首先
Configuring Transparent Data Encryption
编辑 sqlnet.ora
|
ENCRYPTION_WALLET_LOCATION= (SOURCE= (METHOD= FILE) (METHOD_DATA= (DIRECTORY= path_to_keystore))) |
创建Software Keystore密码
Creating a Password-Based Software Keystore
|
ADMINISTER KEY MANAGEMENT CREATE KEYSTORE ' keystore_location' IDENTIFIED BY software_keystore_password; |
查询状态视图 V$ENCRYPTION_WALLET
检查目录下是否有ewallet.p12生成
打开 Software Keystore
|
ADMINISTER KEY MANAGEMENT SET KEYSTORE OPEN IDENTIFIED BY software_keystore_password [CONTAINER = ALL | CURRENT]; |
Setting the TDE Master Encryption Key in the Software Keystore
|
ADMINISTER KEY MANAGEMENT SET KEY IDENTIFIED BY keystore_password WITH BACKUP USING 'emp_key_backup'; |
加密表空间：
|
STARTUP MOUNT; ADMINISTER KEY MANAGEMENT SET KEYSTORE OPEN IDENTIFIED BY keystore_password; ALTER DATABASE OPEN; |
Alter session set container=xxx
|
CREATE TABLESPACE encrypt_ts DATAFILE '$ORACLE_HOME/dbs/encrypt_df.dbf' SIZE 1M ENCRYPTION USING 'AES256' DEFAULT STORAGE (ENCRYPT); |
