Skip to Main Content
The world's most popular open source database
Contact MySQL
|
Login
|
Register
MySQL.com
Downloads
Documentation
Developer Zone
Developer Zone
Downloads
MySQL.com
Documentation
MySQL Server
MySQL Enterprise
Workbench
InnoDB Cluster
MySQL NDB Cluster
Connectors
More
MySQL.com
Downloads
Developer Zone
Section Menu:
Documentation Home
MySQL 9.7 Reference Manual
Preface and Legal Notices
General Information
Installing MySQL
Upgrading MySQL
Downgrading MySQL
Tutorial
MySQL Programs
MySQL Server Administration
Security
General Security Issues
Security Guidelines
Keeping Passwords Secure
End-User Guidelines for Password Security
Administrator Guidelines for Password Security
Passwords and Logging
Making MySQL Secure Against Attackers
Security-Related mysqld Options and Variables
How to Run MySQL as a Normal User
Security Considerations for LOAD DATA LOCAL
Client Programming Security Guidelines
Access Control and Account Management
Account User Names and Passwords
Privileges Provided by MySQL
Grant Tables
Specifying Account Names
Specifying Role Names
Access Control, Stage 1: Connection Verification
Access Control, Stage 2: Request Verification
Adding Accounts, Assigning Privileges, and Dropping Accounts
Reserved Accounts
Using Roles
Account Categories
Privilege Restriction Using Partial Revokes
When Privilege Changes Take Effect
Assigning Account Passwords
Password Management
Server Handling of Expired Passwords
Pluggable Authentication
Multifactor Authentication
Proxy Users
Account Locking
Setting Account Resource Limits
Troubleshooting Problems Connecting to MySQL
SQL-Based Account Activity Auditing
Using Encrypted Connections
Configuring MySQL to Use Encrypted Connections
Encrypted Connection TLS Protocols and Ciphers
Creating SSL and RSA Certificates and Keys
Creating SSL and RSA Certificates and Keys using MySQL
Creating SSL Certificates and Keys Using openssl
Creating RSA Keys Using openssl
Connecting to MySQL Remotely from Windows with SSH
Reusing SSL Sessions
Security Components and Plugins
Authentication Plugins
Caching SHA-2 Pluggable Authentication
SHA-256 Pluggable Authentication
Client-Side Cleartext Pluggable Authentication
PAM Pluggable Authentication
Windows Pluggable Authentication
LDAP Pluggable Authentication
Kerberos Pluggable Authentication
No-Login Pluggable Authentication
OpenID Connect Pluggable Authentication
Socket Peer-Credential Pluggable Authentication
WebAuthn Pluggable Authentication
Test Pluggable Authentication
Pluggable Authentication System Variables
The Connection Control Component
Connection Control Component Installation
Connection Control Component Configuration
Migrating to the Connection Control Component
Connection Control Plugins
Connection Control Plugin Installation
Connection Control Plugin System and Status Variables
The Password Validation Component
Password Validation Component Installation and Uninstallation
Password Validation Options and Variables
Transitioning to the Password Validation Component
The MySQL Keyring
Keyring Components Versus Keyring Plugins
Keyring Component Installation
Keyring Plugin Installation
Using the component_keyring_file File-Based Keyring Component
Using the component_keyring_encrypted_file Encrypted File-Based Keyring Component
Using the keyring_okv KMIP Plugin
Using the component_keyring_kmip KMIP Component
Using the keyring_aws Amazon Web Services Keyring Plugin
Using the component_keyring_aws AWS Keyring Component
Using the HashiCorp Vault Keyring Plugin
Using the HashiCorp Vault Keyring Component
Using the Oracle Cloud Infrastructure Vault Keyring Component
Supported Keyring Key Types and Lengths
Migrating Keys Between Keyring Keystores
General-Purpose Keyring Key-Management Functions
Plugin-Specific Keyring Key-Management Functions
Keyring Metadata
Keyring Command Options
Keyring System Variables
MySQL Enterprise Audit Plugin (Deprecated)
Elements of MySQL Enterprise Audit Plugin (Deprecated)
Installing or Uninstalling MySQL Enterprise Audit Plugin (Deprecated)
MySQL Enterprise Audit Plugin (Deprecated) Security Considerations
Audit Log Plugin File Formats (Deprecated)
Configuring Audit Plugin Logging Characteristics for Audit Log Plugin (Deprecated)
Reading Audit Log Plugin Files (Deprecated)
Audit Log Plugin Filtering (Deprecated)
Writing Audit Log Plugin Filter Definitions (Deprecated)
Disabling Audit Logging for Audit Log Plugin (Deprecated)
Legacy Mode Audit Log Filtering (Deprecated)
Audit Log Plugin Reference (Deprecated)
Audit Log Plugin Restrictions (Deprecated)
MySQL Enterprise Audit Component
Elements of MySQL Enterprise Audit Component
Installing or Uninstalling MySQL Enterprise Audit with The Audit Log Component
MySQL Enterprise Audit Component Security Considerations
Audit Log Component File Format
Configuring Audit Logging Characteristics for Audit Log Component
Reading Audit Log Component Files
Audit Log Component Filtering
Writing Audit Log Component Filter Definitions
Disabling Audit Logging for Audit Log Component
Audit Log Component Reference
Audit Log Component Restrictions
The Audit Message Component
MySQL Enterprise Firewall
The MySQL Enterprise Firewall Plugin
The MySQL Enterprise Firewall Component
MySQL Enterprise Data Masking
Data-Masking Components Versus the Data-Masking Plugin
MySQL Enterprise Data Masking Components
MySQL Enterprise Data Masking Component Installation
Using MySQL Enterprise Data Masking Components
MySQL Enterprise Data Masking Component Function Reference
MySQL Enterprise Data Masking Component Function Descriptions
MySQL Enterprise Data Masking Component Variables
Dynamic Data Masking Policy Component
Installing the Component
Using MySQL Enterprise Dynamic Data Masking Policies
MySQL Enterprise Data Masking Plugin
MySQL Enterprise Data Masking Plugin Installation
Using the MySQL Enterprise Data Masking Plugin
MySQL Enterprise Data Masking Plugin Function Reference
MySQL Enterprise Data Masking Plugin Function Descriptions
MySQL Enterprise Encryption
MySQL Enterprise Encryption Installation and Upgrading
Configuring MySQL Enterprise Encryption
MySQL Enterprise Encryption Usage and Examples
MySQL Enterprise Encryption Function Reference
MySQL Enterprise Encryption Component Function Descriptions
SELinux
Check if SELinux is Enabled
Changing the SELinux Mode
MySQL Server SELinux Policies