CRYPTOENGINE
Valid For
GLOBALS
Description
Use the CRYPTOENGINE
to select which cryptographic library the Oracle GoldenGate processes use to provide implementation of security primitives.
Syntax
CRYPTOENGINE (CLASSIC | FIPS140 | NATIVE)
-
CRYPTOENGINE
-
Selects which cryptographic library will the OGG processes use to provide implementation of security primitives.
-
CLASSIC
-
Uses the Oracle NNZ security framework without FIPS-140 enhancements.
-
FIPS140
-
Uses the Oracle NNA security framework, but enhanced with the FIPS-140-2 compliant version of the RSA MES shared libraries.
-
NATIVE
-
For the platforms where this is available, it will use a native library that makes more efficient use of the CPU cryptographic primitives, resulting in higher product throughput when using trail and TCP encryption. Currently, Intel's IPP library version 9.0 is used for Linux.x64 and Windows.x64. All other platforms fall back to
CLASSIC
behavior.
Example
To enable Oracle GoldenGate to use FIPS140-2 compliant encryption, use the following:
CRYPTOENGINE FIPS140
If this parameter is modifed, added or removed, (like any GLOBALS parameter) all Oracle GoldenGate processes must be restarted, including Manager.
Parent topic: Oracle GoldenGate Parameters