This page describes the MongoDB editions and driver versions compatible with Queryable Encryption and Client-Side Field Level Encryption to help you determine whether your deployment supports each in-use encryption feature.
You can use Queryable Encryption on a MongoDB 7.0 or later replica set or sharded cluster, but not a standalone instance. The following table shows which MongoDB server products support which Queryable Encryption mechanisms:
Product Name
Minimum Version
Supports Queryable Encryption with Automatic Encryption
Supports Queryable Encryption with Explicit Encryption
MongoDB Atlas [1]
7.0
Yes
Yes
MongoDB Enterprise Advanced
7.0
Yes
Yes
MongoDB Community Edition
7.0
No
Yes
Queryable Encryption requires the following minimum versions for compatible MongoDB drivers.
Enabling Queryable Encryption on a collection redacts fields from some diagnostic commands and omits some operations from the query log. This limits the data available to MongoDB support engineers, especially when analyzing query performance. To measure the impact of operations against encrypted collections, use a third party application performance monitoring tool to collect metrics.
You can use Client-Side Field Level Encryption (CSFLE) replica set or sharded cluster, but not a standalone instance. The following table shows which MongoDB server products support which Client-Side Field Level Encryption mechanisms:
Product Name
Minimum Version
Supports CSFLE with Automatic Encryption
Supports CSFLE with Explicit Encryption
MongoDB Atlas
All supported MongoDB versions
Yes
Yes
MongoDB Enterprise Advanced
4.2
Yes
Yes
MongoDB Community Edition
4.2
No
Yes
Client-Side Field Level Encryption requires the following minimum versions for compatible MongoDB drivers.
Important Feature SupportTo use the Key Rotation API, you must use specific versions of either your driver's binding package or libmongocrypt
.
To use Client-Side Field Level Encryption with automatic encryption, you must install a query analysis component. To learn more, see Install and Configure a CSFLE Query Analysis Component.
Driver
Minimum Version
Key Rotation Requirements
1.17.5
No additional requirements.
3.6.0
No additional requirements.
2.10.0
Driver version 2.17.1 or later.
If you are using C#/.NET driver version 3.0 or later, perform the following steps:
Install the MongoDB.Driver.Encryption package from NuGet.
If your application runs on Linux, install libmongocrypt manually. Then, set the LIBMONGOCRYPT_PATH
environment variable to the absolute path to the libmongocrypt
file.
1.2
libmongocrypt
version 1.5.2 or later.
3.11.0
mongodb-crypt
version 1.7.3 or later.
1.12.0
mongodb-crypt
version 1.7.3 or later.
3.4.0
mongodb-client-encryption
version 2.2.0 - 2.x.
If you're using version 6.0 or later of the Node.js driver, you must also use version 6.0 or later of mongodb-client-encryption
.
1.6.0
No additional requirements.
3.10.0
pymongocrypt
version 1.3.1 or later.
2.12.1
No additional requirements.
2.4.0
libmongocrypt version 1.8.0 or later.
2.7.0
No additional requirements.
RetroSearch is an open source project built by @garambo | Open a GitHub Issue
Search and Browse the WWW like it's 1997 | Search results from DuckDuckGo
HTML:
3.2
| Encoding:
UTF-8
| Version:
0.7.4