Bring Your Own Key to Encrypt Your Data

You can use your own encryption keys to secure Oracle Fusion Cloud Enterprise Performance Management and Oracle Fusion Cloud Enterprise Data Management data and align with your organization’s security and compliance requirements.

Bring Your Own Key (BYOK) enables you to use and manage your own encryption keys to secure data in Cloud EPM and Cloud EDM environments.

By default, the service uses an Oracle-managed Transparent Data Encryption (TDE) key to encrypt data. With BYOK, you use customer-managed keys stored in Oracle Cloud Infrastructure (OCI) Vault.

BYOK allows you to:

• Integrate Cloud EPM and Cloud EDM with your enterprise key management strategy
• Meet information security and compliance requirements
• Maintain control over encryption keys

In addition, you can use the setEncryptionKey EPM Automate command to specify a custom encryption key for accessing data in the database.