can I exclude or delete .pem files in backup data myqdl?
They are needed  for the mysql to generate nbew ssl keys

So to answer your question


  You have to decide if you want ssl or not, so if you use ssl and have user created some  client certificates with it you need it, if not you don't need them.


When you active ssl in my.ini

like

ssl=1
ssl-ca="\sslfolder\ca-cert.pem"
ssl-cert="\sslfolder\server-cert.pem"
ssl-key="\sslfolder\server-key.pem"


you can  allow a user only to access via ssl

First you generate a new ssl certificate for a user exampleuser

and add like this the use of ssl

CREATE USER 'exampleuser'@'localhost' IDENTIFIED BY 'secretsparrworf' REQUIRE X509;
GRANT ALL PRIVILEGES ON *.* TO 'exampleuser'@'localhost';


fionaööy you can access mysql via ssl like this

mysql -u exampleuser-p --ssl-ca=ca-cert.pem --ssl-cert=client-cert.pem --ssl-key=client-key.pem