13.6 Managing LOB Signatures

This section describes how to configure LOB signatures.

You can configure signature-based security for large object (LOB) locators using the LOB_SIGNATURE_ENABLE initialization parameter.

  • To enable signature, set the LOB_SIGNATURE_ENABLE initialization parameter at init.ora, or using the following ALTER SYSTEM command. Also ensure that you have set the compatibility to 12.2.0.2 or above.

    ALTER SYSTEM SET LOB_SIGNATURE_ENABLE = [TRUE|FALSE];

  • The following ALTER statement helps to encrypt, re-key, and delete the signature keys.

    ALTER DATABASE DICTIONARY [ENCRYPT|REKEY|DELETE] CREDENTIALS;

For more information, refer to the Oracle Database Security Guide.