Index
A
- ad hoc tools
- Oracle Data Redaction 1
- ADMINISTER KEY MANAGEMENT
- administrative access to policies, restricting 1
- aggregate functions
- affect on Data Redaction policy optimization 1
- ALTER SYSTEM statement
- how compares with ADMINISTER KEY MANAGEMENT statement 1
- APEX_UTIL.GET_NUMERIC_SESSION_STATE function
- Oracle Data Redaction policies (NV public function) 1
- APEX_UTIL.GET_SESSION_STATE function
- Oracle Data Redaction policies (V public function) 1
- applications
- auto login keystores
- and Transparent Data Encryption (TDE) 1
- Automatic Storage Management (ASM)
C
- CDBs
- cloning PDBs with encrypted data 1
- cloning PDBs with encrypted data in isolated mode 1
- cloning PDBs wth encrypted data, about 1
- Data Redaction masking policies 1
- moving PDB from one CDB to another 1
- moving PDB from one CDB to another in united mode 1
- PDBs with encrypted data 1
- preserving keystore passwords in PDB move operations 1
- preserving keystore passwords in PDB move operations in united mode 1
- remotely cloning PDBs with encrypted data in isolated mode 1, 2
- remotely cloning PDBs with encrypted data in united mode 1, 2
- change data capture, synchronous 1
- closing hardware keystores 1
- closing software keystores 1
- column encryption
- about 1
- changing algorithm 1
- changing encryption key 1
- creating encrypted table column with default algorithm 1
- creating encrypted table column with non-default algorithm 1
- creating index on encrypted column 1
- data loads from external file 1
- data types to encrypt 1
- existing tables
- external tables 1
- incompatibilities 1
- limitations 1
- performance, optimum 1
- salt 1
- security considerations 1
- skipping integrity check 1
- column sensitive type discovery
- enabling when creating a Data Redaction policy 1
- compliance
- Transparent Data Encryption 1
- compression of Transparent Data Encryption data 1
- configuring software keystores
- creating local auto-login keystore 1
- control files
- lost 1
D
- data at rest 1
- database close operations
- keystores 1
- database links
- with Oracle Data Redaction policies 1
- database roles
- Data Redaction policies 1
- databases
- data deduplication of Transparent Data Encryption data 1
- data redaction
- See: Oracle Data Redaction
- Data Redaction supported functions 1
- data storage
- Transparent Data Encryption 1
- DDL statements
- Oracle Data Redaction policies 1
- decryption
- DISTINCT clause, Data Redaction policies 1
- DML statements
- Oracle Data Redaction policies 1
E
- editing custom formats 1
- editing policies 1
- Editions
- Transparent Data Encryption 1
- encrypted columns
- data loads from external files 1
- encrypting data
- encryption 1
- See also: Transparent Data Encryption (TDE)
- cloning PDBs with encrypted data 1
- cloning PDBs with encrypted data in isolated mode 1
- databases offline 1
- databases online 1
- encrypting future tablespaces 1
- about 1
- existing databases 1
- procedure 1
- remotely cloning PDBs with encrypted data in isolated mode 1, 2
- remotely cloning PDBs with encrypted data in united mode 1, 2
- supported encryption algorithms 1
- tablespaces, offline 1
- tablespaces, online 1
- encryption algorithms, supported 1
- encryption keys
- EXEMPT REDACTION POLICY privilege
- using with Database Vault 1
- expressions 1
- external credential store, hardware keystores 1
- external credential store, password-based software keystores 1
- external files
- loading data to tables with encrypted columns 1
- external keystores 1
- external store for passwords
- external tables, encrypting columns in
G
- GROUP BY clause, Data Redaction policies 1
- guidelines
- guidelines, general usage
- guidelines, security
I
- import/export utilities, original 1
- indexes
- creating on encrypted column 1
- index range scans 1
- inline views
- intruders
- ad hoc query attacks 1
- isolated mode 1, 2
- about 1
- ADMINISTER KEY MANAGEMENT operations allowed in 1
- ADMINISTER KEY MANAGEMENT operations not allowed in 1
- backing up software keystores 1
- changing PDB keystore from CDB root 1
- configuring 1
- configuring hardware keystores, about 1
- configuring HSM 1
- configuring software keystores, about 1
- creating software keystore 1
- creating TDE master encryption key for later use 1
- encrypting data 1, 2
- encryption key, setting 1
- exporting, importing TDE master encryption keys 1
- exporting or importing master encryption keys 1
- hardware keystores, closing 1
- hardware keystores, opening 1
- lost control file 1
- master encryption keys
- moving key from PDB to CDB root 1
- master encryption keys, migrating 1
- migrating from HSM to password software keystore 1
- migrating from password software keystore to HSM 1
- moving encryption key into new keystore 1
- moving PDB from one CDB to another 1
- Oracle RAC 1
- password change for hardware keystores 1
- password change for software keystores 1
- plugging PDBs with encrypted data into CDB 1
- plugging PDB with master encryption keys stored in hardware keystore 1
- secrets stored in hardware keystores 1
- secrets stored in software keystores 1
- setting new encryption key 1
- software keystores, closing 1
- software keystores, opening 1
- uniting PDB keystore 1
- unplugging PDBs 1
K
- keystore location
- keystores
- about 1
- architecture 1
- ASM-based 1
- auto login 1
- auto-login, open and close operations in CDBs 1, 2
- backing up isolated mode password-protected software keystores
- procedure 1
- backing up password-protected software keystores
- backing up united mode password-protected software keystores
- procedure 1
- changing hardware keystore password 1
- changing passwords for protected-protected software keystores 1
- closing hardware keystores 1
- closing in CDBs 1, 2
- closing software keystores 1
- creating when PDB is closed 1
- database close operations 1
- deleting 1
- deleting unused 1, 2
- deleting unused in isolated mode 1
- external 1
- hardware, changing password in isolated mode 1
- hardware, changing password in united mode 1
- hardware, opening in isolated mode 1
- hardware, opening in united mode 1
- hardware keystore
- configuration process 1
- merging
- migrating
- migration using Oracle Key Vault 1
- moving out of ASM 1
- moving software keystore to a new location 1
- multitenant database pointing to ASM location 1
- non-OMF-compliant system pointing to ASM location 1
- opening hardware keystores 1
- opening in CDBs 1, 2
- Oracle Database secrets
- password access 1
- password preservation in PDB move operations 1
- password preservation in PDB move operations in united mode 1
- reverting keystore creation operation 1
- search order for 1
- software, changing password in isolated mode 1
- software, changing password in united mode 1
- software, creating in united mode 1
- software, opening in isolated mode 1
- software, opening in united mode 1
- standalone database pointing to ASM location 1
- TDE master encryption key merge differing from import or export 1
- using auto-login hardware keystore 1
- keystores, software
- configuration process 1
- keystore type
O
- OLS_LABEL_DOMINATES public function
- Data Redaction policies 1
- ONE_STEP_PLUGIN_FOR_PDB_WITH_TDE dynamic system parameter 1, 2
- opening hardware keystores 1, 2
- opening software keystores 1
- operations allowed in 1, 2
- operations not allowed in 1, 2
- ORA-00979 error
- not a GROUP BY expression error 1
- ORA-28081
- Insufficient privileges - the command references a redacted object error 1
- ORA-28365 error
- wallet is not open 1
- ORA-46680 error 1
- ORA-65040 error 1
- Oracle Application Express
- filtering using by session state in Data Redaction policies 1
- Oracle Application Expression
- expressions 1
- Oracle Call Interface
- Transparent Data Encryption 1
- Oracle Database Real Application Security
- Data Redaction 1
- Oracle Database Vault
- using with Data Redaction 1
- Oracle Data Guard
- Oracle Data Pump
- Oracle Data Redaction 1
- about 1
- ad hoc tools 1
- aggregate functions 1
- benefits 1
- CDBs 1
- columns with XML-generated data 1
- creating custom format 1
- database applications 1
- DBMS_REDACT.ADD_POLICY procedure
- using 1
- DBMS_REDACT.ALTER_POLICY procedure
- DBMS_REDACT.DISABLE_POLICY
- DBMS_REDACT.DROP_POLICY
- DBMS_REDACT.ENABLE_POLICY
- DBMS_REDACT.UPDATE_FULL_REDACTION_VALUES procedure
- deleting policies 1
- editing custom format 1
- editions 1
- Enterprise Manager Cloud Control 1, 2, 3, 4
- Enterprise Manager Cloud Control, about 1
- Enterprise Manager Cloud Control workflow 1
- exporting data using Data Pump Export 1
- exporting objects using Data Pump 1
- full data redaction
- functions used in expressions 1
- how differs from Oracle Database Real Application Security masking 1
- how differs from Oracle Virtual Private Database masking 1
- importing data using Data Pump Export 1
- inline views order of redaction 1
- JSON 1
- managing policies 1
- named policy expressions
- about 1
- nested functions order of redaction 1
- no data redaction
- Oracle Data Pump security policy 1
- Oracle Enterprise Manager Data Masking and Subsetting Pack 1
- partial data redaction
- policy expressions
- privileges for creating policies 1
- queries on columns protected by Data Redaction policies 1
- random data redaction
- randomized data redaction
- about 1
- regular expression data redaction
- regular expression redaction
- about 1
- returning null values
- SYS schema objects 1
- SYSTEM schema objects 1
- use cases 1
- when to use 1
- WHERE clause redaction 1
- Oracle Data Redaction, database links 1
- Oracle Data RedactionEnterprise Manager Cloud Control
- deleting custom format 1
- Oracle Data Redaction formats
- Oracle Data Redaction partial redaction
- Oracle Data Redaction policies 1
- about 1
- altering 1
- building reports 1
- creating
- creating in Cloud Control 1
- deleting in Cloud Control 1
- disabling 1
- disabling in Cloud Control 1
- dropping 1
- editing in Cloud Control 1
- enabling 1
- Enterprise Manager Cloud Control, viewing in 1
- exempting users from 1
- expressions
- filtering users
- finding information about 1
- Oracle Enterprise Manager Cloud Control 1
- redacting multiple columns in one policy 1
- Oracle Data Redaction policy expressions
- Oracle Enterprise Manager Cloud Control 1
- creating custom formats 1
- creating policy expressions 1
- deleting policy expressions 1
- disabling policies 1
- editing policy expressions 1
- Oracle Data Redaction 1, 2, 3, 4, 5, 6, 7, 8
- Oracle Data Redaction, creating policies 1
- Oracle Data Redaction, viewing details of a policy 1
- Oracle Data Redaction formats, viewing in 1
- policy expressions, about 1
- viewing policy expressions 1
- Oracle Enterprise Manager Data Masking and Subsetting Pack
- Oracle Data Redaction impact 1
- Oracle GoldenGate
- storing secrets in Oracle keystores 1
- Oracle Key Vault
- migration of keystores 1
- Oracle Label Security
- functions using Data Redaction expressions 1
- Oracle-managed tablespaces 1
- Oracle Real Application Clusters
- Oracle Recovery Manager
- Transparent Data Encryption 1
- Oracle Securefiles
- Oracle Virtual Private Database (VPD)
- Data Redaction 1
- orapki utility
- how compares with ADMINISTER KEY MANAGEMENT statement 1
- ORDER BY clause, Data Redaction policies 1
- original import/export utilities 1
P
S
- salt
- removing 1
- salt (TDE)
- adding 1
- secrets
- SecureFiles
- sensitive credential data 1
- software keystores
- SUBSTR function
- expressions 1
- synchronous change data capture 1
- SYS_CONTEXT function
- SYS_SESSION_ROLES SYS_CONTEXT namespace
- Data Redaction 1
- SYSTEM user
- Data Redaction policies 1
- SYS user
- Data Redaction policies 1
T
- tablespace encryption
- tablespace master encryption key
- setting 1
- tablespaces
- tablespaces, offline decryption
- procedure 1
- tablespaces, offline encryption
- tablespaces, online encryption
- TDE
- See: Transparent Data Encryption (TDE)
- TDE column encryption
- restrictions 1
- TDE master encryption key 1
- TDE master encryption keys
- activating
- activating in isolated mode 1
- activating in united mode 1
- architecture 1
- attributes 1
- creating for later use
- custom attribute tags
- disabling not allowed 1
- exporting 1
- exporting in PDBs 1
- finding currently used encryption key in united mode 1
- finding currently used TDE master encryption key 1
- importing 1
- importing in PDBs 1
- keystore merge differing from import or export 1
- outside the databaase
- about 1
- outside the database
- rekeying 1, 2, 3
- removing automatically from standby database 1, 2
- resetting in keystore 1
- setting in keystore 1
- Transparent Data Encryption (TDE)
- about 1
- about configuration 1
- benefits 1
- column encryption
- about 1, 2
- adding encrypting column to existing table 1
- changing algorithm 1
- changing encryption key 1
- creating encrypted column in external table 1
- creating index on encrypted column 1
- creating tables with default encryption algorithm 1
- creating tables with non-default encryption algorithm 1
- data types supported 1
- disabling encryption in existing column 1
- encrypting columns in existing tables 1
- encrypting existing column 1
- encryption and integrity algorithms 1
- restrictions 1
- salt in encrypted columns 1
- columns with identity columns 1
- compatibility with application software 1
- compatibility with Oracle Database tools 1
- compression of encrypted data 1
- configuring hardware keystores
- configuring hardware keystores in isolated mode
- reconfiguring software keystore 1
- configuring software keystores
- data deduplication of encrypted data 1
- editions 1
- encryption and integrity algorithms 1
- finding information about 1
- frequently asked questions 1
- incompatibilities 1
- keystore management
- ASM-based keystore 1
- backing up password-protected software keystores 1
- changing hardware keystore password 1
- changing protected-protected software keystore password 1
- closing hardware keystores 1
- closing software keystore 1
- merging keystores, about 1
- merging keystores, auto-login into password-protected 1
- merging keystores, one into an existing 1
- merging keystores, one into an existing in isolated mode 1
- merging keystores, reversing merge operation 1
- merging keystores, two into a third new keystore 1
- merging keystores, two into a third new keystore in isolated mode 1
- migrating password key and hardware keystore 1
- migrating password key and hardware keystore, master encryption key creation 1
- migrating password key and hardware keystore, reverse migration 1
- TDE master encryption key attributes 1
- keystores
- keystore search order 1
- master encryption key
- master encryption key attributes
- creating custom tags 1
- master encryption keys
- modifying applications for use with 1
- multidatabase environments 1
- multitenant database pointing to ASM location 1
- multitenant environment 1
- non-OMF-compliant system pointing to ASM location 1
- Oracle Call Interface 1
- Oracle Data Guard 1
- Oracle Data Pump
- Oracle Data Pump export and import operations
- about 1
- Oracle Real Application Clusters
- Oracle Recovery Manager 1
- keystores 1
- PDBs
- finding keystore status for all PDBs 1
- performance
- performance overheads
- PKI encryption 1
- privileges required 1
- SecureFiles 1, 2
- security considerations
- standalone database pointing to ASM location 1
- storage overhead 1
- storing Oracle GoldenGate secrets 1
- tablespace encryption
- tablespace encryption, setting with COMPATIBLE parameter 1
- TDE master encryption key
- rekeying in isolated mode 1
- TDE master encryption key attributes
- TDE master encryption keys
- exporting and importing 1
- TDE Master Encryption Keys
- resetting in keystore 1
- views 1
- Transparent Data Encryption (TDE)integrity
- Transparent Data Encryption (TDE) keystores
- transportable tablespaces 1
- tutorials
- named Data Redaction policy expressions 1
U
- united mode 1, 2
- about 1
- about managing cloned PDBs with encrypted data 1
- ADMINISTER KEY MANAGEMENT operations allowed in 1
- ADMINISTER KEY MANAGEMENT operations not allowed in 1
- backing up software keystores 1
- cloning PDB with encrypted data 1
- configuring, procedure 1
- configuring, procedure using parameters 1
- configuring hardware keystores, about 1
- configuring HSM 1
- configuring software keystores, about 1
- creating software keystore 1
- creating TDE master encryption key for later use 1
- encrypting data 1, 2
- encryption key, setting 1
- finding keystore status for all PDBs 1
- hardware keystores, closing 1
- hardware keystores, opening 1
- isolating PDB keystore 1
- keystore open and close operations 1
- master encryption keys
- moving key from CDB root to PDB 1
- moving encryption key into new keystore 1
- moving TDE master encryption key into new keystore 1
- password change for hardware keystores 1
- password change for software keystores 1
- remotely cloning PDBs with encrypted data 1, 2
- remotely cloning PDB with encrypted data 1, 2
- setting hardware keystore encryption key 1
- software keystores, closing 1
- software keystores, creating in 1
- software keystores, opening 1
- utilities, import/export 1