You rotate the encryption key of an Autonomous Transaction Processing dedicated database from its Details page.
- Go to the Details page of the Autonomous Transaction Processing dedicated database whose encryption key you want to rotate.
For instructions, see View Details of an Autonomous Transaction Processing Dedicated Database.
Click More Actions and then click Rotate Encryption Key.
In the Rotate Encryption Key dialog, confirm that you want to rotate the key by clicking Rotate Key.
The Autonomous Database goes to the Updating status, the encryption key is rotated, and the Autonomous Database goes back to the Active status. How the encryption key is rotated depends on whether it is Oracle-managed or customer-managed:
- Oracle-managed key: Oracle Autonomous Database rotates the encryption key, storing the new value in the secure key store on the Exadata system where the Autonomous Database resides.
- Customer-managed key: Oracle Autonomous Database uses the underlying technology (Oracle Cloud Infrastructure Vault for databases on Oracle Cloud or Oracle Key Vault for databases on Exadata Cloud@Customer) to rotate the key and store the new value as a new version of the key in underlying technology, and then associates this new version with the Autonomous Database.