Changes in This Release for Oracle Key Vault

Oracle Key Vault release 18.1 introduces several new features that enhance the use of Oracle Key Vault in a large enterprise.

• Multi-Master Cluster
  Oracle Key Vault release 18.1 introduces the multi-master cluster capability.
• Support for FIPS Mode
  You can install Oracle Key Vault so that it operates in FIPS 140-2 compliant mode (FIPS mode), which provides increased security.
• Enhancements to RESTful API
  The Oracle Key Vault RESTful services utility automates the secure on-boarding of huge numbers of endpoints without Oracle Key Vault administrator manual intervention.
• Terminology Changes
  Beginning in Oracle Key Vault release 18.1, the configuration previously known as high availability is now called primary-standby.

Multi-Master Cluster

Oracle Key Vault release 18.1 introduces the multi-master cluster capability.

This feature provides an active-active high availability solution that you can extend across data centers and geographic regions to provide disaster recovery and high availability for both read and write key management operations. Also, the multi-master cluster capability provides zero-downtime from the database endpoint perspective.

Support for FIPS Mode

You can install Oracle Key Vault so that it operates in FIPS 140-2 compliant mode (FIPS mode), which provides increased security.

If you do not install Oracle Key Vault so that it uses FIPS mode, then a user with the System Administrator role can enable or disable it from the Oracle Key Vault management console.

Enhancements to RESTful API

The Oracle Key Vault RESTful services utility automates the secure on-boarding of huge numbers of endpoints without Oracle Key Vault administrator manual intervention.

With Oracle Key Vault 18.1, customers can also automate key management tasks such as key creation, deactivation, and key deletion for the endpoints.

Terminology Changes

Beginning in Oracle Key Vault release 18.1, the configuration previously known as high availability is now called primary-standby.