1. Using Oracle GoldenGate for Oracle Database
  2. Additional Configuration Steps for Using Classic Capture
  3. Configuring Oracle TDE Data in Classic Capture Mode
  4. Requirements for Capturing TDE in Classic Capture Mode

Requirements for Capturing TDE in Classic Capture Mode

The following are requirements for Extract to support TDE capture:

  • To maintain high security standards, the Oracle GoldenGate Extract process should run as part of the oracle user (the user that runs the Oracle Database). That way, the keys are protected in memory by the same privileges as the oracle user.

  • The Extract process must run on the same machine as the database installation.

  • Even if using TDE with a Hardware Security Module, you must use a software wallet. Instructions are provided in Oracle Security Officer Tasks in the configuration steps for moving from an HSM-only to an HSM-plus-wallet configuration and configuring the sqlnet.ora file correctly.

  • Whenever the source database is upgraded, you must rekey the master key.

Parent topic: Configuring Oracle TDE Data in Classic Capture Mode