Set up TDE on Oracle

Transparent Data Encryption (TDE) enables encryption of sensitive data that is stored in tables and tablespaces. You do not need to modify N4 applications to handle the encrypted data. The database manages the data encryption and decryption.

TDE deters cyber-attackers from reading sensitive information in the database directly from the storage. TDE can encrypt individual data columns, entire tablespaces, database exports, and backups to control access to sensitive data.

These instructions for setting up TDE at the tablespace level were done on an Oracle 19c pluggable database on a developer's environment. These steps can be done starting from Oracle 12c on any configuration. Your system paths may be different. There are less steps for a standalone database.

Create the keystore (on page 1)

Set the master encryption key for keystore (on page 1)

Convert password-protected software keystore to auto-login (on page 1)

Convert non-encrypted tablespaces to encrypted (on page 1)