Implementing Transparent Data Encryption At Rest
Presented by:
Robert Bernier
Robert's experience extends several decades. His first experience was playing hangman on a DECwriter shortly after man first landed on the moon. His foray into commercial applications was programming Fortran, via punchcards, on an IBM 360 which in those days had 4MB RAM. Over the ensuing years he progressed into the first generation of workstations among which included the IBM 8080 XT, and AT. Robert discovered Linux and the opensource world in the 90s. By the early 2000s his primary focus had become all things PostgreSQL and has since then worked in various sized companies both small and large including Fortune 50 companies.
Robert is the Senior PostgreSQL Consultant at Percona. In his spare time he enjoys all things nature including hiking, camping, canoing and trying not to fall off the side of mountains here in the Pacific Northwest.
No video of the event yet, sorry!
The very last line of defense against protecting your data from theft or exploitation is securing the appliance that holds it. In the past, protecting your data at rest in PostgreSQL relied upon the filesystem encryption used on the persistant storage. This session will introduce you to the freely available opensource extension pg_tde. W'ell review basic concepts, and how easy it is to install it and use. One of the more important issues to be covered is how to successfully implement and manage its keys using an identity-based secrets and encryption management system.
- Date:
- Duration:
- 50 min
- Room:
- Conference:
- Postgres Conference: 2026
- Language:
- Track:
- Essentials
- Difficulty:
- Medium