Default: The default mode depends on which other encryption-related parameters are used. If only the
ENCRYPTION parameter is specified and the Oracle encryption wallet is open, then the default mode is
TRANSPARENT. If only the
ENCRYPTION parameter is specified and the wallet is closed, then an error is returned.
ENCRYPTION_PASSWORD parameter is specified and the wallet is open, then the default is
DUAL. If the
ENCRYPTION_PASSWORD parameter is specified and the wallet is closed, then the default is
Specifies the type of security to use when encryption and decryption are performed.
Syntax and Description
ENCRYPTION_MODE = [DUAL | PASSWORD | TRANSPARENT]
DUAL mode creates a dump file set that can later be imported either transparently or by specifying a password that was used when the dual-mode encrypted dump file set was created. When you later import the dump file set created in
DUAL mode, you can use either the wallet or the password that was specified with the
DUAL mode is best suited for cases in which the dump file set will be imported on-site using the wallet, but which may also need to be imported offsite where the wallet is not available.
PASSWORD mode requires that you provide a password when creating encrypted dump file sets. You will need to provide the same password when you import the dump file set.
PASSWORD mode requires that you also specify the
ENCRYPTION_PASSWORD parameter. The
PASSWORD mode is best suited for cases in which the dump file set will be imported into a different or remote database, but which must remain secure in transit.
TRANSPARENT mode allows an encrypted dump file set to be created without any intervention from a database administrator (DBA), provided the required wallet is available. Therefore, the
ENCRYPTION_PASSWORD parameter is not required, and will in fact, cause an error if it is used in
TRANSPARENT mode. This encryption mode is best suited for cases in which the dump file set will be imported into the same database from which it was exported.
TRANSPARENT mode, the
COMPATIBLE initialization parameter must be set to at least 11.0.0.
When you use the
ENCRYPTION_MODE parameter, you must also use either the
ENCRYPTION_PASSWORD parameter. Otherwise, an error is returned.
When you use the
ENCRYPTED_COLUMNS_ONLY, you cannot use the
ENCRYPTION_MODE parameter. Otherwise, an error is returned.
This parameter is valid only in the Enterprise Edition of Oracle Database 11g or later.
Data Pump encryption features require that the Oracle Advanced Security option be enabled. See Oracle Database Licensing Information for information about licensing requirements for the Oracle Advanced Security option.
> expdp hr DIRECTORY=dpump_dir1 DUMPFILE=hr_enc4.dmp ENCRYPTION=all ENCRYPTION_PASSWORD=secretwords ENCRYPTION_ALGORITHM=AES256 ENCRYPTION_MODE=DUAL