[mysql@node01 ~]$ vim /etc/my.cnf
[mysqld]
early-plugin-load=keyring_file.so
keyring_file_data=/usr/local/mysql/data/keyring

(root@node01) > select plugin_name,plugin_status from information_schema.plugins where plugin_name like 'keyring%';
+--------------+---------------+
| plugin_name  | plugin_status |
+--------------+---------------+
| keyring_file | ACTIVE        |
+--------------+---------------+
1 row in set (0.00 sec)

(root@node01) > alter table customer encryption='Y';
Query OK, 300000 rows affected (21.86 sec)
Records: 300000  Duplicates: 0  Warnings: 0

更换主秘钥
(root@node01) > alter instance rotate innodb master key;
Query OK, 0 rows affected (0.10 sec)


全局参数
(root@node01) > show global variables like 'default_table_encryption';
+--------------------------+-------+
| Variable_name            | Value |
+--------------------------+-------+
| default_table_encryption | OFF   |
+--------------------------+-------+
1 row in set (0.08 sec)

(root@node01) > show global variables like 'innodb_redo_log_encrypt';
+-------------------------+-------+
| Variable_name           | Value |
+-------------------------+-------+
| innodb_redo_log_encrypt | OFF   |
+-------------------------+-------+
1 row in set (0.01 sec)

(root@node01) > show global variables like 'innodb_undo_log_encrypt';    
+-------------------------+-------+
| Variable_name           | Value |
+-------------------------+-------+
| innodb_undo_log_encrypt | OFF   |
+-------------------------+-------+
1 row in set (0.00 sec)

(root@node01) > show global variables like 'binlog_encryption';         
+-------------------+-------+
| Variable_name     | Value |
+-------------------+-------+
| binlog_encryption | OFF   |
+-------------------+-------+
1 row in set (0.01 sec)