C Running DVCA After Installing the Database Vault Software

You should run Database Vault Configuration Assistant (DVCA) after you install the Database Vault software, if any of the following conditions is true:

• Database Vault is installed into an Oracle home that has more than one database. You must run DVCA on the other databases in the Oracle home. This enables Database Vault security for those databases. The databases should meet the prerequisites for installing Oracle Database Vault, as discussed in "Preinstallation and Installation Tasks".

• Database Configuration Assistant (DBCA) is used to create a new database in an Oracle home that has a Database Vault installed. DVCA loads the Database Vault schema objects into the new database, creates the DV_OWNER and optional DV_ACCTMGR accounts, and deploys the Database Vault Administrator application for the database.

To run the DVCA utility, you must place its arguments in a file named dvca.args, located in the ORACLE_HOME directory. If there is a dvca.args file there, rename it to a backup name (for example, dvca.args_OLD), and then re-create this file using the following arguments as needed for your purpose:

• -action: The action to perform. option creates the Database Vault schema objects, creates the DV_OWNER account and the optional DV_ACCTMGR account, and deploys the Database Vault Administrator application.

• -racnode: The host name of the Real Application Clusters (RAC) node on which the action is being performed. Do not include the domain name with the host name. Use this option if this is a RAC database.

• -oh: The Oracle home for the database.

• -jdbc_str: The JDBC connection string used to connect to the database. For example, jdbc:oracle:oci:@orcl1, where orcl1 is the net service name in the tnsnames.ora file (ORACLE_HOME/network/admin/tnsnames.ora).

• -sys_passwd: Password for user SYS. The command prompts for the password, if you do not enter it on the command line.

• -owner_account: Oracle Database Vault Owner account name

• -owner_passwd: Oracle Database Vault owner account password. The command prompts for the password, if you do not enter it on the command line.

• -acctmgr_account: (Optional) Oracle Database Vault Account Manager user

• -acctmgr_passwd: Oracle Database Vault Account Manager password (if a user name has been specified). The command prompts for the password, if you do not enter it on the command line.

• -logfile: Optionally, specify a log file name and location. You can enter an absolute path or a path that is relative to the location of the ORACLE_HOME/bin directory

• -silent: Required if you are not running DVCA in an xterm window

• -nodecrypt: Reads plaintext passwords as passed on the command line. You must use this option if you are passing plaintext passwords to the command.

• -lockout: Disables SYSDBA operating system authentication

• -languages: Declares the language content to load, defaults to "en" (English). You can specify multiple languages. Include each language in quotation marks with commas separating different languages. Enclose the list of languages in braces. For example, -languages {"en","fr","ja"}.

  The following lists the language key:

  • de: German

  • en: English

  • es: Spanish

  • fr: French

  • it: Italian

  • ja: Japanese

  • ko: Korean

  • pt_BR: Brazilian Portuguese

  • zh_CN: Simplified Chinese

  • zh_TW: Traditional Chinese

For example, you could create the following dvca.args file if you wanted to add English and French:

-action addlanguages 
-oh /INST03/10204TESTING/EFRIEDMA/10204_IA2
-instance myinstance -dbname mydbname 
-jdbc_str jdbc:oracle:oci:@orcl1 
-languages {"es","fr"}
-owner_account dvowner
-owner_passwd password
-jdbc_str jdbc:oracle:oci:@eia1
-sys_passwd admin
-nodecrypt

Then, from the Oracle home directory, run DVCA as follows:

$ dvca

To view the DVCA parameters, run this command:

$ dvca -help

The DVCA session generates a file called dvca.jinput that contains all DVCA command arguments, including the contents of the dvca.args file. This dvca.jinput along with the dvca.args file renamed to dvca.args_OLD remain in your ORACLE_HOME directory after the Database Vault Configuration tool exits. These files may contain sensitive database access information; therefore you should delete or secure them.

Note:

• You should also run DVCA before and after installing database options such as Spatial, Java, and Intermedia. See Oracle Database Vault Administrator's Guide for more details.

• Before you run this command, make sure that the database and listener are running.

• After you install Database Vault for a Real Application Clusters (RAC) instance, you no not need to run DVCA on the other RAC nodes.