{
  "id": "pem-encryption",
  "title": "Encrypt private keys",
  "url": "https://redis.io/docs/latest/operate/rs/7.8/security/encryption/pem-encryption/",
  "summary": "Enable PEM encryption to encrypt all private keys on disk.",
  "content": "\nEnable PEM encryption to automatically encrypt all private keys on disk. Public keys (`.cert` files) are not encrypted.\n\nWhen certificates are rotated, the encrypted private keys are also rotated.\n\n## Enable PEM encryption\n\nTo enable PEM encryption and encrypt private keys on the disk, use [`rladmin`]() or the [REST API]().\n\n\n- [`rladmin cluster config`]():\n\n    ```sh\n    rladmin cluster config encrypt_pkeys enabled\n    ```\n\n- [Update cluster settings]() REST API request:\n\n    ```sh\n    PUT /v1/cluster\n    { \"encrypt_pkeys\": true }\n    ```\n\n## Deactivate PEM encryption\n\nTo deactivate PEM encryption and decrypt private keys on the disk, use [`rladmin`]() or the [REST API]().\n\n- [`rladmin cluster config`]():\n\n    ```sh\n    rladmin cluster config encrypt_pkeys disabled\n    ```\n\n- [Update cluster settings]() REST API request:\n\n    ```sh\n    PUT /v1/cluster\n    { \"encrypt_pkeys\": false }\n    ```\n",
  "tags": ["docs","operate","rs"],
  "last_updated": "2026-04-01T08:10:08-05:00"
}