Manage Encryption Keys on Autonomous Database

Describes how to use customer-managed encryption keys with Autonomous Database, and if you are using customer-managed encryption keys, shows how to rotate the keys, switch to Oracle-managed encryption keys, or view the encryption key history.

• About Master Encryption Key Management on Autonomous Database
  Autonomous Database provides two options for Transparent Data Encryption (TDE) to encrypt your database: Oracle-managed encryption keys and Customer-managed encryption keys.
• Prerequisites to Use Customer-Managed Encryption Keys on Autonomous Database
  Perform these prerequisite steps to use customer-managed keys on Autonomous Database:
• Use Customer-Managed Encryption Keys with Vault Located in Local Tenancy
  Shows the steps to select customer-managed master encryption keys on Autonomous Database. If you are using customer-managed master encryption keys, follow these steps to rotate the master keys.
• Use Customer-Managed Encryption Key Located in a Remote Tenancy
  Shows the steps to select customer-managed master encryption keys from a Vault on a remote tenancy.
• Switch to Oracle-Managed Encryption Keys on Autonomous Database
  Shows the steps to switch to Oracle-managed master encryption keys on Autonomous Database if you are using customer-managed encryption keys.
• View History for Customer-Managed Encryption Keys on Autonomous Database
  You can view the key history from the Oracle Cloud Infrastructure Console or by selecting from the V$ENCRYPTION_KEYS view.
• Notes for Using Customer-Managed Keys with Autonomous Database
  Provides additional information and notes for using customer-managed keys with Autonomous Database