CRYPTOENGINE

Valid For

GLOBALS

Description

Use the CRYPTOENGINE to select which cryptographic library the Oracle GoldenGate processes use to provide implementation of security primitives.

Syntax

CRYPTOENGINE (CLASSIC | FIPS140 | NATIVE)

CRYPTOENGINE: Selects which cryptographic library will the OGG processes use to provide implementation of security primitives.
CLASSIC: Uses the Oracle NNZ security framework without FIPS-140 enhancements.
FIPS140: Uses the Oracle NNA security framework, but enhanced with the FIPS-140-2 compliant version of the RSA MES shared libraries.
NATIVE: For the platforms where this is available, it will use a native library that makes more efficient use of the CPU cryptographic primitives, resulting in higher product throughput when using trail and TCP encryption. Currently, Intel's IPP library version 9.0 is used for Linux.x64 and Windows.x64. All other platforms fall back to CLASSIC behavior.

Example

To enable Oracle GoldenGate to use FIPS140-2 compliant encryption, use the following:

CRYPTOENGINE FIPS140

If this parameter is modifed, added or removed, (like any GLOBALS parameter) all Oracle GoldenGate processes must be restarted, including Manager.