C Running DVCA After Creating a Database Vault Database

You should run Database Vault Configuration Assistant (DVCA) after creating a new Oracle Database Vault database, if any of the following conditions is true:

  • Database Vault is installed into an Oracle home that has more than one database. You need to run DVCA on the other databases in the Oracle home. This enables Database Vault security for those databases. The databases should meet the prerequisites for installing Oracle Database Vault, as discussed in "Preinstallation and Installation Tasks" .

  • Database Configuration Assistant (DBCA) is used to create a new Database Vault database in an Oracle home that already has a Database Vault database. DVCA loads the Database Vault schema objects into the new database, creates the DV_OWNER and optional DV_ACCTMGR accounts, and deploys the Database Vault Administrator application for the database.

Use the following syntax to run the DVCA utility:

C:\> ORACLE_HOME\bin\dvca -action option -oh oracle_home 
-hostname host_name -owner_account DV_owner_account_name
-owner_passwd DV_owner_account_password
-jdbc_str jdbc_connection_string
-sys_passwd SYS_password [-dvsys_passwd DVSYS_passwd][-acctmgr_account DV_account_manager_account_name]
[-acctmgr_passwd DV_account_manager_password]
[-logfile .\dvca.log] [-nodecrypt] [-racnode host_name]
[-listener listener_name]


  • action: The action to perform. option creates the Database Vault schema objects, creates the DV_OWNER account and the optional DV_ACCTMGR account, and deploys the Database Vault Administrator application.

  • oh: The Oracle home for the database.

  • hostname: The physical or virtual host name of the host on which the action is performed.

  • owner_account: Oracle Database Vault Owner account name

  • owner_passwd: Oracle Database Vault owner account password. The command prompts you for a password if you do not enter one on the command line.

  • jdbc_str: The JDBC connection string used to connect to the database. For example, jdbc:oracle:oci:@orcl1, where orcl1 is the net service name in the tnsnames.ora file (ORACLE_HOME\network\admin\tnsnames.ora).

  • sys_passwd: Password for user SYS. The command prompts for the password, if you do not enter it on the command line.

  • dvsys_passwd: (Optional) Password for user DVSYS.

  • acctmgr_account: (Optional) Oracle Database Vault Account Manager user

  • acctmgr_passwd: Oracle Database Vault Account Manager password (if a user name has been specified). The command prompts for the password, if you do not enter it on the command line.

  • logfile: Optionally, specify a log file name and location. You can enter an absolute path or a path that is relative to the location of the ORACLE_HOME\bin directory

  • nodecrypt: Reads plaintext passwords as passed on the command line. You must use this option if you are passing plaintext passwords to the command.

  • racnode: The host name of the Oracle Real Application Clusters (Oracle RAC) node on which the action is being performed. Do not include the domain name with the host name.Use this option if this is an Oracle RAC database.

    After running dvca -action on the first node, you would also need to configure Oracle Database Vault on the other Oracle RAC nodes. Refer to "Configure Oracle Database Vault on Oracle RAC Nodes (Oracle RAC Only)" for more information.

  • listener: The name of the listener to be started. If no listener is specified, then none is started. Any listener that is already running, including the default listener, is not stopped.

  • languages: Declares the language content to load, defaults to "en" (English). You can specify multiple languages. Include each language in quotation marks with commas separating different languages. Enclose the list of languages in braces. For example, -languages {"en","fr","ja"}.

    The following lists the language key:

    • de: German

    • en: English

    • es: Spanish

    • fr: French

    • it: Italian

    • ja: Japanese

    • ko: Korean

    • pt_BR: Brazilian Portuguese

    • zh_CN: Simplified Chinese

    • zh_TW: Traditional Chinese


  • If the Oracle system identifier (SID) of the database is more than 8 characters, then you would need to update the Net service name in the tnsnames.ora file before running DVCA. See Oracle Database Vault Release Notes for more information.