Syntax:
ALTER INSTANCE ROTATE INNODB MASTER KEY

ALTER INSTANCE, introduced in MySQL 5.7.11, defines actions applicable
to a MySQL server instance. Using ALTER INSTANCE requires the SUPER
privilege.

The ALTER INSTANCE ROTATE INNODB MASTER KEY statement is used to rotate
the master encryption key used for InnoDB tablespace encryption. A
keyring plugin must be loaded to use this statement. For information
about keyring plugins, see
http://dev.mysql.com/doc/refman/5.7/en/keyring.html.

ALTER INSTANCE ROTATE INNODB MASTER KEY supports concurrent DML.
However, it cannot be run concurrently with CREATE TABLE ... ENCRYPTION
or ALTER TABLE ... ENCRYPTION operations, and locks are taken to
prevent conflicts that could arise from concurrent execution of these
statements. If one of the conflicting statements is running, it must
complete before another can proceed.

ALTER INSTANCE actions are written to the binary log so that they can
be executed on replicated servers.

For additional ALTER INSTANCE ROTATE INNODB MASTER KEY usage
information, see
http://dev.mysql.com/doc/refman/5.7/en/innodb-tablespace-encryption.htm
l. For information about keyring plugins, see
http://dev.mysql.com/doc/refman/5.7/en/keyring.html.

URL: http://dev.mysql.com/doc/refman/5.7/en/alter-instance.html

