Database Security Office Hours – Learn what’s new in Oracle Key Vault 21.6

June’s DB Security Office Hours will focus on Oracle Key Vault (OKV) 21.6. Product Manager of TDE and OKV, Peter Wahl, will walk you through the latest capabilities of OKV including the ability to mark private keys as non-extractable, create asymmetric keys using the OKV APIs, additional deployment options for Microsoft Azure and Amazon AWS, and many more features you’ll want to hear about.

Join the Database Security product management team on the second Wednesday of the month at 10:00 am US Central time for Database Security Office hours. We hold these sessions each month to keep you updated on what's new with Oracle Database security. We cover announcements about new features, products, and capabilities followed by a discussion of some technical topic. Each session ends with an opportunity for open Q&A about database security.

01:38 Announcements
03:08 Migrate from traditional auditing to unified auditing
04:42 DB Security LiveLabs
05:11 Oracle Key Vault LiveLabs
05:48 Oracle 23c FREE Developer Release is available
06:06 Oracle 23c FREE Developer Release - Oracle SQL Firewall
07:03 Technical Topic: New features in Oracle Key Vault 21.6
07:12 Transparent Data Encryption key architecture
07:40 Database encryption key management requirements
09:10 Oracle Key Vault use cases
09:49 Security is baked-in with Oracle Key Vault
11:38 Oracle Key Vault is engineered for high availability and extreme scalability
12:32 Oracle Key Vault for key and secrets management
13:31 Oracle Key Vault high availability architecture
16:20 Oracle Key Vault 21.6 and SAML sign-on - Azure AD support
16:35 OKV cloning of VM guests
18:14 Transparent Data Encryption
19:59 ZDLRA archive encryption
20:20 Oracle GoldenGate trail file key management
22:00 The problem with public key authentication
23:53 SSH public key authentication with non-extractable private keys
25:28 Problems solved with non-extractable private keys in OKV
26:55 Multiple cloud deployment options
27:02 Sign and verify capability
28:21 Password management
31:29 Centralized management of Java Keystores
33:50 Oracle Key Vault hybrid cluster deployment
35:30 Multi-master cluster concepts
37:02 Responsive, scalable user interface
37:23 Oracle Key Vault automation APIs
38:22 Support for custom endpoints
38:52 Persistent master key cache
40:36 Oracle Key Vault HSM integration