Installation Guide for Oracle Self-Service E-Billing > Configuring the Oracle Database > Process of Implementing TDE Column Encryption >

Opening the Oracle Wallet Using the Ant Encryption Menu

The external security module stores the Master Encryption Key in an Oracle Wallet. The Oracle Self-Service E-Billing database must load the Master Encryption Key into memory before it can encrypt or decrypt columns. Opening the Wallet allows the database to access the Master Encryption Key.

When the Wallet is opened, it remains open until you shut down the database instance. When you restart the instance, you must open the Wallet again if it is set to manual open mode. The Oracle Self-Service E-Billing database is configured for manual open mode when the WALLET_AUTO_OPEN property in the eBilling_OLAP_properties file is set to N. To configure the Wallet to open automatically upon restarting the instance, change the property value to Y.

This task is a step in Process of Implementing TDE Column Encryption and in Process of Implementing TDE Tablespace Encryption.

To open the Oracle Wallet using the Ant Encryption menu

1. Change to the directory of the Oracle Self-Service E-Billing database installation files. In the directory, EDX_HOME is the location where you installed Oracle Self-Service E-Billing.
   • UNIX. EDX_HOME/db/oracle
   • Windows. EDX_HOME\db\oracle
2. Enter Ant.

   By default, the Ant command runs the build.xml file in the current directory.

3. From the Main Menu, select Option 2, Standalone Install.
4. Select Option 3, Encrypt Sensitive Data.
5. Select Option 3, Open Oracle Wallet.

NOTE:  If you shut down an encrypted database (a shutdown abort), then the following error message might occur when restarting the database without opening the Wallet. This error can occur because during recovery, background processes might require access to encrypted redo and undo logs.

ORA-28365: wallet is not open

ORA-28365: wallet is not open

ORA-00600: internal error code, arguments: [kcrp_init_1], [], [], [], [], [],

[], []

The Wallet must be open before opening the database:

SQL> startup mount;

SQL> alter system set wallet open identified by "example";

SQL> alter database open;