Table of Contents

• Title and Copyright Information
• Preface
  • Audience
  • Related Documents
  • Conventions
• Changes in This Release for Oracle Key Vault
  • Changes for Oracle Key Vault Release 21.11
    • Enhanced Pre-Upgrade Checks
  • Changes for Oracle Key Vault Release 21.10
    • Configurable Oracle Key Vault Ports
  • Changes for Oracle Key Vault Release 21.6
    • Ability to Clone an Oracle Key Vault VM
    • Oracle Key Vault Operating System Upgrade to Oracle Linux 8
  • Changes for Oracle Key Vault Release 21.4
    • Ability to Control the Extraction of Symmetric Encryption Keys from Oracle Key Vault
    • Ability to Restrict Oracle Key Vault Administrative Role Grants
  • Changes for Oracle Key Vault Release 21.2
    • Changes in the Oracle Key Vault Management Console
• Introduction to Installing and Upgrading Oracle Key Vault
  • About Oracle Key Vault Installation and Upgrade
  • Oracle Key Vault Deployment Options
  • Privileges Required for Performing Oracle Key Vault Installations and Upgrades
  • Oracle Key Vault Pre-Installation Checklist
• Oracle Key Vault Installation Requirements
  • System Requirements
    • Additional or Third-Party Software
  • Network Port Requirements
  • Supported Endpoint Platforms
  • Endpoint Database Requirements
• Downloading and Installing Oracle Key Vault
  • Downloading the Oracle Key Vault Software for Fresh Installation
  • Downloading the Oracle Key Vault Software for Upgrade
  • Installing the Oracle Key Vault Appliance Software
    • Requirements for root and support User Passwords
  • Performing Post-Installation Tasks
• Cloning Oracle Key Vault Installation
  • Cloning Oracle Key Vault Virtual Machines
  • Guidelines for Cloning on Virtual Machines
• Upgrading a Standalone Oracle Key Vault Server
  • About Upgrading a Standalone Oracle Key Vault Server
  • Step 1: Back Up the Server Before You Upgrade
  • Step 2: Perform Pre-Upgrade Tasks for the Standalone Oracle Key Vault
  • Step 3: Add Disk Space to Extend the vg_root for the Release 21.16 Upgrade
  • Step 4: Upgrade the Oracle Key Vault Server
    • About Upgrading an Oracle Key Vault Server
    • Upgrading a Standalone Oracle Key Vault Server
      • Correct System Inconsistencies Before Upgrade
  • Step 5: If Necessary, Add Disk Space to Extend Swap Space
  • Step 6: If Necessary, Remove Old Kernels
  • Step 7: If Necessary, Remove SSH-Related DSA Keys
  • Step 8: Upgrade the Endpoint Software
  • Step 9: Back Up the Upgraded Oracle Key Vault Server
• Upgrading Oracle Key Vault from an Earlier 21.x Release in a Multi-Master Cluster Environment
  • About Upgrading Oracle Key Vault from an Earlier 21.x Release in a Multi-Master Cluster Environment
  • Step 1: Perform Pre-Upgrade Tasks for the Upgrade from the Earlier 21.x Release
  • Step 2: Upgrade Each Multi-Master Cluster Node
  • Step 3: If Necessary, Change the Network Interface for Upgraded Nodes
  • Step 4: Check the Node Version and the Cluster Version
  • Step 5: If Necessary, Add Disk Space to Extend Swap Space
  • Step 6: If Necessary, Remove Old Kernels
  • Step 7: If Necessary, Remove SSH-Related DSA Keys
  • Step 8: Upgrade the Endpoint Software
• Upgrading a Primary-Standby Oracle Key Vault Server
  • About Upgrading a Primary-Standby Oracle Key Vault Server
  • Step 1: Back Up the Server Before You Upgrade
  • Step 2: Perform Pre-Upgrade Tasks for the Primary-Standby Oracle Key Vault
  • Step 3: Add Disk Space to Extend the vg_root for the Release 21.16 Upgrade
  • Step 4: Upgrade the Oracle Key Vault Primary-Standby Pair
    • About Upgrading an Oracle Key Vault Server Primary-Standby Pair
    • Upgrading a Pair of Primary-Standby Oracle Key Vault Servers
  • Step 5: If Necessary, Add Disk Space to Extend Swap Space
  • Step 6: If Necessary, Remove Old Kernels
  • Step 7: If Necessary, Remove SSH-Related DSA Keys
  • Step 8: Upgrade the Endpoint Software
  • Step 9: Back Up the Upgraded Oracle Key Vault Server
• Upgrading Oracle Key Vault Endpoints
  • About Upgrading Oracle Key Vault Endpoints
  • Planning for Endpoints Upgrade
  • Endpoint Upgrade Considerations
    • Upgrading Endpoint Software or Re-enrolling an Endpoint
    • Endpoint Software for Oracle AI Database 26ai or Later
  • Understanding Endpoint Upgrade for TDE-enabled Databases
    • Using the PKCS#11 Library from a Standard Location
    • Using the PKCS#11 Library from an Oracle Key Vault Release-specific Location
  • Near-Zero Downtime Endpoint Upgrade
    • Installing the PKCS#11 Library in an Oracle Key Vault Release-specific Location
    • Configuring the Database to use the PKCS#11 Library from a Custom Location
    • Library Switchover for Subsequent Endpoint Upgrades
  • Upgrade the Endpoint
• Getting Started Using Oracle Key Vault After the Installation or Upgrade
  • Logging In to the Oracle Key Vault Management Console
  • Overview of the Oracle Key Vault Management Console
  • Performing Actions and Searches
    • Actions Menus
    • Search Bars
• Deploying Oracle Key Vault on an Oracle Database Appliance
  • About Oracle Database Appliance
  • Benefits of Running Oracle Key Vault on Oracle Database Appliance
  • Deployment Considerations
    • Recommendations
  • Deployment Options and Shape Selection
    • Shapes and Sizing Recommendations
      • Oracle Database Appliance X11-S Shape Specification
      • Sizing Recommendations for Common Deployment Options
  • Installing Oracle Key Vault on Oracle Database Appliance
    • Step 1: Prerequisites and Assumptions
    • Step 2: Download Oracle Key Vault Appliance Software
    • Step 3: Create VM Storage
    • Step 4: Host the Oracle Key Vault Appliance Software on Oracle Database Appliance
    • Step 5: Create a Virtual Network
    • Step 6: Reclaim Memory for Oracle Key Vault
    • Step 7: Create a VM Instance for Oracle Key Vault
    • Step 8: Start a VM Manager on Oracle Database Appliance
    • Step 9: Install Oracle Key Vault
  • Managing Oracle Key Vault on Oracle Database Appliance
• Hyper-V Installation on Windows
  • Hyper-V Installation
• Tablespace Encryption for Oracle Key Vault
  • Tablespace Encryption for Oracle Key Vault Upgraded from 12.2.0.3.0 or Before