Skip to content

Minor Release Update for TDE

Compare
Choose a tag to compare
@oehrlis oehrlis released this 30 Aug 13:47
· 51 commits to master since this release

Minor release update for the TDE configuration scripts.

Added

  • add script idenc_wroot.sql to initialize init.ora parameter WALLET_ROOT for
    TDE with software keystore.
  • add script csenc_master.sql to create master encryption key for TDE.
    Configured keystore must be set before hand e.g., with csenc_swkeystore.sql.
    Works for CDB as well PDB.
  • add script csenc_swkeystore.sql to create TDE software keystore and master
    encryption key in CDB$ROOT in the WALLET_ROOT directory.
  • add script ddenc_wroot.sql to reset init.ora parameter WALLET_ROOT for TDE.
    This script should run in CDB$ROOT. A manual restart of the database is
    mandatory to activate WALLET_ROOT
  • add script idenc_lostkey.sql to set hidden parameter _db_discard_lost_masterkey
    to force discard of lost master keys
  • add script idenc_tde_pdbiso.sql to initialize TDE in a PDB in isolation mode
    i.e., with a dedicated wallet in WALLET_ROOT for this pdb. The CDB must be
    configured for TDE beforehand. This scripts does use several other scripts to
    enable TDE and it also includes restart of the pdb.
  • add script idenc_tde_pdbuni.sql to initialize TDE in a PDB in united mode
    i.e., with a common wallet of the CDB in WALLET_ROOT. The CDB must be
    configured for TDE beforehand. This scripts does use several other scripts to
    enable TDE and it also includes restart of the pdb.
  • add script idenc_tde.sql to initialize TDE for a single tenant or container
    database. This scripts does use several other scripts to enable TDE and it
    also includes restart of the database.
  • add script ssenc_info to show information about the TDE Configuration.

Changed

  • update README.md with information for latest scripts.