Re: Encryption can't find master key, please check the keyring is loaded

[Herrick Peterson]

I wouldn not rotate or re-import the master key as a first step. With TDE, the existing master key needs to remain available through the same keyring after the upgrade.

I would first verify that the keyring is actually loaded and that MySQL sees the expected key IDs, rather than only checking the keyring file and configuration.

Also check the MySQL error log carefully during startup and confirm that the keyring component/plugin is initialized before the encrypted tables are accessed.

If you can share the relevant keyring configuration and the output of:

SELECT * FROM performance_schema.keyring_component_status;

it should help determine whether this is a keyring loading issue or a missing master key.

Herrick, DevOps Engineer @accuweb.cloud