Transparent Data Encryption

Tablespace Encryption: Three easy steps

Initialize Master Key	Migrate application data to encrypted tablespaces	Continue using application

Before TDE can be used, the master key must first be created with this simple command:

  SQL> alter system set [encryption] key identified by "password";

The master key is created and stored in an existing wallet; if no wallet exists, it creates a new one. Once created, make a backup of your wallet and store it in a safe location.

By default, the wallet is initally closed and needs to be manually opened by a 'Security DBA', who must know the wallet password. The command to open the wallet is:

  SQL> alter system set [encryption] wallet open identified by "password";