You can create TDE-enabled database servers on several database distributions and technologies.
Supported database distributions
You can create TDE-enabled databases on:
- Enterprise Postgres (Oracle Compatible) 15 and later versions, formerly EDB Postgres Advanced Server.
- Enterprise Postgres 15 and later versions, formerly EDB Postgres Extended Server.
Note
EDB doesn't support creating TDE-enabled servers on PostgreSQL. TDE relies on a mechanism developed by EDB for Enterprise Postgres (Oracle Compatible) and Enterprise Postgres.
OpenSSL requirements
EDB TDE uses OpenSSL to encrypt data files with the AES encryption algorithm.
- On Windows, TDE uses OpenSSL 3.
- On Linux, TDE uses the OpenSSL version installed in the host operating system. To check the installed version, run
openssl version.
For more information, see the OpenSSL documentation. If you're using a custom build not provided by the OpenSSL community, consult your vendor's documentation.
Supported technologies and how to enable TDE in each
How you enable TDE depends on how you deploy Postgres:
- For self-managed infrastructure — Enterprise Postgres (Oracle Compatible) or Enterprise Postgres installed on virtual machines or physical servers, on-premises or in the cloud, including as part of an EDB Postgres Distributed (PGD) cluster — see Creating a new TDE-enabled cluster on self-managed infrastructure.
- In EDB Postgres AI Hybrid Manager, you enable TDE from the console when you create a cluster. See Enabling KMS for TDE.
- In EDB Postgres for Kubernetes and EDB Postgres Distributed for Kubernetes, you enable TDE declaratively through the
tdestanza of the cluster manifest. See TDE in EDB Postgres for Kubernetes and TDE in EDB Postgres Distributed for Kubernetes.