Enabling Oracle Transparent Data Encryption

Oracle's Transparent Data Encryption (TDE) feature was disabled at the beginning of the upgrade. If you had TDE enabled prior to the upgrade, then after finishing the upgrade you need to re-enable TDE by running scripts in the sequence specified in the following procedure.

To re-enable TDE:

  1. Run PS_HOME\SCRIPTS\postupgtdeprocess1.sql.

    The script postupgtdeprocess1.sql performs similarly to the script preupgtdeprocess.sql, which you ran at the beginning of the upgrade, to find any tables that are encrypted, generate a list of fields that need to have the PeopleSoft metadata encryption attribute re-enabled, and create the ENCRYPTEDTBLSA project. The ENCRYPTEDTBLSB project is compared with the ENCRYPTEDTBLSA project, and the resulting list of differences between the recfields is input to the script postupgtdeprocess2.sql.

    See ”Preparing for Your PeopleTools Upgrade,” Preserving PeopleTools Configuration Data, Saving Transparent Data Encryption Information.

  2. Run PS_HOME\SCRIPTS\postupgtdeprocess2.sql.

    The script postupgtdeprocess2.sql generates four scripts, which you will run in the next step to reapply TDE to the records identified by the postupgtdeprocess1.sql. Review the generated scripts (particularly pstderebuildfuncidx.sql) to make sure that the syntax, sizing, and tablespace information is intact and is not split at the end of a line. If necessary, modify the scripts as needed for your environment.

  3. Run the scripts that were generated when you ran postupgtdeprocess2.sql in the following order:

    • pstdedropfuncidx.sql

    • pstdereencrypt.sql

    • pstderebuildfuncidx.sql

    • pstdereencryptmetadata.sql

  4. Run PS_HOME\SCRIPTS\postupgtdevalidation.sql.

    The script postupgtdevalidation.sql validates that all tables and columns that were encrypted before the upgrade have maintained encryption. It lists any records that contain encrypted fields, but were not included in the ENCRYPTEDTBLSB project. It also sets the value for the TDE algorithm defined within PSOPTIONS.

See the online product documentation for PeopleTools: Data Management for your new release for more information about administering PeopleSoft databases on Oracle.

Properties

Database Orientation Pass Type Products Platforms Languages

Target

All

All

Oracle

All