Configuring Encryption for Backups

Backups must be encrypted before they can be sent to Oracle Database Backup Cloud Service. You’ll specify encryption when you perform a backup.

If a backup is not encrypted, you’ll get an error message similar to the one shown below when you try to back up to the service:

RMAN-03009: failure of backup command on ORA_SBT_TAPE_1 channel at 08/15/2014 14:00:43
ORA-27030: skgfwrt: sbtwrite2 returned error
ORA-19511: non RMAN, but media manager or vendor specific failure, error text:
   KBHS-01602: backup piece 14p0jso8_1_1 is not encrypted

Recovery Manager (RMAN) encrypted backups are securely created, transmitted, and stored in the cloud. Use one of the following RMAN encryption modes to encrypt backups:

  • Password encryption

  • Transparent Data Encryption (TDE)

  • Dual-mode encryption (combination of password and TDE)

For information about encryption methodologies and choosing an encryption algorithm, see Configuring Backup Encryption in Oracle Database Backup and Recovery User's Guide.