Practice: Installing Oracle Database Vault

Overview

This practice shows how to install or reinstall Oracle Database Vault in a CDB by using Database Configuration Assistant (DBCA).

Before starting any new practice, refer to the Practices Environment recommendations.

Step 1 : Ensure Database Vault is not installed

Before starting the reinstallation of Database Vault, review Practice: Deinstalling Oracle Database Vault.

Step 2 : Use DBCA to reinstall or install Database Vault in the CDB

  • Before running the command, replace the password in the command below for both the DV owner and the DV account manager. Ensure that the DV owner and DV account manager accounts do not exist in the CDB root.

    
    $ $ORACLE_HOME/bin/dbca -silent -configureDatabase -sourceDB CDB21 -dvConfiguration true -olsConfiguration true -dvUserName c##dvo -dvUserPassword password -dvAccountManagerName c##dvacctmgr -dvAccountManagerPassword password 
    Enter password for the TDE wallet:  password 
    
    [WARNING] [DBT-16002] The database will be restarted in order to configure the chosen options.
    Prepare for db operation
    22% complete
    Preparing to Configure Database
    24% complete
    29% complete
    38% complete
    40% complete
    44% complete
    Oracle Database Vault
    89% complete
    Completing Database Configuration
    100% complete
    The database configuration has completed successfully.
    Look at the log file "/u01/app/oracle/cfgtoollogs/dbca/CDB21/CDB212.log" for further details.
    $

    If you use a password for the Data Vault owner or Data Vault manager such as WElcome123## with consecutive repeating characters, the command errors out immediately.

    
    $ [FATAL] [DBT-12010] The Data Vault Owner password cannot contain any consecutive repeating characters.
    [FATAL] [DBT-12010] The Data Vault Manager password cannot contain any consecutive repeating characters.
    $

    If you use a password for the Data Vault owner or Data Vault manager such as WElcome123#4, the command errors out only at the end of the dbca operation.

    
    $ $ $ORACLE_HOME/bin/dbca -silent -configureDatabase -sourceDB CDB21 -dvConfiguration true -olsConfiguration true -dvUserName c##dvo -dvUserPassword WElcome123#4 -dvAccountManagerName c##dvacctmgr -dvAccountManagerPassword WElcome123#4
    
    Enter password for the TDE wallet:  password 
    
    [WARNING] [DBT-16002] The database will be restarted in order to configure the chosen options.
    Prepare for db operation
    22% complete
    Preparing to Configure Database
    24% complete
    29% complete
    38% complete
    40% complete
    44% complete
    Oracle Database Vault
    89% complete
    Completing Database Configuration
    [WARNING] ORA-28003: password verification for the specified password failed
    ORA-20000: password must contain 2 or more special characters
    
    [WARNING] ORA-28003: password verification for the specified password failed
    ORA-20000: password must contain 2 or more special characters
    
    [WARNING] ORA-01918: user 'c##dvo' does not exist
    ORA-06512: at "DVSYS.DBMS_MACUTL", line 34
    ORA-06512: at "DVSYS.DBMS_MACUTL", line 399
    ORA-06512: at "DVSYS.CONFIGURE_DV_INTERNAL", line 46
    ORA-06512: at "SYS.CONFIGURE_DV", line 173
    ORA-06512: at line 1
    
    [WARNING] ORA-01017: invalid username/password; logon denied
    
    100% complete
    The database configuration has completed successfully.
    Look at the log file "/u01/app/oracle/cfgtoollogs/dbca/CDB21_fra1xn/CDB21_fra1xn0.log" for further details.
    $
  • Connect to the CDB root as C##DVO to verify the status of Database Vault.

    
    $ sqlplus c##dvo
    
    Enter password: password
    
    SQL> SELECT * FROM DVSYS.DBA_DV_STATUS;
    
    NAME                STATUS
    ------------------- --------------
    DV_CONFIGURE_STATUS TRUE
    DV_ENABLE_STATUS    TRUE
    DV_APP_PROTECTION   NOT CONFIGURED
    
    SQL> SELECT * FROM V$OPTION WHERE PARAMETER = 'Oracle Database Vault';
    
    PARAMETER                 VALUE   CON_ID
    ------------------------- ------- ------
    Oracle Database Vault     TRUE         0
    
    SQL> EXIT
    $