After you configure and enable Oracle Database Vault, you can perform specialized tasks, such as adding languages or uninstalling and reinstalling Oracle Database Vault.
C.1 Adding Languages to Oracle Database Vault
By default, Oracle Database Vault loads only the English language tables.
You can add more languages by running the
DBMS_MACADM.ADD_NLS_DATA procedure for each new language that you want to add. You can add more than one language to Database Vault, to either a specific PDB or to the root for all PDBs.
- Log into the root or the PDB as a user who has been granted the
- Run the following procedure:
You can specify the
languagesetting using any case. For example:
EXEC DBMS_MACADM.ADD_NLS_DATA('french'); EXEC DBMS_MACADM.ADD_NLS_DATA('JAPANESE');
languagewith one of the following supported languages:
C.2 Uninstalling Oracle Database Vault
You can uninstall Oracle Database Vault from an Oracle Database installation, for PDBs (but not the root) and Oracle RAC installations.
The uninstallation process does not affect the initialization parameter settings, even those settings that were modified during the installation process, nor does it affect Oracle Label Security.
- Log into the PDB as user
SYSDBAadministrative privilege.For example:
sqlplus psmith@pdb_name Enter password: password
- Connect to the PDB as a user who has been granted the
CONNECT sec_admin_owen@pdb_name Enter password: password
- Run the following procedure to disable Oracle Database Vault:
- Close and reopen the PDB, or for Oracle RAC, restart the database.As a user who has the
ALTER PLUGGABLE DATABASEprivilege:
ALTER PLUGGABLE DATABASE pdb_name CLOSE IMMEDIATE; ALTER PLUGGABLE DATABASE pdb_name OPEN;
For Oracle RAC installations, shut down and then restart each database instance as follows:
$ srvctl stop database -db db_name $ srvctl start database -db db_name
- Run the
dvremov.sqlscript to remove Oracle Database Vault.
- If necessary, in SQL*Plus, as user
SYSDBAadministrative privilege, manually revoke the
EXECUTEprivilege on the
DBMS_RLSPL/SQL package from any users who have been granted the
DV_OWNERrole.When you configure Oracle Database Vault, one of the privileges that
DV_OWNERusers are granted is this privilege. However, when you remove Oracle Database Vault,
DV_OWNERusers still have this privilege. Optionally, you can revoke it.
REVOKE EXECUTE ON DBMS_RLS FROM dbv_owner_backup;
Afterward, you can double-check that Oracle Database Vault is truly deinstalled by logging in to SQL*Plus and entering the following statement:
SELECT * FROM V$OPTION WHERE PARAMETER = 'Oracle Database Vault';
If Oracle Database Vault is deinstalled, the following output appears:
PARAMETER VALUE ----------------------------- ----------------------- Oracle Database Vault FALSE