Database Encryption Keys
docs.oracle.com/en/cloud/paas/bm-and-vm-dbs-cloud/dbsoutzm/index.html
1 Users
0 Comments
7 Highlights
0 Notes
Tags
Top Highlights
To enable Data Guard on DB system databases that use customer-managed keys, the primary and standby databases must be in the same region.
customer-managed keys
Rotate your keys to maintain security compliance and, in cases of personnel changes, to disable access to a database. Switch from Oracle-managed keys to customer-managed keys on existing databases.
Customer-managed keys are stored and managed using the OCI Vault service. Encryption keys are administered at the database (CDB) level in the DB system
To ensure that the database uses the most current versions of the Vault encryption key, rotate the key from the Database Details page on the Console. Do not use the Vault service's Console pages to rotate your Database keys.
You can change encryption key management from Oracle-managed keys to customer-managed keys but you cannot change from customer-managed keys to Oracle-managed keys.
Customer-managed keys are supported in DB systems that use Oracle Database 19.13 or later.
Ready to highlight and find good content?
Glasp is a social web highlighter that people can highlight and organize quotes and thoughts from the web, and access other like-minded people’s learning.