MySQL Tablespace Encryption is comparatively unassuming to set up. You requirement be by resources of MySQL , innodb_file_per_table
https://dev.mysql.com/doc/refman/5.7/en/innodb-tablespace-encryption.html
The MySQL documents shelters the whole thing you requirement to set this up:
https://dev.mysql.com/doc/refman/5.7/en/keyring.html
https://www.percona.com/blog/2016/04/08/mysql-data-at-rest-encryption
http://mysqlserverteam.com/mysql-enterprise-transparent-data-encryption-tde-provides-at-rest-encryption-for-physical-innodb-tablespace-data-files/
But my blog column would be actual quick if I just common a link. So....
Once promoted and on MySQL 5.7 you need to have a effective place for your key file. I have a MySQL datadir as /var/lib/mysql/data this allows defaulting positions for people to find it if wanted but also lets a simple mounted position for more disks if wanted as well. This also evades having to do extra edits to selinux and etc meanwhile it by now allows /var/lib/mysql.
OK excessive you have a table.
What about holdups.
Well from my current knowledge innobackupex does not effort, but you can silent use xtrabackup.
