Uploading Master Keys in Oracle Key Vault

You decide the method you want to use to upload the master keys to Oracle Key Vault.

There are some prerequisites when uploading master keys to Oracle Key Vault.

• Generate symmetric master keys of 256 bits and upload to Oracle Key Vault.

• Add custom attributes to the uploaded key:

  • x-OGG-KeyName key_name: This value must match the key name in the KMS parameter in Oracle GoldenGate and cannot be changed once replication has started.

  • x-OGG-KeyVersion version#: This value must be numeric.

• Do not upload keys with duplicate values of x-OGG-KeyName and x-OGG-KeyVersion. At the time of startup, restart, or rollover, Oracle GoldenGate processes retrieve the highest x-OGG-KeyVersion value

Topics:

• Register and Upload Master Keys in Oracle Key Vault
  Advanced Encryption Standard (AES) 256 master keys can be generated externally and uploaded to the Oracle Key Vault.
• Create Oracle GoldenGate Master Keys in Oracle Key Vault
  You can create an AES 256 master key for Oracle GoldenGate instead of registering it.