CMEK Lifecycle State Changes

Oracle NoSQL Database Cloud Service manages the lifecycle states of CMEK to ensure smooth workflow and transition between various key states. NDCS checks the state of CMEK in the vault every 15 minutes. It performs an additional check before any critical operation such as schema changes, or configuration updates.

The following table describes the CMEK state and corresponding behavior of the dedicated environment.

Table - CMEK State Change and Affected Operations

CMEK state Behavior Affected operations
ENABLED The dedicated environment functions normally with full access to all operations. All operations are allowed.
DISABLED
The dedicated environment performs the following:
  • Immediately blocks all access.
  • Shuts down all backend instances to maintain data integrity.

Read operations: All data retrieval queries are blocked.

Write operations: All DML operations (INSERT, UPDATE, DELETE) are blocked.

DDL operations: All DDL and schema change (CREATE, ALTER, DROP) operations are blocked.

Management operations: Configuration changes, table operations, backup initiations are blocked.

Dedicated environment/CMEK Status operations: Status check operations are allowed.
PENDING DELETION
DELETED

The following table describes the recovery process for blocked states:

Table - CMEK State Change and Service Restoration

CMEK State Service restoration
DISABLED
  • Service is not automatically restored after re-enabling CMEK in the vault. You must request service restoration after re-enabling CMEK by raising a CAM ticket.
  • You can't change the CMEK by re-enabling the original CMEK until the service is restored.
  • When a service restoration request is placed, NDCS verifies data integrity and restores the dedicated environment.
PENDING DELETION
DELETED Service is not restored as dedicated environment can't be recovered. All data is permanently lost.