ORACLE TDE Transparent Data encryption technology

Transparent data encryption technology starting from Orale 10GR2 Technique (Transparent Data encryption,TDE)

TDEused toencryption of data, usuallySQLThe application logic executed does not need to be changed and will still function correctly. In other words, an application can use the same syntax to insert data into an application table, andOracleDataThe library will automatically do the data before writing the information to the diskencryption. the subsequentThe selection operation transparently decrypts the data, so the application will continue to run normally. This is important because the current application typically expects unencrypted application data. displaying encrypted data is at least confusing to the application user and even destroying existing applications.

To set the encryption key :

manage You must open an Oracle Wallet object with a password different from the system password or DBA password. Then, manage Initialize the database universal key. The universal key is automatically generated.

Quasi standby to an encrypted database

Add a encrypted_wallet_location entry in the Sqlnet.ora in $oracle_home/network/admin.

Encryption_wallet_location= (Source= (Method=file) (Method_data= (directory=/u01/oracle/product/11.2.0.1.0/wallet/ )))

Enter the database to execute the following statement

Alter system set key identified by "Welcome"

If the following error is indicated, the wallet is not created automatically, possibly because the wallet directory needs to be created manually

Ora-28368:cannot auto-create Wallet

Manually create the Wallet directory and grant access to Oracle users.

Alter system set key identified by "welcome"; Sql> conn hr/hrsql> CREATE TABLE test (ID number,credit_card_number varchar2 (+) ENCRYPT NO SALT); sql> INSERT INTO test values (1, ' 12312432 '); 1 row created. sql> INSERT INTO test values (2, ' 33245235 '); Sql> commit; Commit complete. Sql> select * from test;

At this point, you can see the encrypted data, and when you reboot, you will not see the encrypted data again. This time you need to open wallet to view encrypted data

Alter system set wallet open identified by "welcome1";

SYS with The user's table cannot be encrypted

This article is from the "linuxoracle" blog, make sure to keep this source http://onlinekof2001.blog.51cto.com/3106724/1672536

ORACLE TDE Transparent Data encryption technology