Page History

...

Prepare changing the encryption key

1. The node initiator generates new encryption key(s) for cache group(s).The distributed process starts starts new distributed process, generating a new cache encryption key change operation by enсryption key(s) and sending an initial discovery message with the list of re-encrypted cache groups and encrypted keys.
2. The action configured for the distributed process configured action initiates initiates (but doesn't start) a new local re-encryption task on each node. If the node receives the encryption key when re-encryption task was initiated, the current process is aborted and task is cancelled.
3. The coordinator starts a new distributed process by sending the digest of the encryption key to begin re-encryption when the preparation phase is completed without errors.
4. Each node verifies the digest of the encryption key from the request with the digest of the re-encryption task key and ensures that task was not cancelled. If the verification is successful, the node starts local re-encryption task, otherwise the process is aborted.

Local re-encryption task

...