MySQL 8.0 Secure Deployment Guide

Abstract

This is the MySQL 8.0 Secure Deployment Guide. It documents procedures for deploying a Linux-generic binary distribution of MySQL Enterprise Edition Server with features for implementing and managing the security of a MySQL installation. The deployment described in this guide is performed on Oracle Linux.

For help with using MySQL, please visit the MySQL Forums, where you can discuss your issues with other MySQL users.

Document generated on: 2024-12-24 (revision: 80591)

Table of Contents

Preface and Legal Notices

1 Introduction

2 Downloading the MySQL for Linux Generic Binary Package

3 Verifying Package Integrity

4 Installing the MySQL Binary Package

5 Post Installation Setup

6 Installing the MySQL Password Validation Component

7 Installing MySQL Enterprise Audit

8 Installing MySQL Enterprise Firewall

9 Installing Connection Control Plugins

10 Block Encryption Mode Configuration

11 Enabling Authentication

12 Configuring MySQL to Use Secure Connections

13 Creating User Accounts

14 Connecting to the Server

A Transparent Data Encryption (TDE) and MySQL Keyring

B Data Masking and De-Identification

C FIPS Support

D SQL Roles and Dynamic Privileges

E Installation Directory and File Permissions

F Deployment Configuration File