diff --git a/documentation/docs/setup.md b/documentation/docs/setup.md index c46ac998..e6e6c7e0 100644 --- a/documentation/docs/setup.md +++ b/documentation/docs/setup.md @@ -58,7 +58,7 @@ Load the `pg_tde` at the start time. The extension requires additional shared me * `provider-name` is the name of the provider. You can specify any name, it's for you to identify the provider. * `kmip-IP` is the IP address of a domain name of the KMIP server - * `5696` is the port to communicate with the KMIP server. + * `port` is the port to communicate with the KMIP server. Typically used port is 5696. * `server-certificate` is the path to the certificate file for the KMIP server. * `client key` is the path to the client key. diff --git a/documentation/docs/tde.md b/documentation/docs/tde.md index bd3925f4..a33ea97f 100644 --- a/documentation/docs/tde.md +++ b/documentation/docs/tde.md @@ -6,7 +6,7 @@ Transparent Data Encryption is a technology to protect data at rest. The encrypt To encrypt the data, two types of keys are used: -* Database encryption keys to encrypt user data. These keys are stored internally, near the data that they encrypt. +* Internal encryption keys to encrypt user data. They are stored internally, near the data that they encrypt. * The principal key to encrypt database keys. It is kept separately from the database keys and is managed externally in the key management store. You have the following options to store and manage principal keys externally: