How to Implement TDE for Oracle 12c2 Container and pluggable databases

ENCRYPTION_WALLET_LOCATION=
(SOURCE=
(METHOD=FILE)
(METHOD_DATA=
(DIRECTORY=Directory location\)))

--set password based keystore - container level

ADMINISTER KEY MANAGEMENT CREATE KEYSTORE 'C:\app\AkPC\admin\tdewallet\orcl' IDENTIFIED BY password;

--set auto login keystore - container level

ADMINISTER KEY MANAGEMENT CREATE AUTO_LOGIN KEYSTORE FROM KEYSTORE 'C:\app\AkPC\admin\tdewallet\orcl' IDENTIFIED BY password;

--open the keystore in root container

ADMINISTER KEY MANAGEMENT SET KEYSTORE OPEN IDENTIFIED BY password;

--set master key at root container level

ADMINISTER KEY MANAGEMENT SET KEY IDENTIFIED BY password with backup;

--open the keystore in pdb

ADMINISTER KEY MANAGEMENT SET KEYSTORE OPEN IDENTIFIED BY password;

--Set database master key in pdb

ADMINISTER KEY MANAGEMENT SET KEY IDENTIFIED BY password with backup;

CREATE TABLESPACE encrypted_ts
AUTOEXTEND ON NEXT 64K
ENCRYPTION USING 'AES256'
DEFAULT STORAGE(ENCRYPT);

CREATE TABLESPACE unencrypted_ts
AUTOEXTEND ON NEXT 64K;

CREATE TABLE TEST_ENC (TEXT VARCHAR2(100)) TABLESPACE encrypted_ts;

CREATE TABLE TEST_UNENC (TEXT VARCHAR2(100)) TABLESPACE unencrypted_ts;

insert into TEST_ENC values ('This is a secret');

insert into TEST_UNENC values ('This is a secret');

[coolkookoo]

Very Nice, Thanks for the video, I had no clue of this encryption prior watching the video, not any more :)

[MrSathyavishak]

One of our DBA have enabled the auto_login in the Cloud database (DBAAS). I wanted to disable it.. Can you share the command..

[dsm]

Hi Akhil

Can you please make video of TDE on Oracle Golden Gate