Step by step Oracle TDE setup.

Server: Linux
Database: Oracle 19.3.0.0.0
Server name: ORA_SRVR
DB name: ORCLT
Encryption method: TDE
Encryption type: AES256

Connect to Database

oracle@ORA_SRVR:/u00/app/oracle/ [ORCLT] sqlplus

SQL*Plus: Release 19.0.0.0.0 – Production on Wed Mar 1 16:45:22 2023
Version 19.3.0.0.0

Enter user-name: /as sysdba

Connected to:
Oracle Database 19c Enterprise Edition Release 19.0.0.0.0 – Production
Version 19.3.0.0.0

Verify wallet parameter

SQL> show parameter wallet

NAME TYPE VALUE
———————————— ———– ——————————
ssl_wallet string
wallet_root string

SQL>

SQL> select name,open_mode from v$database;

NAME OPEN_MODE
——— ——————–
ORCLT READ WRITE

Create wallet directory

SQL>
SQL> !mkdir -p /u00/app/oracle/wallet/ORCLT

SQL> !ls -ld /u00/app/oracle/wallet/ORCLT
drwxr-xr-x 2 oracle dba 256 Mar 1 16:47 /u00/app/oracle/wallet/ORCLT

SQL>

create pfile from spfile

SQL> create pfile=’/u00/app/oracle/initORCLT_BEENC.ora’ from spfile;

File created.

SQL>

Set wallet_root parameter in the database

SQL> alter system set wallet_root=’/u00/app/oracle/wallet/ORCLT’ scope=spfile;

System altered.

SQL> shut immediate
Database closed.
Database dismounted.
ORACLE instance shut down.

SQL> exit
Disconnected from Oracle Database 19c Enterprise Edition Release 19.0.0.0.0 – Production
Version 19.3.0.0.0

sqloracle@ORA_SRVR:/u00/app/oracle/ [ORCLT] sqlplus
/

SQL*Plus: Release 19.0.0.0.0 – Production on Wed Mar 1 16:48:29 2023
Version 19.3.0.0.0

Enter user-name: as sysdba
Connected to an idle instance.

SQL> startup

ORACLE instance started.

Total System Global Area 1073741256 bytes
Fixed Size 9002440 bytes
Variable Size 318767104 bytes
Database Buffers 742391808 bytes
Redo Buffers 3579904 bytes
Database mounted.
Database opened.

SQL> show parameter wallet

NAME TYPE VALUE
———————————— ———– ——————————
ssl_wallet string
wallet_root string /u00/app/oracle/wallet/ORCLT
SQL>

SQL>

Verify TDE_CONFIGURATION parameter

SQL> show parameter tde

NAME TYPE VALUE
———————————— ———– ——————————
one_step_plugin_for_pdb_with_tde boolean FALSE
tde_configuration string

SQL>

SQL> alter system set TDE_CONFIGURATION=”keystore_configuration=file” scope=both;

System altered.

SQL> show parameter tde

NAME TYPE VALUE
———————————— ———– ——————————
one_step_plugin_for_pdb_with_tde boolean FALSE
tde_configuration string keystore_configuration=file
SQL>

SQL>

SQL> select * From gv$encryption_wallet;

INST_ID WRL_TYPE
———- ——————–
WRL_PARAMETER
——————————————————————————–
STATUS WALLET_TYPE WALLET_OR KEYSTORE FULLY_BAC
—————————— ——————– ——— ——– ———
CON_ID
———-
1 FILE
/u00/app/oracle/wallet/ORCLT/tde/
NOT_AVAILABLE UNKNOWN SINGLE NONE UNDEFINED
0

Note : observe that WALLET_TYPE is UNKNOWN in the above command’s output ****************************

SQL> !mkdir -p /u00/app/oracle/wallet/ORCLT/tde/

SQL>

SQL> !ls /u00/app/oracle/wallet/ORCLT/tde/

SQL>

Create key store in the database level

SQL>

SQL> administer key management create keystore identified by “welcome1”;

keystore altered.

SQL> !ls /u00/app/oracle/wallet/ORCLT/tde/
ewallet.p12

Create key store in the database level for auto_login

SQL> administer key management create auto_login keystore from keystore identified by “welcome1”;

keystore altered.

SQL>

SQL>

SQL> select * From gv$encryption_wallet;

Note : observe that WALLET_TYPE is AUTOLOGIN in the above command’s output ****************************

SQL>

SQL> !strings /u00/app/oracle/wallet/ORCLT/tde/ewallet.p12
0J0)
-a@R
r%->
UsOtS
=”(4
{Sj\\
v#pE
M[B3(
;*lC
u<83
p-eg
A..H
`T~M
r+:”W#K
R}zn
IE\.
eS;sfP
vB8:%
X/8r
J}`Hg
DXre
LEYwX
Ri&-
bC\9
,&(|
010!0

SQL> !cat /u00/app/oracle/wallet/ORCLT/tde/ewallet.p12

0J0) *▒H▒▒ ▒0▒ ▒ *▒H▒▒ *▒H▒▒
4o▒C0
A▒”▒▒ Ò▒▒▒(\▒▒▒▒▒▒b▒9I▒▒▒$▒▒&▒▒Di▒▒\.▒▒▒▒@▒▒G▒▒4-▒0▒▒koo▒`▒#▒P▒▒[C▒=▒▒X▒▒▒GZ▒\>▒b1,0Apt▒▒▒Z{▒▒^▒͢B q▒ߨU▒▒▒ʰ▒▒Y▒▒▒▒
]=▒(▒”6_▒▒▒cߊs▒?▒▒9▒▒g▒▒n▒▒▒▒:▒▒▒i>b▒▒▒iY▒Ы▒▒▒▒▒▒1″!խR▒▒▒r/▒▒▒▒▒2▒h3▒▒▒g
=”(4▒\▒_z▒6,▒▒b#▒’n▒Fp▒▒.▒{mL▒▒▒▒▒}▒ju▒>▒I▒p▒▒c▒ ▒▒/$[zM▒YK▒▒.Խ”▒2M▒+ٍ▒▒▒r▒p~ޅK▒▒r▒▒ǘ▒hF▒t▒o▒X▒▒▒`;▒q▒▒D▒▒▒▒▒W▒▒0pƼ▒v▒]▒▒’▒▒J▒/Y▒▒▒S7{▒ ▒▒I▒H1 /▒fe▒▒U(9B▒▒▒c▒▒▒▒0:▒Xý▒▒▒[▒.6▒▒,▒▒▒▒▒{Sj\\▒OG▒4▒▒KŇ¥▒▒▒▒h▒▒&ܭ▒▒Em9▒▒▒▒4n”▒J-▒]▒▒ue▒▒▒▒▒▒▒▒▒C▒{▒ZW0؁▒▒K▒I%n
▒▒▒i^▒▒}▒뚮|.{▒▒D▒;▒▒▒▒{N{▒▒▒|▒▒_oy▒2▒▒▒s ▒ܬv#pE▒~;▒▒%@▒M[B3(▒▒H4▒8▒▒p▒һ▒NB▒!▒vɳ▒▒▒▒▒▒ ▒▒OG▒W
▒”▒▒▒|▒]▒▒▒O݌▒▒▒’▒2▒Y!׿▒▒▒▒▒>ύ▒▒t▒<▒▒▒=▒▒׎ۯ▒l▒▒(▒▒▒价_}W▒▒▒
▒▒cz▒▒▒▒r▒▒x_5▒▒M▒▒G~rԽ▒t▒▒▒▒▒P▒▒O]!M▒d▒▒w▒)▒`▒Q▒p▒▒▒▒▒L3ꖯȈ▒ IJ▒▒
uS▒O}▒▒r6▒▒HQ{▒N▒/▒[^▒q▒▒▒#▒/▒= ▒▒▒~▒s▒▒▒,▒$▒▒▒▒w▒▒(▒p=▒▒▒▒
I7▒&q▒▒{]▒”▒O▒▒▒,▒6ֻ▒▒|▒▒6W]▒▒
▒au▒@▒b▒▒;*lC▒W▒c▒▒▒Y:▒▒▒▒R▒▒#▒T▒иƐS▒m!▒▒[Ff”▒x▒ ▒▒▒ 0O▒ᔹ▒▒j▒F▒u<83)▒▒Y▒▒▒+
▒▒▒▒▒P`7▒R▒▒p-eg▒▒bݖޏ▒QBU▒▒c▒\▒▒▒▒6▒▒▒1 ▒▒ ▒▒e▒▒▒d▒0}▒▒%▒▒▒ٮ▒▒
▒▒▒▒▒▒7Q▒m▒▒j▒▒▒▒*ab▒=<T▒▒▒▒O▒A..H▒/▒,r▒▒▒HM▒▒▒o4▒▒i▒8Ī,O5▒▒-▒▒}
[9▒▒▒▒q▒D▒MC&▒7
D▒ՇkL▒)90y▒)x0▒▒▒n▒▒▒.▒xIE\.▒@!▒’▒U▒▒▒Â▒Ė▒<▒▒▒▒9▒▒j)▒▒TB▒i▒Yi▒▒▒▒(?▒▒▒▒;▒▒▒$▒L▒Eг▒▒▒ˁi▒▒W▒▒▒▒U▒▒!%▒Vؔwg▒eS;sfP▒▒W▒▒1 1▒▒▒▒H▒▒▒l▒k▒UU▒▒A▒▒▒^▒▒▒▒F▒▒▒▒▒▒33▒5▒▒▒▒▒N▒vB8:%▒H)▒▒▒X/8r▒▒▒/u1▒;▒׼▒{Z▒▒▒▒▒▒[X֩▒6|▒▒▒:H▒
▒▒▒A=▒
▒▒谗▒W*.▒▒▒Q ▒▒▒▒▒▒U*▒▒V▒▒▒▒▒▒ۃ’b▒p▒▒p▒▒▒▒ T▒▒▒R)a̳▒n▒▒l2ϟH▒▒▒▒’򢨧▒(▒q▒M/z▒▒▒▒▒▒4|t▒iQ▒Z▒ty▒▒▒Yhjf▒▒▒Jxl▒_▒%X”▒p▒▒▒▒
*n▒▒a1▒8▒W1▒▒▒gA▒▒T▒▒:;mᇰ▒▒
▒:▒4G ▒B<A▒▒▒Q\~▒▒▒▒W▒pŌ▒J}`Hg▒▒9▒2l▒▒▒ ▒Bc▒▒▒▒▒W▒:▒▒=▒M▒▒▒▒▒▒<3▒▒a▒▒<k▒H▒d▒!{{N▒-▒▒▒Q▒pI▒1k▒▒▒▒T13▒+▒Ϸ’▒▒,▒^▒▒T▒q▒5*b▒▒▒7)y▒
▒▒▒f▒▒T▒▒▒▒Q▒DXre▒2֞E▒▒ ▒▒V▒▒6▒▒▒”WA▒wMxÿ▒z
▒3▒▒▒▒LEYwX▒Ki▒]u▒▒t9▒▒▒wb▒▒]▒▒,(▒▒▒ݍ▒/▒n▒ Le▒▒53>▒ȽD▒p▒A▒h▒zw2▒▒▒K$▒j▒▒zt▒▒Ri&-▒.▒#▒*▒,▒▒B▒}Hu▒n▒ۗ▒▒I▒▒▒▒@▒EOa▒▒}▒.w5▒bC\9▒1▒v▒▒7,Q▒▒▒8▒$▒R▒8.▒▒,&(|▒Mv▒▒▒▒Ʀ▒▒k▒▒▒▒S,3▒;▒▒|▒T▒▒▒Ɋ▒▒▒/▒▒3▒▒▒?▒x▒▒▒▒▒▒d▒▒▒6▒l▒Ee▒]7▒j▒▒▒▒▒▒قI!▒▒9▒▒▒▒▒h̉▒▒▒-▒▒,▒▒U0▒▒-▒▒▒S▒i@▒3▒▒▒a]Վӎl▒聁Y▒010!0 +L’▒▒H▒▒/R▒▒tנ▒v”U F▒
SQL> PuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTY

SQL>

SQL> !ls -l /u00/app/oracle/wallet/ORCLT/tde/

total 16
-rw——- 1 oracle dba 2600 Mar 1 16:54 cwallet.sso
-rw——- 1 oracle dba 2555 Mar 1 16:54 ewallet.p12

SQL> select * From gv$encryption_wallet;

SQL>
SQL>
SQL>

SQL> adiminister key management set key force keystore identified by “welcome1”;

SP2-0158: unknown SET option “key”
SQL>

SQL>
SQL>

SQL> administer key management set key force keystore identified by “welcome1” with backup;

keystore altered.

SQL> !ls /u00/app/oracle/wallet/ORCLT/tde/

cwallet.sso ewallet.p12 ewallet_2023030117020122.p12

SQL> !ls -lrt /u00/app/oracle/wallet/ORCLT/tde/

total 24
-rw——- 1 oracle dba 2555 Mar 1 17:02 ewallet_2023030117020122.p12
-rw——- 1 oracle dba 3995 Mar 1 17:02 ewallet.p12
-rw——- 1 oracle dba 4040 Mar 1 17:02 cwallet.sso

SQL> select * From gv$encryption_wallet;

SQL>
SQL>

SQL> select df.tablespace_name “Tablespace”, totalusedspace “Used MB”, (df.totalspace – tu.totalusedspace) “Free MB”,
df.totalspace “Total MB”, round(100 * ( (df.totalspace – tu.totalusedspace)/ df.totalspace)) “Pct. Free”
from (select tablespace_name, round(sum(bytes) / 1048576) TotalSpace
from dba_data_files
group by tablespace_name) df,
(select round(sum(bytes)/(1024*1024)) totalusedspace, tablespace_name from dba_segments group by tablespace_name) tu
where df.tablespace_name = tu.tablespace_name
order by 1;
2 3 4 5 6 7 8

Tablespace Used MB Free MB Total MB Pct. Free
—————————— ———- ———- ———- ———-
SYSAUX 1294 1778 3072 58
SYSTEM 1975 3145 5120 61
TOOLS 0 200 200 100
UNDOTBS1 279 3817 4096 93
XYZ 6 294 300 98
TBS_AU 35044 5906 40950 14
TBS_CL 3522 468 3990 12
TBS_EFT 72 440 512 86
TBS_GR 187 313 500 63
TBS_MA 261 763 1024 75

10 rows selected.

SQL> SQL>
SQL>

SQL> set time on timing on

17:04:56 SQL> select tablespace_name,encrypted,status from dba_Tablespaces;
SYSTEM NO ONLINE
SYSAUX NO ONLINE
UNDOTBS1 NO ONLINE
TEMP NO ONLINE
XYZ NO ONLINE
TOOLS NO ONLINE
TBS_CL NO ONLINE
TBS_AU NO ONLINE
TBS_GR NO ONLINE
TBS_GR_INDX NO ONLINE
TBS_EFT NO ONLINE
TBS_MA NO ONLINE

12 rows selected.

Elapsed: 00:00:00.35
17:05:09 SQL>

sqlplus

SQL*Plus: Release 19.0.0.0.0 – Production on Wed Mar 1 17:05:49 2023
Version 19.3.0.0.0

Enter user-name: /as sysdba

Connected to:
Oracle Database 19c Enterprise Edition Release 19.0.0.0.0 – Production
Version 19.3.0.0.0

Online Encryption

SQL> select tablespace_name,encrypted,status from dba_Tablespaces;

TABLESPACE_NAME ENC STATUS
—————————— — ———
SYSTEM NO ONLINE
SYSAUX NO ONLINE
UNDOTBS1 NO ONLINE
TEMP NO ONLINE
XYZ NO ONLINE
TOOLS NO ONLINE
TBS_CL NO ONLINE
TBS_AU NO ONLINE
TBS_GR NO ONLINE
TBS_GR_INDX NO ONLINE
TBS_EFT NO ONLINE

TABLESPACE_NAME ENC STATUS
—————————— — ———
TBS_MA NO ONLINE

12 rows selected.

SQL>
SQL>
SQL> set pages 90
SQL>

SQL>
SQL>
SQL> set timing on time on

17:06:21 SQL> alter tablespace TBS_CL encryption online using ‘AES256’ encrypt;

Tablespace altered.

Elapsed: 00:04:35.05
17:12:16 SQL>

17:13:25 SQL> select tablespace_name,encrypted,status from dba_Tablespaces;

TABLESPACE_NAME ENC STATUS
—————————— — ———
SYSTEM NO ONLINE
SYSAUX NO ONLINE
UNDOTBS1 NO ONLINE
TEMP NO ONLINE
XYZ NO ONLINE
TOOLS NO ONLINE
TBS_CL YES ONLINE
TBS_AU NO ONLINE
TBS_GR NO ONLINE
TBS_GR_INDX NO ONLINE
TBS_EFT NO ONLINE
TBS_MA NO ONLINE

12 rows selected.

Elapsed: 00:00:00.32
17:13:35 SQL>

online Decryption
=======================

17:14:22 SQL> alter tablespace TBS_CL encryption online decrypt;

Tablespace altered.

Elapsed: 00:04:45.77
17:20:42 SQL>
17:21:06 SQL>
17:21:06 SQL>
17:21:07 SQL> select tablespace_name,encrypted,status from dba_Tablespaces;

TABLESPACE_NAME ENC STATUS
—————————— — ———
SYSTEM NO ONLINE
SYSAUX NO ONLINE
UNDOTBS1 NO ONLINE
TEMP NO ONLINE
XYZ NO ONLINE
TOOLS NO ONLINE
TBS_CL NO ONLINE
TBS_AU NO ONLINE
TBS_GR NO ONLINE
TBS_GR_INDX NO ONLINE
TBS_EFT NO ONLINE
TBS_MA NO ONLINE

12 rows selected.

Elapsed: 00:00:00.32
17:21:14 SQL>

Offline Encryption

17:21:15 SQL> alter tablespace TBS_CL offline normal;

Tablespace altered.

Elapsed: 00:00:00.47

17:21:26 SQL> select tablespace_name,encrypted,status from dba_Tablespaces;

TABLESPACE_NAME ENC STATUS
—————————— — ———
SYSTEM NO ONLINE
SYSAUX NO ONLINE
UNDOTBS1 NO ONLINE
TEMP NO ONLINE
XYZ NO ONLINE
TOOLS NO ONLINE
TBS_CL NO OFFLINE
TBS_AU NO ONLINE
TBS_GR NO ONLINE
TBS_GR_INDX NO ONLINE
TBS_EFT NO ONLINE
TBS_MA NO ONLINE

12 rows selected.

Elapsed: 00:00:00.31
17:21:43 SQL>

17:21:44 SQL>

17:22:05 SQL> alter tablespace TBS_CL encryption offline using ‘AES256’ encrypt;

Tablespace altered.

Elapsed: 00:01:45.02

17:24:17 SQL> select tablespace_name,encrypted,status from dba_Tablespaces;

TABLESPACE_NAME ENC STATUS
—————————— — ———
SYSTEM NO ONLINE
SYSAUX NO ONLINE
UNDOTBS1 NO ONLINE
TEMP NO ONLINE
XYZ NO ONLINE
TOOLS NO ONLINE
TBS_CL NO OFFLINE
TBS_AU NO ONLINE
TBS_GR NO ONLINE
TBS_GR_INDX NO ONLINE
TBS_EFT NO ONLINE
TBS_MA NO ONLINE

12 rows selected.

Elapsed: 00:00:00.31

17:24:41 SQL>

17:24:42 SQL> alter tablespace TBS_CL online;

Tablespace altered.

Elapsed: 00:00:00.62

17:24:54 SQL> select tablespace_name,encrypted,status from dba_Tablespaces;

TABLESPACE_NAME ENC STATUS
—————————— — ———
SYSTEM NO ONLINE
SYSAUX NO ONLINE
UNDOTBS1 NO ONLINE
TEMP NO ONLINE
XYZ NO ONLINE
TOOLS NO ONLINE
TBS_CL YES ONLINE
TBS_AU NO ONLINE
TBS_GR NO ONLINE
TBS_GR_INDX NO ONLINE
TBS_EFT NO ONLINE
TBS_MA NO ONLINE

12 rows selected.

Elapsed: 00:00:00.31
17:24:58 SQL>

Offline Decryption

17:25:42 SQL> alter tablespace TBS_CL offline normal;

Tablespace altered.

Elapsed: 00:00:00.39
17:26:16 SQL>

17:26:34 SQL>

17:26:35 SQL> alter tablespace TBS_CL encryption offline decrypt;

Tablespace altered.

Elapsed: 00:01:42.72
17:28:20 SQL>

17:29:06 SQL>

17:29:06 SQL> alter tablespace TBS_CL online;

Tablespace altered.

Elapsed: 00:00:00.56

17:29:14 SQL> select tablespace_name,encrypted,status from dba_Tablespaces;

TABLESPACE_NAME ENC STATUS
—————————— — ———
SYSTEM NO ONLINE
SYSAUX NO ONLINE
UNDOTBS1 NO ONLINE
TEMP NO ONLINE
XYZ NO ONLINE
TOOLS NO ONLINE
TBS_CL NO ONLINE
TBS_AU NO ONLINE
TBS_GR NO ONLINE
TBS_GR_INDX NO ONLINE
TBS_EFT NO ONLINE
TBS_MA NO ONLINE

12 rows selected.

Elapsed: 00:00:00.36
17:29:18 SQL>

========================Start of alertlog contents ========================

ARC1 (PID:25690438): Archived Log entry 437 added for T-1.S-437 ID 0x64e69ff4 LAD:1
2023-03-01T17:02:02.099227+00:00
Creating new database key for new master key and wallet
Creating new database key with the new master key
Switching out all online logs for the new master key
2023-03-01T17:02:02.485499+00:00
Thread 1 advanced to log sequence 439 (LGWR switch)
Current log# 3 seq# 439 mem# 0: /u03/oradata/ORCLT/redog3m1ORCLT.log
Current log# 3 seq# 439 mem# 1: /u03/oradata/ORCLT/redog3m2ORCLT.log
2023-03-01T17:02:02.598591+00:00
Logfile switch for new master key complete
New database key and new master key created successfully
2023-03-01T17:02:02.722583+00:00
ARC2 (PID:59441470): Archived Log entry 438 added for T-1.S-438 ID 0x64e69ff4 LAD:1
2023-03-01T17:07:41.431201+00:00
alter tablespace TBS_CL encryption online using ‘AES256’ encrypt
2023-03-01T17:07:41.516896+00:00
About to encrypt tablespace TBS_CL (tsn 0/6)
Auto-renaming original file /u03/oradata/ORCLT/TBS_CLORCLT.dbf to aux file /u03/oradata/ORCLT/TBS_CLORCLT.dbf_new..
Rekeying datafile /u03/oradata/ORCLT/TBS_CLORCLT.dbf (6) to /u03/oradata/ORCLT/TBS_CLORCLT.dbf_new
2023-03-01T17:10:10.607172+00:00
Rekey operation committed for file /u03/oradata/ORCLT/TBS_CLORCLT.dbf_new
2023-03-01T17:10:12.730981+00:00
About to zero out original file “/u03/oradata/ORCLT/TBS_CLORCLT.dbf”
2023-03-01T17:10:22.891779+00:00
Successfully zero’ed out original file “/u03/oradata/ORCLT/TBS_CLORCLT.dbf”
Successfully deleted original file “/u03/oradata/ORCLT/TBS_CLORCLT.dbf”
Auto online renaming aux file /u03/oradata/ORCLT/TBS_CLORCLT.dbf_new to original filename /u03/oradata/ORCLT/TBS_CLORCLT.dbf (this could take some time)..
Moving datafile /u03/oradata/ORCLT/TBS_CLORCLT.dbf_new (6) to /u03/oradata/ORCLT/TBS_CLORCLT.dbf
2023-03-01T17:12:13.943558+00:00
Move operation committed for file /u03/oradata/ORCLT/TBS_CLORCLT.dbf
2023-03-01T17:12:16.130376+00:00
Completed renaming aux file to original filename /u03/oradata/ORCLT/TBS_CLORCLT.dbf
Completed rekey for tablespace TBS_CL (tsn 0/6) from key version 0 to 1.
Completed: alter tablespace TBS_CL encryption online using ‘AES256’ encrypt
2023-03-01T17:15:56.749263+00:00
alter tablespace TBS_CL encryption online decrypt
2023-03-01T17:15:56.828116+00:00
About to decrypt tablespace TBS_CL (tsn 0/6)
Auto-renaming original file /u03/oradata/ORCLT/TBS_CLORCLT.dbf to aux file /u03/oradata/ORCLT/TBS_CLORCLT.dbf_new..
Rekeying datafile /u03/oradata/ORCLT/TBS_CLORCLT.dbf (6) to /u03/oradata/ORCLT/TBS_CLORCLT.dbf_new
2023-03-01T17:18:20.125537+00:00
Rekey operation committed for file /u03/oradata/ORCLT/TBS_CLORCLT.dbf_new
2023-03-01T17:18:22.325733+00:00
About to zero out original file “/u03/oradata/ORCLT/TBS_CLORCLT.dbf”
2023-03-01T17:18:33.081498+00:00
Successfully zero’ed out original file “/u03/oradata/ORCLT/TBS_CLORCLT.dbf”
Successfully deleted original file “/u03/oradata/ORCLT/TBS_CLORCLT.dbf”
Auto online renaming aux file /u03/oradata/ORCLT/TBS_CLORCLT.dbf_new to original filename /u03/oradata/ORCLT/TBS_CLORCLT.dbf (this could t ake some time)..
Moving datafile /u03/oradata/ORCLT/TBS_CLORCLT.dbf_new (6) to /u03/oradata/ORCLT/TBS_CLORCLT.dbf
2023-03-01T17:20:40.070817+00:00
Move operation committed for file /u03/oradata/ORCLT/TBS_CLORCLT.dbf
2023-03-01T17:20:42.367097+00:00
Completed renaming aux file to original filename /u03/oradata/ORCLT/TBS_CLORCLT.dbf
Completed rekey for tablespace TBS_CL (tsn 0/6) from key version 1 to 2.
Completed: alter tablespace TBS_CL encryption online decrypt
2023-03-01T17:21:26.138720+00:00
alter tablespace TBS_CL offline normal
Completed: alter tablespace TBS_CL offline normal
2023-03-01T17:22:32.392628+00:00
alter tablespace TBS_CL encryption offline using ‘AES256’ encrypt
2023-03-01T17:22:32.608470+00:00
About to offline encrypt tablespace 6 ..
2023-03-01T17:24:17.345311+00:00
Successfully encrypted tablespace 6 with database key.
Completed: alter tablespace TBS_CL encryption offline using ‘AES256’ encrypt
2023-03-01T17:24:53.943392+00:00
alter tablespace TBS_CL online
Completed: alter tablespace TBS_CL online
2023-03-01T17:26:15.862437+00:00
alter tablespace TBS_CL offline normal
Completed: alter tablespace TBS_CL offline normal
2023-03-01T17:26:37.564759+00:00
alter tablespace TBS_CL encryption offline decrypt
2023-03-01T17:26:37.689796+00:00
About to offline decrypt tablespace 6 ..
2023-03-01T17:28:20.215322+00:00
Successfully decrypted tablespace 6 with database key.
Completed: alter tablespace TBS_CL encryption offline decrypt
2023-03-01T17:29:13.653020+00:00
alter tablespace TBS_CL online
Completed: alter tablespace TBS_CL online
==============================END of Alert Log==============================

See Also:

Step by step Oracle TDE setup

Step by step Oracle TDE setup.

Connect to Database

Verify wallet parameter

Create wallet directory

create pfile from spfile

Set wallet_root parameter in the database

Verify TDE_CONFIGURATION parameter

Create key store in the database level

Create key store in the database level for auto_login

Online Encryption

Offline Encryption

Offline Decryption

Footer Links

Subscribe

All Technologies

News

Step by step Oracle TDE setup

Step by step Oracle TDE setup.

Connect to Database

Verify wallet parameter

Create wallet directory

create pfile from spfile

Set wallet_root parameter in the database

Verify TDE_CONFIGURATION parameter

Create key store in the database level

Create key store in the database level for auto_login

Online Encryption

Offline Encryption

Offline Decryption

Footer Links

Subscribe

All Technologies