1. Cloud Control Security Guide
  2. Security Best Practices for Database Management in Enterprise Manager
  3. Oracle Enterprise Manager Support for TDE-Enabled Oracle Databases

Oracle Enterprise Manager Support for TDE-Enabled Oracle Databases

Transparent Data Encryption (TDE) enables you to encrypt sensitive data that you store in tables and tablespaces.

To configure TDE, you must perform a one-time setup before you create keystores and encrypt data. The Oracle Database retrieves the keystore by searching in a few locations. Most Oracle Enterprise Manager capabilities support TDE and currently only support the wallet location specified by the ENCRYPTION_WALLET_LOCATION parameter in the default $ORACLE_HOME/network/admin/sqlnet.ora file.

The following Oracle Enterprise Manager capabilities do not support TDE-enabled Oracle Databases:

  • emcli migrate_db verb
  • emcli migrate_noncdb_to_pdb verb
  • The UI migration method "Plug as a PDB"
  • Provisioning of CDB or TDE-enabled databases

    Note that provisioning of TDE-enabled PDBs is supported.

  • AWR warehouse
  • Configuration and compliance for Oracle Databases