Exadata Database - OCI Vault

1. Create an OCI Vault

   For more information, see Create an Oracle Cloud Infrastructure Vault.

2. Create a Master Encryption Key in the Vault

   For more information, see Create a Master Encryption Key in the Vault.

3. Create an OCI Dynamic Group
   1. From the OCI console, select Oracle AI Database, and then select Oracle Exadata Database Service on Dedicated Infrastructure.
   2. From the left menu, select Exadata VM Clusters, and then select the name of the Exadata VM Cluster.
   3. Select the VM Cluster information tab, scroll down to the General information section. Take a note of your Exadata VM Cluster Compartment information.
   4. From the navigation menu , select Identity & Security, and then select Compartments.
   5. From the Compartments list, navigate to the compartment validated in the previous step and take a note of the OCID information.
   6. From the navigation menu , select Identity & Security, and then select Domains.
   7. From the Applied filters section, select the Root Compartment and then choose the name of you domain.
   8. Select the Dynamic groups tab, and then select the Create dynamic group button.
      1. Name: Enter a descriptive name for the group.
      2. Description: Provide a brief description of the dynamic group’s purpose.
      3. Matching Rules: Enter the following statement, replacing <your_Compartment_OCID> with the compartment OCID you noted in the previous step:

         ALL {resource.compartment.id = '<your_Compartment_OCID>'}

      4. Review your information, and then select the Create button.
      
4. Create an OCI Policy
   1. From the navigation menu , select Identity & Security, and then select Policies.
   2. In the Applied Filter section, select the Root Compartment, and then select the Create Policy button.
      1. Name: Enter a descriptive name for the group.
      2. Description: Provide a brief description of the dynamic group’s purpose.
      3. Enable the Show manual editor button, and then enter the following statements. Replace <dynamic-group-name> with the name of the dynamic group created in the previous step, and <your_Compartment_OCID> with your specific compartment OCID:

         
         Allow dynamic-group <dynamic-group-name> to manage vaults in compartment id <your_Compartment_OCID>
         Allow dynamic-group <dynamic-group-name> to manage keys in compartment id <your_Compartment_OCID>

      4. Review your information and then select the Create button.
   
5. Create a Database and Use OCI Vault as the Key Management Solution
   1. Create an Exadata VM Cluster and Exadata Database. See Exadata VM Cluster and Exadata Database for step-by-step instructions.
   2. Navigate to the Encryption section and then select OCI Vault.
   3. Select the Compartment where you created your OCI Vault, and then select OCI Vault from the dropdown list.
   4. Select the Compartment where you created the OCI key, then select the Key from the dropdown list.
   5. Review your information and then select the Create button.
   
6. Modify the Key Management from Oracle Wallet to OCI Vault

   To update key management from Oracle Wallet to OCI Vault, complete the following steps:

   1. From the OCI console, select Oracle AI Database, and then select Oracle Exadata Database Service on Dedicated Infrastructure.
   2. From the left menu, select Exadata VM Clusters, and then select your Exadata VM Cluster that you wish to modify.
   3. Navigate to Databases tab and then select the name field of the database you wish to modify.
   4. From the Encryption section, confirm that Key management is set to Oracle Wallet, and then select the Change button.
   5. From the Change key management page, enter the following information:
      1. Select your Key management as OCI Vault from the dropdown list.
      2. Select the Compartment where you created your OCI Vault, and then select the OCI Vault from the Vault dropdown list.
      3. Select the Compartment where you created your OCI key, and then select the OCI key from the Master encryption key dropdown list.
      4. Select the Save changes button.
   
7. Verify the Database Encryption Method
   1. From the OCI console, select Oracle AI Database, and then select Oracle Exadata Database Service on Dedicated Infrastructure.
   2. From the left menu, select Exadata VM Clusters, and then select the name of the Exadata VM Cluster that you wish to verify.
   3. Select the Databases tab, and then select the name of the database that you wish to validate.
   4. Scroll down to the Encryption section. In this section, you can confirm that Key Management is set to OCI Vault and view the Encryption Key OCID of the OCI key in use.
   

Rotate the OCI Vault Key for a Container Database (CDB)

Rotate the OCI Vault Key for a Pluggable Database (PDB)

Oracle Exadata Database Service on Dedicated Infrastructure integration with OCI Vault is only available through OCI Console.

There is currently no content for this page. Oracle AI Database@Azure team intends to add content here, and this placeholder text is provided until that text is added. The Oracle AI Database@Azure team is excited about future new features, enhancements, and fixes to this product and this accompanying documentation. We strongly recommend you watch this page for those updates.

There is currently no content for this page. Oracle AI Database@Azure team intends to add content here, and this placeholder text is provided until that text is added. The Oracle AI Database@Azure team is excited about future new features, enhancements, and fixes to this product and this accompanying documentation. We strongly recommend you watch this page for those updates.