Decrypt an encrypted table¶
Method 1. Change the access method¶
If you encrypted a table with the tde_heap
or tde_heap_basic
access method and need to decrypt it, run the following command against the desired table (mytable
in the example below):
ALTER TABLE mytable SET access method heap;
Hint
The ALTER TABLE <tablename> SET access method statement removes the [hint bits :octicons-link-external-16:](https://wiki.postgresql.org/wiki/Hint_Bits). This removal can lead to heavy writes to the database table, even if you're just reading from it.
Running a plain `SELECT, count(*)`, or `VACUUM` commands on the entire table will check every tuple for visibility and set its hint bits. Therefore, after executing the ALTER command, run a simple "count(*)" on your tables:
```
SELECT COUNT(*) FROM mytable;
Check that the table is not encrypted:
SELECT pg_tde_is_encrypted('mytable');
The output returns f
meaning that the table is no longer encrypted.
In the same way you can re-encrypt the data with the tde_heap_basic
access method.
ALTER TABLE mytable SET access method tde_heap_basic;
Note that the indexes and WAL files will no longer be encrypted.
Hint
Running a plain `SELECT, count(*)`, or `VACUUM` commands on the entire table will check every tuple for visibility and set its hint bits. Therefore, after executing the ALTER command, run a simple "count(*)" on your tables:
```
SELECT COUNT(*) FROM mytable;
Method 2. Create a new unencrypted table on the base of the encrypted one¶
Alternatively, you can create a new unencrypted table with the same structure and data as the initial table. For example, the original encrypted table is EncryptedCustomers
. Use the following command to create a new table Customers
:
CREATE TABLE Customers AS
SELECT * FROM EncryptedCustomers;
The new table Customers
inherits the structure and the data from EncryptedCustomers
.
(Optional) If you no longer need the EncryptedCustomers
table, you can delete it.
DROP TABLE EncryptedCustomers;
Get expert help¶
If you need assistance, visit the community forum for comprehensive and free database knowledge, or contact our Percona Database Experts for professional support and services.