Single-user mode

If you invoke postgres in single-user mode with TDE enabled, the postgres command reads either:

  • The PGDATAKEYUNWRAPCMD environment variable, if set
  • The data_encryption_key_unwrap_command value in the postgresql.conf file