
|
||
Grafana encrypts these secrets before they are written to the database, by using a symmetric-key encryption algorithm called Advanced Encryption Standard (AES), and using a [secret key]({{< relref "../administration/configuration/#secret_key" >}}) that you can change when you configure a new Grafana instance.
|
||
|
||
You can choose to use [envelope encryption]({{< relref "./envelope-encryption.md" >}}), which complements a [KMS integration]({{< relref "../enterprise/kms-integration/_index.md" >}}) in Grafana Enterprise by adding a layer of indirection to the encryption process.
|
||
|
||
In Grafana Enterprise, you can also choose to [encrypt secrets in AES-GCM mode]({{< relref "../administration/database-encryption-enterprise.md" >}}) instead of AES-CFB.
|