Minor Release Update for TDE
Minor release update for the TDE configuration scripts.
Added
- add script idenc_wroot.sql to initialize init.ora parameter WALLET_ROOT for
TDE with software keystore. - add script csenc_master.sql to create master encryption key for TDE.
Configured keystore must be set before hand e.g., with csenc_swkeystore.sql.
Works for CDB as well PDB. - add script csenc_swkeystore.sql to create TDE software keystore and master
encryption key in CDB$ROOT in the WALLET_ROOT directory. - add script ddenc_wroot.sql to reset init.ora parameter WALLET_ROOT for TDE.
This script should run in CDB$ROOT. A manual restart of the database is
mandatory to activate WALLET_ROOT - add script idenc_lostkey.sql to set hidden parameter _db_discard_lost_masterkey
to force discard of lost master keys - add script idenc_tde_pdbiso.sql to initialize TDE in a PDB in isolation mode
i.e., with a dedicated wallet in WALLET_ROOT for this pdb. The CDB must be
configured for TDE beforehand. This scripts does use several other scripts to
enable TDE and it also includes restart of the pdb. - add script idenc_tde_pdbuni.sql to initialize TDE in a PDB in united mode
i.e., with a common wallet of the CDB in WALLET_ROOT. The CDB must be
configured for TDE beforehand. This scripts does use several other scripts to
enable TDE and it also includes restart of the pdb. - add script idenc_tde.sql to initialize TDE for a single tenant or container
database. This scripts does use several other scripts to enable TDE and it
also includes restart of the database. - add script ssenc_info to show information about the TDE Configuration.
Changed
- update README.md with information for latest scripts.