Using TDE in a multitenant environment

In this recipe, you will perform different operations using Transparent Data Encryption in a multitenant environment.

Getting ready

It is assumed that:

• You have two container databases (the multitenant architecture), version 12.1.0.2 in the same host.
• You have at least one pluggable database in each container database
• You have sample schemes installed.

How to do it...

1. Enter the following text into your sqlnet.ora file located in a network/admin directory of your oracle home (for example, /u01/app/oracle/product/12.1.0/dbhome_1)

   ENCRYPTION_WALLET_LOCATION=
     (SOURCE=
       (METHOD=FILE)
            (METHOD_DATA=
           (DIRECTORY=/u01/app/oracle/admin/$ORACLE_SID/wallet)))
   

2. Change your environment to the first container database (for example, cdb1):

   [oracle@host01 ~]$ . oraenv
   ORACLE_SID = [oracle] ? cdb1
   

3. Connect as a user with the DBA role (for example, system), create a new user (for example, c##tdedba) to manage key management administration, and grant him...