Monday, November 30, 2015

Tablespace file encryption

Tablespace encryption for user-created tablespaces are enabled by default and that applies to SE and EE (tablespace file encryption).

On certain service instances hosting an Oracle 11g Standard Edition database, attempts to create a tablespace fail with a wallet error.

In this case, you must use the following command first :
dbaascli tde config --ks_login auto


To validate :
  1. connect to the database and check for the existence of the encrypt_new_tablespaces parameter :
    select tablespace_name, encrypted from dba_tablespaces;
  2. create a new tablespace. (notice that we are not including any reference to encryption)
    create tablespace TEST datafile '/u02/app/oracle/oradata/ORCL/test.dbf' size 1m;
  3. check how it got created
    select tablespace_name, encrypted from dba_tablespaces;

See know issue :
http://docs.oracle.com/cloud/latest/dbcs_dbaas/KIDBR/GUID-13962F4B-83CA-4210-9E76-2FC2DCAAACC7.htm#KIDBR-GUID-9C46E821-EB39-4387-AB9B-766640486EB8