Using encryption with RMAN

Database backups also represent a very important area to be defended. Similarly with data pump dumps, backups made with RMAN can be encrypted and decrypted using encryption wallets. In this recipe we will enable RMAN encryption. We will also make a full backup followed by a restore. Next, we will save and delete the encryption wallet, and try a restore and recovery. We also emphasize the importance of saving these keys in a safe place.

Getting ready

All steps will be performed on nodeorcl1.

How to do it...

1. Create a new directory to be used as the destination for future backups with the oracle user as the owner:

   mkdir –p / backup/rman
   chown oracle:oinstall /backup/rman
   

2. Connect with RMAN and enable the encryption of backups for the database as follows:

   [oracle@nodeorcl1~] rman target / 
   
   RMAN> CONFIGURE ENCRYPTION FOR DATABASE ON;
   
   new RMAN configuration parameters:
   CONFIGURE ENCRYPTION FOR DATABASE ON;
   new RMAN configuration parameters are successfully stored...