The trepctl thl command is used to dynamically enable or disable on-disk encryption and compression of THL.
These options can also be set via tpm options. For more information see Section 7.15.4, “THL Encryption and Compression”
trepctl thl [ -compression ] [ -encryption ]
Pass enable or disable to the -compression
option to enable or disable THL compression accordingly.
Note that the replicators must be offline to change this option and the same enable|diable option must be applied to all hosts before bringing replication online:
On every host, place the services offline, and enable (or disable) compression:
shell>trepctl [-service <servicename>] offlineshell>trepctl [-service <servicename>] thl -compression [enable|disable]
When complete, bring the replicators online, starting with the Primary:
shell> trepctl [-service <servicename>] online
Pass enable or disable to the -encryption
option to enable or disable THL encryption accordingly.
Note that the replicators must be offline to change this option and the same enable|diable option must be applied to all hosts before bringing replication online:
On every host, place the services offline, and enable (or disable) encryption:
shell>trepctl [-service <servicename>] offlineshell>trepctl [-service <servicename>] thl -encryption [enable|disable]
When complete, bring the replicators online, starting with the Primary:
shell> trepctl [-service <servicename>] online
Pass genkey to the -encryption option to
generate a new encryption key. Unlike enabling/disbaling encrpytion, to change generate a new
encryption key, the replication service must be online.
shell>trepctl [-service <servicename>] onlineshell>trepctl [-service <servicename>] thl -encryption genkey
The genkey should ONLY be executed
on the primary node.