Part I Using Transparent Data Encryption

Part I describes how to use Transparent Data Encryption.

• Introduction to Transparent Data Encryption
  Transparent data encryption enables you to encrypt database data files or selected columns of data. This helps you protect sensitive data contained in your database, such as credit card numbers or Social Security numbers.
• Configuring United Mode
  United mode enables you to create a common keystore for the CDB and the PDBs for which the keystore is in united mode.
• Configuring Isolated Mode
  Isolated mode enables you to create a keystore for each pluggable database (PDB).
• Encrypting Columns in Tables
  You can use Transparent Data Encryption to encrypt individual columns in database tables.
• Encryption Conversions for Tablespaces and Databases
  You can perform encryption operations on both offline and online tablespaces and databases.
• Managing the Keystore and the Master Encryption Key
  You can modify settings for the keystore and TDE master encryption key, and store Oracle Database and store Oracle GoldenGate secrets in a keystore.
• Administering United Mode
  Administering united mode means managing the keystores, master encryption keys, and general Transparent Database Encryption (TDE) functionality.
• Administering Isolated Mode
  Administering isolated mode means managing the keystores, master encryption keys, and general Transparent Database Encryption (TDE) functionality.
• Using Transparent Data Encryption with Other Oracle Features
  You can use Oracle Data Encryption with other Oracle features, such as Oracle Data Guard or Oracle Real Application Clusters.
• General Considerations of Using Transparent Data Encryption
  When you use Transparent Data Encryption, you should consider factors such as security, performance, and storage overheads.
• Frequently Asked Questions About Transparent Data Encryption
  Users frequently have questions about transparency and performance issues with Transparent Data Encryption.
• Using sqlnet.ora to Configure Transparent Data Encryption Keystores
  Configuring TDE with sqlnet.ora parameters has been deprecated, but is still possible depending on your database configuration.