dbaascli tde rotate masterkey

The tde rotate masterkey subcommand of the dbaascli utility is used to change (rotate) the master encryption key.

Execute this command as the oracle user.

dbaascli tde rotate masterkey --dbname dbname

In the above command, dbname specifies the name of the database that you want to affect.

Enter the keystore password when prompted. The keystore password is initially set to the administration password that you specified when you created the database deployment.