A
- ad hoc tools
- ADMINISTER KEY MANAGEMENT
- isolated mode operations 1
- isolated mode operations not allowed 1
- united mode operations allowed in 1
- united mode operations not allowed 1
- administrative access to policies, restricting 1
- aggregate functions
- affect on Data Redaction policy optimization 1
- ALTER SYSTEM statement
- how compares with ADMINISTER KEY MANAGEMENT statement 1
- APEX_UTIL.GET_NUMERIC_SESSION_STATE function
- Oracle Data Redaction policies (NV public function) 1
- APEX_UTIL.GET_SESSION_STATE function
- Oracle Data Redaction policies (V public function) 1
- applications
- database applications and Oracle Data Redaction 1
- modifying to use Transparent Data Encryption 1
- auto login keystores
- and Transparent Data Encryption (TDE) 1
- Automatic Storage Management (ASM)
- keystore location configuration 1
- moving software keystores from 1
- multitenant database pointing to ASM location 1
- non-OMF-compliant system pointing to ASM location 1
- standalone database pointing to ASM location 1
C
- CDBs
- cloning PDBs with encrypted data 1
- cloning PDBs with encrypted data in isolated mode 1
- cloning PDBs wth encrypted data, about 1
- Data Redaction masking policies 1
- moving PDB from one CDB to another 1
- moving PDB from one CDB to another in united mode 1
- PDBs with encrypted data 1
- preserving keystore passwords in PDB move operations 1
- preserving keystore passwords in PDB move operations in united mode 1
- remotely cloning PDBs with encrypted data in isolated mode 1, 2
- remotely cloning PDBs with encrypted data in united mode 1, 2
- change data capture, synchronous 1
- closing hardware keystores 1
- closing software keystores 1
- column encryption
- about 1
- changing algorithm 1
- changing encryption key 1
- creating encrypted table column with default algorithm 1
- creating encrypted table column with non-default algorithm 1
- creating index on encrypted column 1
- data loads from external file 1
- data types to encrypt 1
- existing tables
- about 1
- adding encrypted column to 1
- disabling encryption 1
- encrypting unencrypted column 1
- external tables 1
- incompatibilities 1
- limitations 1
- performance, optimum 1
- salt 1
- security considerations 1
- skipping integrity check 1
- column sensitive type discovery
- enabling when creating a Data Redaction policy 1
- compliance
- Transparent Data Encryption 1
- compression of Transparent Data Encryption data 1
- configuring software keystores
- creating local auto-login keystore 1
- control files
D
- data at rest 1
- database close operations
- database links
- with Oracle Data Redaction policies 1
- database roles
- Data Redaction policies 1
- databases
- about encrypting 1
- encrypting existing 1
- encrypting offline 1
- encrypting online 1
- data deduplication of Transparent Data Encryption data 1
- data redaction
- See: Oracle Data Redaction
- Data Redaction supported functions 1
- data storage
- Transparent Data Encryption 1
- DDL statements
- Oracle Data Redaction policies 1
- decryption
- tablespaces, offline 1, 2
- tablespaces, online 1
- DISTINCT clause, Data Redaction policies 1
- DML statements
- Oracle Data Redaction policies 1
E
- editing custom formats 1
- editing policies 1
- Editions
- Transparent Data Encryption 1
- encrypted columns
- data loads from external files 1
- encrypting data
- in isolated mode 1, 2
- in united mode 1, 2
- encryption 1
- See also: Transparent Data Encryption (TDE)
- cloning PDBs with encrypted data 1
- cloning PDBs with encrypted data in isolated mode 1
- databases offline 1
- databases online 1
- encrypting future tablespaces 1
- existing databases 1
- procedure 1
- remotely cloning PDBs with encrypted data in isolated mode 1, 2
- remotely cloning PDBs with encrypted data in united mode 1, 2
- supported encryption algorithms 1
- tablespaces, offline 1
- tablespaces, online 1
- encryption algorithms, supported 1
- encryption keys
- setting in isolated mode 1
- setting in united mode 1
- EXEMPT REDACTION POLICY privilege
- using with Database Vault 1
- expressions 1
- LENGTH functions, character string 1
- namespace functions 1
- Oracle Application Express 1
- Oracle Label Security functions 1
- SUBSTR function 1
- external credential store, hardware keystores 1
- external credential store, password-based software keystores 1
- external files
- loading data to tables with encrypted columns 1
- external keystores 1
- external store for passwords
- open and close operations in CDB 1, 2
- external tables, encrypting columns in
- ORACLE_DATPUMP 1
- ORACLE_LOADER 1
G
- GROUP BY clause, Data Redaction policies 1
- guidelines
- materialized views and Data Redaction 1
- recycle bin and Data Redaction 1
- SYS_CONTEXT values and Data Redaction 1
- guidelines, general usage
- redacted columns and DISTINCT clause 1
- redacted columns and GROUP BY clause 1
- redacted columns and ORDER BY clause 1
- guidelines, security
- ad hoc query attacks and Data Redaction 1
- application context value handling by Data Redaction policies 1
- day-to-day operations and Data Redaction 1
- DDL statements and Data Redaction policies 1
- exhaustive SQL queries and inference and Data Redaction 1
H
- hardware keystores
- about 1
- backing up 1
- changing password in isolated mode 1
- changing password in united mode 1
- closing 1
- closing in isolated mode 1
- closing in united mode 1
- opening, about 1
- opening in isolated mode 1
- opening in united mode 1
- plugging PDBs 1
- unplugging PDBs 1
- using external keystore 1
- hardware security modules
- backing up keystores 1
- plugging PDBs 1
- unplugging PDBs 1
I
- import/export utilities, original 1
- indexes
- creating on encrypted column 1
- index range scans 1
- inline views
- Data Redaction policies order of redaction 1
- Data Redaction redaction 1
- intruders
- isolated mode 1, 2
- about 1
- ADMINISTER KEY MANAGEMENT operations allowed in 1
- ADMINISTER KEY MANAGEMENT operations not allowed in 1
- backing up software keystores 1
- changing PDB keystore from CDB root 1
- configuring 1
- configuring hardware keystores, about 1
- configuring HSM 1
- configuring software keystores, about 1
- creating software keystore 1
- creating TDE master encryption key for later use 1
- encrypting data 1, 2
- encryption key, setting 1
- exporting, importing TDE master encryption keys 1
- exporting or importing master encryption keys 1
- hardware keystores, closing 1
- hardware keystores, opening 1
- lost control file 1
- master encryption keys
- moving key from PDB to CDB root 1
- master encryption keys, migrating 1
- migrating from HSM to password software keystore 1
- migrating from password software keystore to HSM 1
- moving encryption key into new keystore 1
- moving PDB from one CDB to another 1
- Oracle RAC 1
- password change for hardware keystores 1
- password change for software keystores 1
- plugging PDBs with encrypted data into CDB 1
- plugging PDB with master encryption keys stored in hardware keystore 1
- secrets stored in hardware keystores 1
- secrets stored in software keystores 1
- setting new encryption key 1
- software keystores, closing 1
- software keystores, opening 1
- uniting PDB keystore 1
- unplugging PDBs 1
K
- keystore location
- setting 1
- setting for isolated mode 1
- setting for united mode 1, 2
- keystores
- about 1
- architecture 1
- ASM-based 1
- auto login 1
- auto-login, open and close operations in CDBs 1, 2
- backing up isolated mode password-protected software keystores
- backing up password-protected software keystores
- about 1
- backup identifier rules 1
- procedure 1
- backing up united mode password-protected software keystores
- changing hardware keystore password 1
- changing passwords for protected-protected software keystores 1
- closing hardware keystores 1
- closing in CDBs 1, 2
- closing software keystores 1
- creating when PDB is closed 1
- database close operations 1
- deleting 1
- deleting unused 1, 2
- deleting unused in isolated mode 1
- external 1
- hardware, changing password in isolated mode 1
- hardware, changing password in united mode 1
- hardware, opening in isolated mode 1
- hardware, opening in united mode 1
- hardware keystore
- merging
- about 1
- auto-login into password-protected 1
- one into another existing keystore 1
- one into another existing keystore in isolated mode 1
- reversing merge operation 1
- two into a third new keystore 1
- two into a third new keystore in isolated mode 1
- migrating
- creating master encryption key for hardware keystore-based encryption 1
- hardware keystore to software keystore 1
- keystore order after migration 1
- password key into hardware keystore 1
- migration using Oracle Key Vault 1
- moving out of ASM 1
- moving software keystore to a new location 1
- multitenant database pointing to ASM location 1
- non-OMF-compliant system pointing to ASM location 1
- opening hardware keystores 1
- opening in CDBs 1, 2
- Oracle Database secrets
- about 1
- storing in hardware keystore 1
- storing in software keystore 1
- password access 1
- password preservation in PDB move operations 1
- password preservation in PDB move operations in united mode 1
- reverting keystore creation operation 1
- search order for 1
- software, changing password in isolated mode 1
- software, changing password in united mode 1
- software, creating in united mode 1
- software, opening in isolated mode 1
- software, opening in united mode 1
- standalone database pointing to ASM location 1
- TDE master encryption key merge differing from import or export 1
- using auto-login hardware keystore 1
- keystores, software
- keystore type
- setting 1
- setting for isolated mode 1
- setting for united mode 1
- setting for united mode using parameter 1
L
- LENGTH functions, character string
M
- masking
- See: Oracle Data Redaction
- materialized views
- Data Redaction guideline 1
- Transparent Data Encryption tablespace encryption 1
- migration
- migrating from HSM to password software keystore 1
- migrating from password software keystore to HSM 1
- multitenant container databases
N
- namespace functions
- nested functions
- Data Redaction policies order of redaction 1
- NV public function (APEX_UTIL.GET_NUMERIC_SESSION_STATE function), Data Redaction policies 1
O
- OLS_LABEL_DOMINATES public function
- Data Redaction policies 1
- ONE_STEP_PLUGIN_FOR_PDB_WITH_TDE dynamic system parameter 1, 2
- opening hardware keystores 1, 2
- opening software keystores 1
- operations allowed in 1, 2
- operations not allowed in 1, 2
- ORA-00979 error
- not a GROUP BY expression error 1
- ORA-28081
- Insufficient privileges - the command references a redacted object error 1
- ORA-28365 error
- ORA-46680 error 1
- ORA-65040 error 1
- Oracle Application Express
- filtering using by session state in Data Redaction policies 1
- Oracle Application Expression
- Oracle Call Interface
- Transparent Data Encryption 1
- Oracle Database Real Application Security
- Oracle Database Vault
- using with Data Redaction 1
- Oracle Data Guard
- master encryption keys, removing from standby database 1
- TDE master encryption keys, removing from standby database 1
- Transparent Data Encryption 1
- Oracle Data Pump
- encrypted columns 1
- encrypted data 1
- encrypted data with database links 1
- encrypted data with dump sets 1
- exported data from Data Redaction policies 1
- exporting Oracle Data Redaction objects 1
- imported data from Data Redaction policies 1
- Oracle Data Redaction security policy 1
- Oracle Data Redaction 1
- about 1
- ad hoc tools 1
- aggregate functions 1
- benefits 1
- CDBs 1
- columns with XML-generated data 1
- creating custom format 1
- database applications 1
- DBMS_REDACT.ADD_POLICY procedure
- DBMS_REDACT.ALTER_POLICY procedure
- about 1
- example 1
- parameters required for various actions 1
- syntax 1
- DBMS_REDACT.DISABLE_POLICY
- about 1
- example 1
- syntax 1
- DBMS_REDACT.DROP_POLICY
- about 1
- examples 1
- syntax 1
- DBMS_REDACT.ENABLE_POLICY
- about 1
- example 1
- syntax 1
- DBMS_REDACT.UPDATE_FULL_REDACTION_VALUES procedure
- deleting policies 1
- editing custom format 1
- editions 1
- Enterprise Manager Cloud Control 1, 2, 3, 4
- Enterprise Manager Cloud Control, about 1
- Enterprise Manager Cloud Control workflow 1
- exporting data using Data Pump Export 1
- exporting objects using Data Pump 1
- full data redaction
- about 1
- creating policy for 1
- examples 1
- modifying default value 1
- syntax 1
- functions used in expressions 1
- how differs from Oracle Database Real Application Security masking 1
- how differs from Oracle Virtual Private Database masking 1
- importing data using Data Pump Export 1
- inline views order of redaction 1
- JSON 1
- managing policies 1
- named policy expressions
- nested functions order of redaction 1
- no data redaction
- about 1, 2
- creating policies for 1
- example 1
- syntax 1
- Oracle Data Pump security policy 1
- Oracle Enterprise Manager Data Masking and Subsetting Pack 1
- partial data redaction
- about 1
- character types, policies for 1
- data-time data types 1
- example using character data type 1
- example using data-time data type 1
- example using fixed character format 1
- example using number data type 1
- formats, fixed character 1
- number data types 1
- syntax 1
- policy expressions
- about 1
- creating 1
- dropping 1
- tutorial 1
- updating 1
- privileges for creating policies 1
- queries on columns protected by Data Redaction policies 1
- random data redaction
- about 1
- creating policies for 1
- example 1
- randomized data redaction
- regular expression data redaction
- creating policies for 1
- custom, creating policies for 1
- example 1
- example of custom 1
- formats 1
- formats, creating policies for 1
- settings for 1
- syntax 1
- regular expression redaction
- returning null values
- about 1
- example 1
- syntax 1
- SYS schema objects 1
- SYSTEM schema objects 1
- use cases 1
- when to use 1
- WHERE clause redaction 1
- Oracle Data Redaction, database links 1
- Oracle Data RedactionEnterprise Manager Cloud Control
- Oracle Data Redaction formats
- creating in Cloud Control 1
- deleting in Cloud Control 1
- editing in Cloud Control 1
- Enterprise Management Cloud Control, managing in 1
- Enterprise Manager Cloud Control, sensitive column types 1
- Enterprise Manager Cloud Control, viewing in 1
- Oracle Data Redaction partial redaction
- creating policies for 1, 2
- Oracle Data Redaction policies 1
- about 1
- altering 1
- building reports 1
- creating
- examples 1
- general syntax 1
- procedure 1
- creating in Cloud Control 1
- deleting in Cloud Control 1
- disabling 1
- disabling in Cloud Control 1
- dropping 1
- editing in Cloud Control 1
- enabling 1
- Enterprise Manager Cloud Control, viewing in 1
- exempting users from 1
- expressions
- by Application Express session state 1
- by database role 1
- by OLS label dominance 1
- by user environment 1
- filtering users
- finding information about 1
- Oracle Enterprise Manager Cloud Control 1
- redacting multiple columns in one policy 1
- Oracle Data Redaction policy expressions
- Cloud Control, about 1
- creating in Cloud Control 1
- deleting in Cloud Control 1
- editing in Cloud Control 1
- viewing in Cloud Control 1
- Oracle Enterprise Manager Cloud Control 1
- creating custom formats 1
- creating policy expressions 1
- deleting policy expressions 1
- disabling policies 1
- editing policy expressions 1
- Oracle Data Redaction 1, 2, 3, 4, 5, 6, 7, 8
- Oracle Data Redaction, creating policies 1
- Oracle Data Redaction, viewing details of a policy 1
- Oracle Data Redaction formats, viewing in 1
- policy expressions, about 1
- viewing policy expressions 1
- Oracle Enterprise Manager Data Masking and Subsetting Pack
- Oracle Data Redaction impact 1
- Oracle GoldenGate
- storing secrets in Oracle keystores 1
- Oracle Key Vault
- Oracle Label Security
- functions using Data Redaction expressions 1
- Oracle-managed tablespaces 1
- Oracle Real Application Clusters
- non-shared file systems to store TDE keystores 1
- Transparent Data Encryption 1
- Oracle Recovery Manager
- Transparent Data Encryption 1
- Oracle Securefiles
- Transparent Data Encryption 1, 2
- Oracle Virtual Private Database (VPD)
- orapki utility
- how compares with ADMINISTER KEY MANAGEMENT statement 1
- ORDER BY clause, Data Redaction policies 1
- original import/export utilities 1
P
- passwords
- access to for ADMINISTER KEY MANAGEMENT operations 1
- preserving in PDB move operations 1
- preserving in PDB move operations in united mode 1
- PDBs
- Data Redaction policies 1
- finding TDE keystore status for all PDBs 1
- master encryption keys
- unplugging with encrypted data 1
- performance
- Transparent Data Encryption 1
- PKI encryption
- backup and recovery operations 1
- hardware keystores 1
- master encryption key 1
- tablespace encryption 1
- pluggable databases
- policy expressions, Oracle Data Redaction 1
R
- recycle bin
- Data Redaction policies and 1
- REDACTION_COLUMNS data dictionary view
- rekeying
- master encryption key 1
- TDE master encryption key in isolated mode 1
- TDE master encryption key in united mode 1
- reports
- based Data Redaction policies 1
- returning null values
S
- salt
- salt (TDE)
- secrets
- storing Oracle Database secrets in keystore
- about 1
- storing in hardware keystore 1
- storing in software keystore 1
- SecureFiles
- Transparent Data Encryption 1, 2
- sensitive credential data 1
- software keystores
- about 1
- changing password in isolated mode 1
- changing password in united mode 1
- closing in isolated mode 1
- closing in united mode 1
- creating in united mode 1
- opening, about 1
- opening in isolated mode 1
- opening in united mode 1
- password-based using external keystore 1
- SUBSTR function
- synchronous change data capture 1
- SYS_CONTEXT function
- Data Redaction policies 1
- SYS_SESSION_ROLES namespace used in Data Redaction 1
- SYS_SESSION_ROLES SYS_CONTEXT namespace
- SYSTEM user
- Data Redaction policies 1
- SYS user
- Data Redaction policies 1
T
- tablespace encryption
- about 1
- architecture 1
- creating encrypted tablespaces 1
- examples 1
- incompatibilities 1
- opening keystore 1
- performance, optimum 1
- performance overhead 1
- procedure 1
- restrictions 1
- security considerations for plaintext fragments 1
- setting tablespace key 1
- storage overhead 1
- tablespace master encryption key
- tablespaces
- about encrypting 1
- comparison between offline and online conversions 1
- Oracle managed, closed TDE keystore impact on encrypted 1
- rekeying encryption algorithm 1
- tablespaces
- tablespaces, offline decryption
- tablespaces, offline encryption
- tablespaces, online encryption
- about 1
- decrypting 1
- finishing interrupted job 1
- procedure 1
- rekeying 1
- TDE
- See: Transparent Data Encryption (TDE)
- TDE column encryption
- TDE master encryption key 1
- creating for later use in isolated mode 1
- creating for later use in united mode 1
- TDE master encryption keys
- activating
- about 1
- example 1
- procedure 1
- activating in isolated mode 1
- activating in united mode 1
- architecture 1
- attributes 1
- creating for later use
- about 1
- examples 1
- procedure 1
- custom attribute tags
- about 1
- creating 1
- creating in isolated mode 1
- creating in united mode 1
- disabling not allowed 1
- exporting 1
- exporting in PDBs 1
- finding currently used encryption key in united mode 1
- finding currently used TDE master encryption key 1
- importing 1
- importing in PDBs 1
- keystore merge differing from import or export 1
- outside the databaase
- outside the database
- create 1
- creating in isolated mode 1
- creating in united mode 1
- rekeying 1, 2, 3
- removing automatically from standby database 1, 2
- resetting in keystore 1
- setting in keystore 1
- Transparent Data Encryption (TDE)
- about 1
- about configuration 1
- benefits 1
- column encryption
- about 1, 2
- adding encrypting column to existing table 1
- changing algorithm 1
- changing encryption key 1
- creating encrypted column in external table 1
- creating index on encrypted column 1
- creating tables with default encryption algorithm 1
- creating tables with non-default encryption algorithm 1
- data types supported 1
- disabling encryption in existing column 1
- encrypting columns in existing tables 1
- encrypting existing column 1
- encryption and integrity algorithms 1
- restrictions 1
- salt in encrypted columns 1
- columns with identity columns 1
- compatibility with application software 1
- compatibility with Oracle Database tools 1
- compression of encrypted data 1
- configuring hardware keystores
- about 1
- configuration step 1
- opening 1
- PKCS#11 library 1
- reconfiguring software keystore 1
- setting master encryption key 1
- sqlnet.ora configuration 1
- configuring hardware keystores in isolated mode
- reconfiguring software keystore 1
- configuring software keystores
- about 1
- creating auto-login keystore 1
- creating password-protected keystore 1
- setting software TDE master encryption key 1
- data deduplication of encrypted data 1
- editions 1
- encryption and integrity algorithms 1
- finding information about 1
- frequently asked questions 1
- incompatibilities 1
- keystore management
- ASM-based keystore 1
- backing up password-protected software keystores 1
- changing hardware keystore password 1
- changing protected-protected software keystore password 1
- closing hardware keystores 1
- closing software keystore 1
- merging keystores, about 1
- merging keystores, auto-login into password-protected 1
- merging keystores, one into an existing 1
- merging keystores, one into an existing in isolated mode 1
- merging keystores, reversing merge operation 1
- merging keystores, two into a third new keystore 1
- merging keystores, two into a third new keystore in isolated mode 1
- migrating password key and hardware keystore 1
- migrating password key and hardware keystore, master encryption key creation 1
- migrating password key and hardware keystore, reverse migration 1
- TDE master encryption key attributes 1
- keystores
- about 1
- benefits 1
- types 1
- keystore search order 1
- master encryption key
- rekeying 1
- rekeying in united mode 1
- master encryption key attributes
- master encryption keys
- setting in keystore, about 1
- setting in keystore procedure 1
- modifying applications for use with 1
- multidatabase environments 1
- multitenant database pointing to ASM location 1
- multitenant environment 1
- non-OMF-compliant system pointing to ASM location 1
- Oracle Call Interface 1
- Oracle Data Guard 1
- Oracle Data Pump
- export and import operations on dump sets 1
- export and import operations on encrypted columns 1
- export operations on database links 1
- Oracle Data Pump export and import operations
- Oracle Real Application Clusters
- about 1
- non-shared file systems to store keystores 1
- Oracle Recovery Manager 1
- PDBs
- finding keystore status for all PDBs 1
- performance
- database workloads 1
- decrypting entire data set 1
- optimum 1
- worst case scenario 1
- performance overheads
- PKI encryption 1
- privileges required 1
- SecureFiles 1, 2
- security considerations
- column encryption 1
- general advice 1
- platintext fragments 1
- standalone database pointing to ASM location 1
- storage overhead 1
- storing Oracle GoldenGate secrets 1
- tablespace encryption
- about 1, 2
- creating 1
- encryption and integrity algorithms 1
- examples 1
- opening keystore 1
- restrictions 1
- setting master encryption key 1
- tablespace encryption, setting with COMPATIBLE parameter 1
- TDE master encryption key
- rekeying in isolated mode 1
- TDE master encryption key attributes
- about 1
- creating custom tags in isolated mode 1
- creating custom tags in united mode 1
- TDE master encryption keys
- exporting and importing 1
- TDE Master Encryption Keys
- views 1
- Transparent Data Encryption (TDE)integrity
- column encryption
- creating tables without integrity checks (NOMAC) 1
- improving performance 1
- NOMAC parameter (TDE) 1
- Transparent Data Encryption (TDE) keystores
- deleting 1
- moving software keystore to a new location 1
- transportable tablespaces 1
- tutorials
- named Data Redaction policy expressions 1
U
- united mode 1, 2
- about 1
- about managing cloned PDBs with encrypted data 1
- ADMINISTER KEY MANAGEMENT operations allowed in 1
- ADMINISTER KEY MANAGEMENT operations not allowed in 1
- backing up software keystores 1
- cloning PDB with encrypted data 1
- configuring, procedure 1
- configuring, procedure using parameters 1
- configuring hardware keystores, about 1
- configuring HSM 1
- configuring software keystores, about 1
- creating software keystore 1
- creating TDE master encryption key for later use 1
- encrypting data 1, 2
- encryption key, setting 1
- finding keystore status for all PDBs 1
- hardware keystores, closing 1
- hardware keystores, opening 1
- isolating PDB keystore 1
- keystore open and close operations 1
- master encryption keys
- moving key from CDB root to PDB 1
- moving encryption key into new keystore 1
- moving TDE master encryption key into new keystore 1
- password change for hardware keystores 1
- password change for software keystores 1
- remotely cloning PDBs with encrypted data 1, 2
- remotely cloning PDB with encrypted data 1, 2
- setting hardware keystore encryption key 1
- software keystores, closing 1
- software keystores, creating in 1
- software keystores, opening 1
- utilities, import/export 1
V
- V$ENCRYPTION_WALLET view
- keystore order after migration 1
- views
- V public function (APEX_UTIL.GET_SESSION_STATE function), Data Redaction policies 1
Back to main content