Contents

Introduction

Oracle Database Encryption Overview

Transparent Data Encryption

Transparent Data Encryption Benefits

Key Management Overview

Implementation Steps

Initialize the Master Key

Open the Oracle Wallet

Changing the Master Key

Changing the Wallet Password

Identify Sensitive Data

Verify TDE Data Type Support

Check Foreign Key Usage

Encrypting Data Using TDE

Changing the Table/Column Key

Best Practices When First Encrypting Data

Backup Encryption with RMAN

RMAN Encryption Modes

Transparent Encryption of Backups

Password Encrypted Backups

Dual-mode Encrypted Backups

Transparent Data Encryption Enhancements

Additional Data Type Support

Tablespace Encryption

Hardware Security Modules (HSM) Master Key Protection

DataPump Encryption

Support for Oracle Streams and Logical Standby

Network Encryption

Industry Standard Encryption and Data Integrity

SSL

JDBC Security

Easy Configuration, No Changes to your Applications

Strong Authentication Services for Oracle Database 10g

Kerberos Authentication

Kerberos Enhancements

PKI Support

PKCS#12 Support

PKCS#11 Support, Smart Cards/Hardware Security Modules

PKI Authentication for Oracle Database 10g Enterprise Users

Wallets Stored in Oracle Internet Directory

Multiple Certificate Support

Strong Wallet Encryption

RADIUS (Remote Dial-in User Service)

Summary

Oracle Whitepapers - Oracle Advanced Security Technical White Paper Index