Bring Your Own Key to Encrypt Your Data

You can use your own encryption keys to secure Oracle Fusion Cloud Enterprise Performance Management and Oracle Enterprise Data Management Cloud data and align with your organization’s security and compliance requirements.

Bring Your Own Key (BYOK) enables you to use and manage your own encryption keys to secure data in Cloud EPM and Oracle Enterprise Data Management Cloud environments.

By default, the service uses an Oracle-managed Transparent Data Encryption (TDE) key to encrypt data. With BYOK, you use customer-managed keys stored in Oracle Cloud Infrastructure (OCI) Vault.

BYOK allows you to:

• Integrate Cloud EPM and Oracle Enterprise Data Management Cloud with your enterprise key management strategy
• Meet information security and compliance requirements
• Maintain control over encryption keys

In addition, you can use the setEncryptionKey EPM Automate command to specify a custom encryption key for accessing data in the database.