oracle如何enable一个pdb的TDE

最新推荐文章于 2024-04-22 07:45:00 发布

wgz7747147820

最新推荐文章于 2024-04-22 07:45:00 发布

阅读量322

点赞数

分类专栏： orale 文章标签： oracle 数据库 sql

本文链接：https://blog.csdn.net/wgz7747147820/article/details/126094626

版权

orale 专栏收录该内容

204 篇文章 0 订阅

订阅专栏

默认我们clone pdb$seed创建的pdb，是没有enable tde的
所以创建tablespace的时候会收到下面的错误ORA-28361: master key not yet set

SQL> create pluggable database cdb1pdb88004  admin user pdbadmin identified by cdb1 roles=(connect) file_name_convert=none;

Pluggable database created.

SQL> alter pluggable database cdb1pdb88004 open read write instances=all;

Pluggable database altered.

SQL> alter session set container=cdb1pdb88004;

Session altered.

SQL> column wrl_parameter format a30
SQL> set linesize 180;
SQL> SELECT wrl_parameter, status, wallet_type FROM v$encryption_wallet;

WRL_PARAMETER                  STATUS                         WALLET_TYPE
------------------------------ ------------------------------ --------------------
                               OPEN_NO_MASTER_KEY             AUTOLOGIN

SQL> create bigfile tablespace cdb1pdb88002_001726_1;
create bigfile tablespace cdb1pdb88002_001726_1
*
ERROR at line 1:
ORA-28361: master key not yet set

在enable tde之后，创建表空间就不会报错了

SQL> administer key management set key force keystore identified by cdb1 with backup;

keystore altered.

SQL> SELECT wrl_parameter, status, wallet_type FROM v$encryption_wallet;

WRL_PARAMETER                  STATUS                         WALLET_TYPE
------------------------------ ------------------------------ --------------------
                               OPEN                           AUTOLOGIN

SQL> create bigfile tablespace cdb1pdb88002_001726_1;

Tablespace created.

下面是修改一个CDB的tde的密码

SQL> alter session set container=cdb$root;

Session altered.

SQL> administer key management alter keystore password force keystore identified by WelCome_123 set cdb1 with backup;

keystore altered.