Database encryption

Similar Questions

• Doubt about database encryption

  I'm trying to encrypt a database by using the signing key. I followed the .key file generation process date of signature of the key tool of bb and created a GWL. Key file and I tried to help in my project, but I m get Excelption, but it is the creation of database with success... Here is my code to encrypt the .db file:

  DatabaseSecurityOptions dbso = new DatabaseSecurityOptions (false);
  cardDetails = DatabaseFactory.create (uri, dbso);

  CodeSigningKey codeSigningKey = CodeSigningKey.get(CodeModuleManager.getModuleHandle( "SQLite" ), "GWL");
  
                  try
                  {
                      // Encrypt and protect the database.  If the database is already
                      // encrypted, the method will exit gracefully.
                      DatabaseFactory.encrypt(uri, new DatabaseSecurityOptions(codeSigningKey));
                  }
                  catch(DatabaseException dbe)
                  {
                      Dialog.inform("Encryption failed - " + dbe.toString());         
  
                  }
  

  CodeModuleManager.getModuleHandle( "SQLite" )
  

  the above line is return '0' and I m get IllegalArgumentexception on the threshold:

  CodeSigningKey codeSigningKey = CodeSigningKey.get(CodeModuleManager.getModuleHandle( "SQLite" ), "GWL");
  

  I solved the problem... It was with the name of the module... Thanks anyway...

• SQLite database encryption

  Hello!

  I'm trying to protect/encrypt an existing database with the app.

  They work well together but I do not understand the signing process described in https://developer.blackberry.com/java/documentation/sqlite_security_1981753_11.html

  I received and used 3 files sent by the authority of BB on the .cod.

  Do I have to create another application to encrypt/protect existing my DB?

  What is the "code signing key file?

  ... Well, I'm lost, I need help ^^
  Thank you

  B

  The link below should help.  This is for persistent objects instead of SQLite, but the concepts and the General steps for installing are the same.

  Persistent objects to protect against access by unauthorized applications

• DATABASE ENCRYPTION and Base64Encoder DOES NOT WORK WITH LIVELY CC!

  I'm trying to encrypt a database by using the as3corelib.  Libraries document Adobe Actionscript 3.0 points to the value of the third /classes to run the encrypted database. 

  
  

  > > > > > Animate them Adobe documentation > http://help.adobe.com/en_US/as3/dev/WS8AFC5E35-DC79-4082-9AD4-DE1A2B41DAAF.html.  (See " (" Finish the code example for production and using an encryption key" Section)

  > > > > > The GitHub downloads it point to > GitHub - mikechambers/as3corelib: year ActionScript 3 library that contains a number of classes and utilities for work...

  
  

  The EncryptionKeyGenerator.as class uses a SHA256.as class that points to import non-existent mx.utils in CC to animate.  ("import mx.utils.Base64Encoder;")   The mx.utils is a set of Flex 3 utility vs animate CC/Flash Professional

  * Here is the compile error:

  \FLASH TESTING\DATABASE ACCESS and PASSWORD\com\adobe\crypto\SHA256.as, line 120, column 16 1046: Type was not found or is not a constant of compilation: Base64Encoder.

  \FLASH TESTING\DATABASE ACCESS and PASSWORD\com\adobe\crypto\SHA256.as, line 120, column 36 1180: call to a method maybe not defined Base64Encoder.

  \FLASH TESTING\DATABASE ACCESS and PASSWORD\com\adobe\crypto\SHA256.as, line 37, column 17 1172: definition mx.utils:Base64Encoder could not be found.

  **

  Someone at - there a work around for this?

  OK I think I myself have fixed.

  If you have been searching high and low for an answer like I did then, you probably are upset right now because you think the following as I did.

  "Hey WTF? exclaim In addition to the $600 dollars I paid for this shit, I also bought the book of crap that they recommended that only tells me how to generate a quiz game!  Why did I have search everywhere on the internet, so come here to read the nonsense of this guy to get my answer? »

  Well boys and girls, to get your answer and if you're as crazy as me when I started to look for it then, I ask you to do something before using my answer.  Send a message or post a new message on this forum, ask ADOBE to improve their horribly awful documentation at ADOBE.  His tragic how such a good set of programs is hindered by a bad maintenance of documentation.

  This particular case is the worst example of many that I lived.  There are mislabeled subjects that are old and new mixed versions. It has exceeded links to files that have not been updated over the years.  There are references to third-party developers who are quite nice to help ADOBE, but if I have to pay ADOBE $600 / year for a product, then, I wouldn't go looking for forums, Google and third parties to OBSOLETE support to solve problems or just learn how to use the product.  I should at least get the * book worthless telling me that basic stuff on the use of the program as well as the quiz game stupid with my purchase of $600 / year.

  Anyway, off my soapbox, for help.

  THE NEEDLE IN THE INTERNET HAYSTACK > I had to find an old apache forum: Re: Base64Encoder mx.util can not be found Flash CS5

  THE CLASS YOU MUST > who directed me to a site Github for Flex.  flex-sdk/Base64Encoder.as to develop apache/flex-sdk · GitHub

  There you can download the class file just to get the compiler errors to stop.  But your problems are not if you have used the full font and omissions in the direction of encryption of database ADOBE gives us boys and girls.  Noooope... More problems for you.  Laughing out loud!! So if you are a beginner and still confused about what to do then I'm sorry.  Because now I'll deliberately not tell you how to get all of this race.  I really want to use your anger me to steer towards ADOBE.  I shouldn't be the one to tell you how to use a basic function in their product.  They should be. They make billions of dollars on people like you and me pay for a poorly documented product.  Its time for this to stop and no one but we will get there.

  If you're angry now then I agree and feel for you, but let them do, not me.

  Good luck!!!

• Cannot change database encryption ACS password

  Hi all. I am setting up a device Cisco 1113 with ACS version 4 from the console and when I get to the part "Please enter the password for encryption... "configuration it gives me the error on the title with any password given, even the passwords that meet at least three to the complexity requirements.

  Any ideas?

  To recover the device connect to console and put in the device and reboot recovery cd, which should give you options for recovery.

  The following link can help you with it.

  http://www.Cisco.com/univercd/CC/TD/doc/product/access/acs_soft/csacsapp/csapp41/igse41/admap.htm#wp1045906

  ~ Rohit

• Transparent data encryption and Performance

  We started a project to encrypt our SAP database using the transparent data encryption.  The project is currently mandated by corporate policy, so there is not much choice involved.  The indications are:

  The server O/s: HP - UX 11.31

  CPU: HP Itanium

  Oracle Version: 11.2.0.3 (64-bit)

  DB Dimensions: Approx. 5 TB

  Core SAP: 7.x

  Our leadership is very concerned about the impact on performance.  If you have encrypted your database, SAP or not, I am very interested in hearing if you the performance of your server data after encryption.  Good news, bad news, either.

  TIA,

  Mike

  Dear Mike,

  I can give you a few comments based on direct experience, since we recently migrated from an unencrypted Oracle (11g Enterprise Edition Release 11.2.0.3.0) server to a new server with encryption TDE (same version db).

  Our application is a warehouse of data with massive volumes of data (terabytes) and a few very large tables.

  After having migrated to the new server, which was much more powerful than the former, we were surprised to discover that the performance was much worse (about two times slower, on average, measured on our typical user queries).

  A study on the causes of degradation in performance shows that transparent data encryption are the source of the problem, causing a saturation of the individual CPU (do not look at the aggregate average load on the CPU, which is misleading).

  Basically, we have been deceived by the official Oracle documentation that estimates the impact on the performance of the transparent data encryption in the order of 5 to 8%. Further investigation showed that this low impact may be true of operations that involve a small amount of data. With the full picture of the analyses on large tables however, the truth is that the performance may be (5 - 10 times) slower order that without transparent encryption of data.

  If you want more information, take a look at this excellent article (in two parts):

  https://communities.Intel.com/community/datastack/blog/2012/03/23/real-world-database-encryption-performance-with-Intel-AES-NI-PT-1

  Best,

  Andrea

• Oracle 11g save the BC4J password in the database?

  In 10g, Oracle stores the password in the database encrypted in bc4j.xcfg.
  
  However, 11 g, it seems that Oracle is not saving the password in any file (I checked connections.xml and bc4j.xcfg). Oracle records db password in database system?
  
  I ask this question because we are going to deploy a Java ADF program on the production that I don't have access. I wonder if I need JDeveloper for access to the production environment to configure the credentials for the connection to BC4J in the database server.
  
  Edited by: huaichen on July 22, 2010 12:20

  Hi huaichen

  Documentation "15.3.2 Packaging credentials with the Application.
  at http://download.oracle.com/docs/cd/E14571_01/core.1111/e10043/devmancfg.htm#JISEC2949
  says "the credentials of the applicationare defined in a file that must be named cwallet.sso. ..."

  Thus, looking for documentation for "cwallet.sso" might help.

  success
  Jan

• Is it possible to change the LOCATION of the stored passwords?

  I would like Firefox to store my passwords, but I don't like anyone can open just the browser to find all my data. Yes, I have a master password, but I know that is hard for anyone to go into the data files and decrypt the password files.

  What I would do:
  1. move the files key3db and logins.json on a flash drive. Or the whole if absolutely necessary profile
  2. change where Firefox pulls the passwords of my flash drive
  3. at the end of the account it will be able to remember my password if my drive is connected

  For a quick Q + A:
  1. I need to move just two files, mentioned above, or the entire profile folder?
  2. which file running Firefox at the current location of password, in the AppData folder? CAN I / should I change that?
  3. is it possible?

  I am currently using Firefox 37.0.2, running on Windows 7.
  I'm not well versed technical jargon, but I am reasonably competent.
  Please let me know if you need more information.

  It is possible to move your passwords, but it is difficult (and note, this is only a problem if someone has access to your computer, in which case they would be more likely to use a keylogger and gather all your keystrokes in this way, you'll have more great concern).

  If you are very worried about it, then I suggest using something like lastpass which stores your passwords in a database encrypted in the cloud and only pulls them down when you open a session.

• Safeguards user-generated

  My app (ReelPortal) chat/video conferencing software, what is all the content generated by the user (video, audio, text).  I'm stuck on the page of guarantees, trying to submit my application.  I do not know what guarantees is BlackBerry you are looking for.  What I have to put in a warning screen and wait for the user to read, and then click OK (like a typical GPS warning)?  I don't have to do all the legal stuff for the Android version, so it's new to me.  Thank you.

  Probably just descibe how you manage the content of the user.  Things like:

  • The user files are stored in the sotrage application directory
  • The user can delete any or all files generated at any time
  • Sending video to another customer ended XYZ and the user can accept or deny access.
  • Contact details are kept in a database encrypted in the XYZ folder.
  • Registration is sent to a remote server where the email address is encrypted.
  • The user can clear the record at any time

  Things like that.  If BB wants more clarification, I'm sure they will contact you.

• Cannot generate the OPA Web App for deployment

  Hi all

  I get a strange error: with the building from Nov15 when you try to build the web application for deployment:

  Error creating web applications.

  Impossible to compile Web applications for the existing database: encryption key error test

  The full changelog is below.

  2016-02-05 15:38:34, ERROR 556 (com.oracle.determinations.hub.exec.TestEncodingKeyCommand) - error test encryption key

  com.oracle.determinations.hub.exception.HubStorageException: error getting properties set

  at com.oracle.determinations.hub.storage.jdbc.oracle.ConfigPropertyDAOImpl.getPropertySet(ConfigPropertyDAOImpl.java:226)

  at com.oracle.determinations.hub.storage.jdbc.oracle.ConfigPropertyDAOImpl.getProperty(ConfigPropertyDAOImpl.java:236)

  at com.oracle.determinations.hub.exec.TestEncodingKeyCommand.exec(TestEncodingKeyCommand.java:105)

  at com.oracle.determinations.hub.exec.BuildWebappsCommand.exec(BuildWebappsCommand.java:235)

  at com.oracle.determinations.hub.exec.HubExecCmdLineCustomer.main(HubExecCmdLineCustomer.java:183)

  Caused by: java.sql.SQLSyntaxErrorException: ORA-00942: table or view does not exist

  at oracle.jdbc.driver.T4CTTIoer.processError(T4CTTIoer.java:450)

  at oracle.jdbc.driver.T4CTTIoer.processError(T4CTTIoer.java:399)

  at oracle.jdbc.driver.T4C8Oall.processError(T4C8Oall.java:1017)

  at oracle.jdbc.driver.T4CTTIfun.receive(T4CTTIfun.java:655)

  at oracle.jdbc.driver.T4CTTIfun.doRPC(T4CTTIfun.java:249)

  at oracle.jdbc.driver.T4C8Oall.doOALL(T4C8Oall.java:566)

  at oracle.jdbc.driver.T4CPreparedStatement.doOall8(T4CPreparedStatement.java:215)

  at oracle.jdbc.driver.T4CPreparedStatement.doOall8(T4CPreparedStatement.java:58)

  at oracle.jdbc.driver.T4CPreparedStatement.executeForDescribe(T4CPreparedStatement.java:776)

  at oracle.jdbc.driver.OracleStatement.executeMaybeDescribe(OracleStatement.java:897)

  at oracle.jdbc.driver.OracleStatement.doExecuteWithTimeout(OracleStatement.java:1034)

  at oracle.jdbc.driver.OraclePreparedStatement.executeInternal(OraclePreparedStatement.java:3820)

  at oracle.jdbc.driver.OraclePreparedStatement.executeQuery(OraclePreparedStatement.java:3867)

  at oracle.jdbc.driver.OraclePreparedStatementWrapper.executeQuery(OraclePreparedStatementWrapper.java:1502)

  at com.oracle.determinations.hub.storage.jdbc.oracle.ConfigPropertyDAOImpl.getPropertySet(ConfigPropertyDAOImpl.java:198)

  ... 4 more

  2016-02-05 15:38:34, 630 INFO (com.oracle.determinations.hub.exec.BuildWebappsCommand) - error of creating web applications.

  2016-02-05 15:38:34, 634 INFO (com.oracle.determinations.hub.exec.BuildWebappsCommand) - Impossible to compile Web applications for the existing database: encryption key error test

  I tried with my own encryption key and also generate one, but the same error is reproduced.

  Anyone having success with this?

  Rebuild the base solved this. Must have not totally previously executed SQL.

• "backup recovery area" ignore all save them

  Hello everyone.

  I use 11.2.0.4 on OL 6.5 EE.

  I use suggested the Oracle backup strategy above I use "backup recovery area" at the end of the script and I spotted that he doesn't know to save them all. Please notify.

  Hello everyone and thanks for your help.

  I studied the issue and has managed to solve.

  First I mw show you the parameters persistent rman:

  Database with db_unique_name MYDB RMAN configuration parameters are:

  CONFIGURE RETENTION POLICY TO RECOVERY OF 7-DAY WINDOW;

  CONFIGURE BACKUP OPTIMIZATION

  SET UP DEFAULT DISK DEVICE TYPE;

  CONFIGURE CONTROLFILE AUTOBACKUP ON;

  CONFIGURE CONTROLFILE AUTOBACKUP FORMAT for DEVICE TYPE DISK to "+ fra/mydb/controlfile/%F";

  SET UP THE DEVICE TYPE DISK PARALLELISM 1 BACKUP BACKUPSET TYPE;

  CONFIGURE BACKUP OF DATA TO DISK FILE TYPE DEVICE TO 1;

  CONFIGURE BACKUP ARCHIVELOG FOR DEVICE TYPE DISK TO 1;

  CONFIGURE MAXSETSIZE TO UNLIMITED;

  CONFIGURE THE DATABASE ENCRYPTION

  CONFIGURE THE ENCRYPTION ALGORITHM "AES128";

  CONFIGURE COMPRESSION ALGORITHM 'BASIC' AND 'DEFAULT' LIBERATION OPTIMIZE FOR TRUE LOAD;

  CONFIGURE THE NONE ARCHIVELOG DELETION POLICY;

  CONFIGURE SNAPSHOT CONTROLFILE NAME TO ' / oracle/product/11.2.0/dbhome_1/dbs/snapcf_mydb.f';

  Now I use another script to take my backup and it works fine

  RMAN > run {}

  2 > crosscheck backup;

  3 > overlapping copy;

  4 > overlap archivelog all;

  5 > DELETE noprompt EXPIRED ARCHIVELOG ALL;

  6 > delete noprompt ARCHIVELOG until TIME ' SYSDATE-8';

  7 > DELETE noprompt EXPIRED BACKUP;

  8 > delete noprompt obsolete;

  9 > GET COPY OF DATABASE WITH TAG 'PAYMENT' until ' SYSDATE-8';

  10 > LEVEL 1 INCREMENTAL BACKUP TO RECOVER WITH THE TAG 'MYDB' COPY DATABASE;

  {11 >}

  12 > run {}

  13 > GAME CONTROLFILE AUTOBACKUP FORMAT for DEVICE TYPE DISK TO ' / storage/flash_recovery_area/MYDB/controlfile/%F';

  14 > save destination recovery area "/ storage/flash_recovery_area";

  15 > BACKUP VALIDATE CHECK DATABASE LOGIC ARCHIVELOG ALL;

  {16 >}

• Backups created by the double

  Oracle 10.2.0.4

  RMAN 10.2.0.4

  RMAN > show all.

  RMAN configuration parameters are:

  CONFIGURE RETENTION POLICY TO RECOVERY OF 28-DAY WINDOW;

  CONFIGURE BACKUP OPTIMIZATION

  SET UP DEFAULT DISK DEVICE TYPE;

  CONFIGURE CONTROLFILE AUTOBACKUP ON;

  CONFIGURE CONTROLFILE AUTOBACKUP FORMAT for DEVICE TYPE DISK TO ' / oracle_backups/oltp/limsp/controlfile/%F';

  SET UP THE DEVICE TYPE DISK PARALLELISM 3 TYPE OF BACKUP BACKUPSET.

  CONFIGURE BACKUP OF DATA TO DISK FILE TYPE DEVICE TO 1;

  CONFIGURE BACKUP ARCHIVELOG FOR DEVICE TYPE DISK TO 3;

  CONFIGURE CHANNEL 1 DEVICE TYPE DISK FORMAT of MAXOPENFILES 1 ' / oracle_backups/oltp/limsp/backupset/%U';

  CONFIGURE MAXSETSIZE TO UNLIMITED;

  CONFIGURE THE DATABASE ENCRYPTION

  CONFIGURE THE ENCRYPTION ALGORITHM "AES128";

  CONFIGURE THE NONE ARCHIVELOG DELETION POLICY;

  CONFIGURE SNAPSHOT CONTROLFILE NAME TO ' / oracle_backups/oltp/limsp/controlfile/snapcf_limsp.f';

  We used to make our backups RMAN with Netbackup and write to SBT_TAPE.  We have recently changed and writing to a device of dedupping Data Domain that is mounted over nfs.

  There are 15 databases, 14 behave appropriately.  However, one of the databases written in the nfs mount of /oracle_backups as it should.  I see backupsets that look like:

  -rw - r - 1 oracle dba 40960 22 may 00:01 4cp8sleo_1_1

  -rw - r - 1 oracle dba 49152 22 may 00:01 4fp8sler_1_1

  And the archivelogs that look like:

  -rw - r - 1 oracle dba 258963968 22 may 00:05 limsp_0_arc_s29850_p1_t848188983_c2

  -rw - r - 1 oracle dba 258963968 22 may 00:05 limsp_0_arc_s29850_p1_t848188983_c3

  Today, we noticed that there are also backupsets to another point mounting which is our FRA and sorta resemble him what an archivelog directory would look like in ASM:

  Oracle@bkvlnxdb01p LIMSP] $ ls backupset.

  drwxr-x - 2 dba oracle 4096 22 may 00:01 2014_05_22.

  [oracle@bkvlnxdb01p LIMSP] $ ls 2014_05_22/backupset

  Total 148088

  drwxr-x - 2 dba oracle 4096 22 may 00:01. /

  drwxr-xr-x 22 oracle dba 4096 22 may 00:01... /

  -rw - r - 1 oracle dba 163840 22 may 00:01 o1_mf_nnnd1_LIMSPINCR05222014000_9qtxnrt2_.bkp

  -rw - r - 1 oracle dba 23896064 22 may 00:01 o1_mf_nnnd1_LIMSPINCR05222014000_9qtxnrvy_.bkp

  -rw - r - 1 oracle dba 73728 22 may 00:01 o1_mf_nnnd1_LIMSPINCR05222014000_9qtxnvwg_.bkp

  -rw - r - 1 oracle dba 7847936 22 may 00:01 o1_mf_nnnd1_LIMSPINCR05222014000_9qtxnvxk_.bkp

  -rw - r - 1 oracle dba 4481024 22 may 00:01 o1_mf_nnnd1_LIMSPINCR05222014000_9qtxnx8q_.bkp

  -rw - r - 1 oracle dba 40960 22 may 00:01 o1_mf_nnnd1_LIMSPINCR05222014000_9qtxo09l_.bkp

  -rw - r - 1 oracle dba 38379520 22 may 00:01 o1_mf_nnnd1_LIMSPINCR05222014000_9qtxo0f5_.bkp

  -rw - r - 1 oracle dba 76480512 22 may 00:01 o1_mf_nnnd1_LIMSPINCR05222014000_9qtxo1hv_.bkp

  -rw - r - 1 oracle dba 40960 22 may 00:01 o1_mf_nnnd1_LIMSPINCR05222014000_9qtxo4qs_.bkp

  -rw - r - 1 oracle dba 40960 22 may 00:01 o1_mf_nnnd1_LIMSPINCR05222014000_9qtxo4tq_.bkp

  You can see from the RMAN catalog, that nothing does refer to/orafra1/rman in its configuration.

  The backup statement is (lvl is 0 or 1 and the bkptag seems lke the LIMSPINCR05222015 = 4 stamp above.)

  level incremental backup = ${lvl} filesperset = 1 tag data = ${BKPTAG};

  For the life of me I can't understand what is the cause of these backups go to/orafra1/rman as well as /oracle_backups.

  There is another database on this server is configured in the same and it doesn't do this.

  These parameters init.ora point for neighborhood newspapers and archive quick recovery:

  db_recovery_file_dest = ' / orafra1/rman.

  Log_archive_dest_1 =' location = / orafra1/rman/LIMSP/arch

  (but this is the case for the database which behaves as well).

  Any thoughts or ideas are welcome.

  AHA!

  It is a standalone with rman configuration channel 1 configuration.

  CONFIGURE CHANNEL 1 DEVICE TYPE DISK FORMAT of MAXOPENFILES 1 ' / oracle_backups/oltp/limsp/backupset/%U';

  But I also had:

  SET UP THE DEVICE TYPE DISK PARALLELISM 3 TYPE OF BACKUP BACKUPSET.

  Is not yet jive in my head, but when I put 1 PARALLELISM instead of 3, he ceased to occur.

  Now I have to find a way to get rid of things in the FRA as they are necessary for my window of recovery.  And also remember that when it's time for them obsolete I can get there.    Oooyyy...

• ORA-27211 using aws s3 for sbt

  Oracle 11.2.0.2 themselves and 10.2.0.5 ee times on linux rhel 5.5

  using the following documentation to configure the start-up

  Try to use amazon s3 for our Oracle backups and I can make it work if I use allocate channel command in my execution block, but I can't work with the command configure channel to store the parms in the rman repo.

  RMAN > show all.

  using the control file of the target instead of recovery catalog database

  Database with db_unique_name CAFD RMAN configuration parameters are:

  CONFIGURE RETENTION POLICY TO RECOVERY OF 14 DAYS WINDOW;

  CONFIGURE BACKUP OPTIMIZATION

  CONFIGURE THE TYPE OF DEFAULT DEVICE TO 'SBT_TAPE ';

  CONFIGURE CONTROLFILE AUTOBACKUP ON;

  CONFIGURE CONTROLFILE AUTOBACKUP FORMAT FOR DEVICE TYPE SBT_TAPE TO "%F" # by default

  SET UP THE DEVICE TYPE 'SBT_TAPE' PARALLELISM 1 BACKUP BACKUPSET TYPE;

  CONFIGURE BACKUP COPIES OF DATA FILE FOR DEVICE TYPE SBT_TAPE TO 1; # by default

  CONFIGURE BACKUP ARCHIVELOG FOR DEVICE TYPE SBT_TAPE TO 1; # by default

  CONFIGURE CHANNEL DEVICE TYPE 'SBT_TAPE' PARMS 'SBT_LIBRARY=/usr/local/oracle/product/11.2.0/lib/libosbws12.so ENV=(OSB_WS_PFILE=/usr/local/oracle/product/11.2.0/dbs/osbwsCAFD.ora);

  CONFIGURE MAXSETSIZE TO UNLIMITED; # by default

  CONFIGURE THE DATABASE ENCRYPTION

  CONFIGURE THE ENCRYPTION ALGORITHM "AES128"; # by default

  CONFIGURE COMPRESSION ALGORITHM 'BASIC' AND 'DEFAULT' LIBERATION OPTIMIZE FOR TRUE LOAD; # by default

  CONFIGURE THE NONE ARCHIVELOG DELETION POLICY; # by default

  CONFIGURE SNAPSHOT CONTROLFILE NAME TO ' / usr/local/oracle/product/11.2.0/dbs/snapcf_CAFD.f'; # by default

  RMAN > run {}

  2 > allocate channel dev1 type sbt;

  3 > incremental backup of level 0 database item size 1 g tag = "level_0";

  {4 >}

  RMAN-00571: ===========================================================

  RMAN-00569: = ERROR MESSAGE STACK FOLLOWS =.

  RMAN-00571: ===========================================================

  RMAN-03009: failure to allocate channel dev1 order to 14/08/2013 10:02:02

  ORA-19554: error device allocation, type of device: SBT_TAPE device name:

  ORA-27211: unable to load the media management library

  Additional information: 2

  but the following work.

  RMAN > run {}

  2 > allocate channel dev1 type sbt parms='SBT_LIBRARY=/usr/local/oracle/product/11.2.0/lib/libosbws12.so, SBT_PARMS=(OSB_WS_PFILE=/usr/local/oracle/product/11.2.0/dbs/osbwsCAFD.ora)';

  3 > incremental backup of level 0 database item size 1 g tag = "level_0";

  {4 >}

  Hello

  Seems that you have configured all things, so you may have to use

  Run {}

  incremental backup of level 0 database item size 1 g tag = "level_0";

  }

  How ever, if you want the parallelism, you can configure as

  SET UP THE DEVICE TYPE 'SBT_TAPE' PARALLELISM 4;

  HTH

• RMAN: Backups not exipring after the window of redundancy.

  Hello

  I meet backup sbt_tape and the use of the slot block:

  run{
  ALLOCATE CHANNEL C1 TYPE SBT_TAPE PARMS='SBT_LIBRARY=/u01/app/oracle/product/11.2.0.3/db1/lib/libddobk.so,
  ENV=(STORAGE_UNIT=CH2-nwtdb-Oracle, BACKUP_HOST=172.28.136.50, ORACLE_HOME=/u01/app/oracle/product/11.2.0.3/db1)';
  ALLOCATE CHANNEL C2 TYPE SBT_TAPE PARMS='SBT_LIBRARY=/u01/app/oracle/product/11.2.0.3/db1/lib/libddobk.so,
  ENV=(STORAGE_UNIT=CH2-nwtdb-Oracle, BACKUP_HOST=172.28.136.50, ORACLE_HOME=/u01/app/oracle/product/11.2.0.3/db1)';
  ALLOCATE CHANNEL C3 TYPE SBT_TAPE PARMS='SBT_LIBRARY=/u01/app/oracle/product/11.2.0.3/db1/lib/libddobk.so,
  ENV=(STORAGE_UNIT=CH2-nwtdb-Oracle, BACKUP_HOST=172.28.136.50, ORACLE_HOME=/u01/app/oracle/product/11.2.0.3/db1)';
  ALLOCATE CHANNEL C4 TYPE SBT_TAPE PARMS='SBT_LIBRARY=/u01/app/oracle/product/11.2.0.3/db1/lib/libddobk.so,
  ENV=(STORAGE_UNIT=CH2-nwtdb-Oracle, BACKUP_HOST=172.28.136.50, ORACLE_HOME=/u01/app/oracle/product/11.2.0.3/db1)';
  backup incremental level 0 database filesperset=1 format '%d_L0_DF%f_%T_%u.dbf' tag 'DB_L0_DF_#_DT_UNQNO';
  backup current controlfile format '%d_L0_CF_%T_%u.ctl' tag 'DB_L0_CF_DT_UNQNO';
  backup incremental level 0 archivelog all filesperset=1 format '%d_L0_AL_%h_%e_%T_%u.arc' tag 'DB_L0_ARC#_DT_UNQNO';
  crosscheck backup of database;
  crosscheck backup of archivelog all;
  delete noprompt expired backup of database;
  delete noprompt expired backup of archivelog all;
  }
  

  My backups work perfectly, but for some reason, my backups expire even though my redudancy is set to 7 days.

  In my dest backup, I have backups as old as March 13, which should have been expired since a long time back.

  Any ideas what could be wrong?

  RMAN> show all;
  using target database control file instead of recovery catalog
  RMAN configuration parameters for database with db_unique_name IWTPR are:
  CONFIGURE RETENTION POLICY TO RECOVERY WINDOW OF 7 DAYS;
  CONFIGURE BACKUP OPTIMIZATION ON;
  CONFIGURE DEFAULT DEVICE TYPE TO 'SBT_TAPE';
  CONFIGURE CONTROLFILE AUTOBACKUP OFF;
  CONFIGURE CONTROLFILE AUTOBACKUP FORMAT FOR DEVICE TYPE DISK TO '%F'; # default
  CONFIGURE CONTROLFILE AUTOBACKUP FORMAT FOR DEVICE TYPE SBT_TAPE TO '%F'; # default
  CONFIGURE DEVICE TYPE DISK PARALLELISM 4 BACKUP TYPE TO COMPRESSED BACKUPSET;
  CONFIGURE DEVICE TYPE 'SBT_TAPE' PARALLELISM 4 BACKUP TYPE TO BACKUPSET;
  CONFIGURE DATAFILE BACKUP COPIES FOR DEVICE TYPE DISK TO 1;
  CONFIGURE DATAFILE BACKUP COPIES FOR DEVICE TYPE 'SBT_TAPE' TO 1;
  CONFIGURE ARCHIVELOG BACKUP COPIES FOR DEVICE TYPE DISK TO 1;
  CONFIGURE ARCHIVELOG BACKUP COPIES FOR DEVICE TYPE 'SBT_TAPE' TO 1;
  CONFIGURE CHANNEL DEVICE TYPE 'SBT_TAPE' PARMS  'SBT_LIBRARY=/u01/app/oracle/product/11.2.0.3/db1/lib/libddobk.so, ENV=(STORAGE_UNIT=CH2-nwtdb-Oracle, BACKUP_HOST=172.28.136.50, ORACLE_HOME=/u01/app/oracle/product/11.2.0.3/db1)';
  CONFIGURE MAXSETSIZE TO UNLIMITED;
  CONFIGURE ENCRYPTION FOR DATABASE OFF;
  CONFIGURE ENCRYPTION ALGORITHM 'AES128';
  CONFIGURE COMPRESSION ALGORITHM 'BASIC' AS OF RELEASE 'DEFAULT' OPTIMIZE FOR LOAD TRUE;
  CONFIGURE ARCHIVELOG DELETION POLICY TO NONE;
  CONFIGURE SNAPSHOT CONTROLFILE NAME TO '+IWTPRFRA/IWTPR/snapcf_IWTPR.f';
  CONFIGURE SNAPSHOT CONTROLFILE NAME TO '+IWTPRFRA/iwtpr/snapcf_iwtpr.f';
  

  Thanks in advance,

  aBBy.

  Details of env: RAC 4 node cluster running 11.2.0.3.4 GI/RDBMS on RHEL 5. 6

  AB007 wrote:

  Hello

  I meet backup sbt_tape and the use of the slot block:

  1. Run {}
  2. ALLOCATE CHANNELS C1 TYPE SBT_TAPE PARMS='SBT_LIBRARY=/u01/app/oracle/product/11.2.0.3/db1/lib/libddobk.so.
  3. ENV = (STORAGE_UNIT = CH2-nwtdb-Oracle, BACKUP_HOST = 172.28.136.50, ORACLE_HOME=/u01/app/oracle/product/11.2.0.3/db1)';
  4. ALLOCATE channel C2 TYPE SBT_TAPE PARMS='SBT_LIBRARY=/u01/app/oracle/product/11.2.0.3/db1/lib/libddobk.so,
  5. ENV = (STORAGE_UNIT = CH2-nwtdb-Oracle, BACKUP_HOST = 172.28.136.50, ORACLE_HOME=/u01/app/oracle/product/11.2.0.3/db1)';
  6. ALLOCATE CHANNELS C3 TYPE SBT_TAPE PARMS='SBT_LIBRARY=/u01/app/oracle/product/11.2.0.3/db1/lib/libddobk.so.
  7. ENV = (STORAGE_UNIT = CH2-nwtdb-Oracle, BACKUP_HOST = 172.28.136.50, ORACLE_HOME=/u01/app/oracle/product/11.2.0.3/db1)';
  8. ALLOCATE CHANNELS C4 TYPE SBT_TAPE PARMS='SBT_LIBRARY=/u01/app/oracle/product/11.2.0.3/db1/lib/libddobk.so.
  9. ENV = (STORAGE_UNIT = CH2-nwtdb-Oracle, BACKUP_HOST = 172.28.136.50, ORACLE_HOME=/u01/app/oracle/product/11.2.0.3/db1)';
  10. filesperset database backup incremental level 0 = 1 format '% d_L0_DF%f_%T_%u.dbf' tag "DB_L0_DF_ #_DT_UNQNO";
  11. backup current controlfile '% d_L0_CF_%T_%u.ctl' format tag "DB_L0_CF_DT_UNQNO".
  12. incremental backup of level 0 archivelog all filesperset = 1 format '% d_L0_AL_%h_%e_%T_%u.arc' tag "DB_L0_ARC #_DT_UNQNO";
  13. cross-checking of backup of database;
  14. backup duplication of the archivelog all;
  15. delete noprompt expired backup of database;
  16. delete expired backup noprompt to archivelog all;
  17. }

  My backups work perfectly, but for some reason, my backups expire even though my redudancy is set to 7 days.

  In my dest backup, I have backups as old as March 13, which should have been expired since a long time back.

  Any ideas what could be wrong?

  1. RMAN > show all.
  2. using the control file of the target instead of recovery catalog database
  3. RMAN settings for database with db_unique_name IWTPR are:
  4. CONFIGURE RETENTION POLICY TO RECOVERY OF 7-DAY WINDOW;
  5. CONFIGURE BACKUP OPTIMIZATION
  6. CONFIGURE THE TYPE OF DEFAULT DEVICE TO 'SBT_TAPE ';
  7. CONFIGURE CONTROLFILE AUTOBACKUP
  8. CONFIGURE CONTROLFILE AUTOBACKUP FORMAT FOR DEVICE TYPE DISK TO "%F" # by default
  9. CONFIGURE CONTROLFILE AUTOBACKUP FORMAT FOR DEVICE TYPE SBT_TAPE TO "%F" # by default
  10. SET UP THE DEVICE TYPE DISK PARALLELISM 4 TYPE OF BACKUP TO COMPRESSED BACKUPSET;
  11. SET UP THE DEVICE TYPE 'SBT_TAPE' PARALLELISM 4 TYPE OF BACKUP BACKUPSET.
  12. CONFIGURE BACKUP OF DATA TO DISK FILE TYPE DEVICE TO 1;
  13. CONFIGURE BACKUP COPIES OF DATA FILE FOR THE 'SBT_TAPE' UNIT 1;
  14. CONFIGURE BACKUP ARCHIVELOG FOR DEVICE TYPE DISK TO 1;
  15. CONFIGURE BACKUP ARCHIVELOG FOR DEVICE TYPE 'SBT_TAPE' 1;
  16. CONFIGURE CHANNEL DEVICE TYPE 'SBT_TAPE' PARMS 'SBT_LIBRARY=/u01/app/oracle/product/11.2.0.3/db1/lib/libddobk.so, ENV is (STORAGE_UNIT = CH2-nwtdb-Oracle, BACKUP_HOST = 172.28.136.50, ORACLE_HOME=/u01/app/oracle/product/11.2.0.3/db1)';
  17. CONFIGURE MAXSETSIZE TO UNLIMITED;
  18. CONFIGURE THE DATABASE ENCRYPTION
  19. CONFIGURE THE ENCRYPTION ALGORITHM "AES128";
  20. CONFIGURE COMPRESSION ALGORITHM 'BASIC' AND 'DEFAULT' LIBERATION OPTIMIZE FOR TRUE LOAD;
  21. CONFIGURE THE NONE ARCHIVELOG DELETION POLICY;
  22. CONFIGURE the SNAPSHOT CONTROLFILE NAME to "+ IWTPRFRA/IWTPR/snapcf_IWTPR.f";
  23. CONFIGURE the SNAPSHOT CONTROLFILE NAME to "+ IWTPRFRA/iwtpr/snapcf_iwtpr.f";

  Thanks in advance,

  aBBy.

  Details of env: RAC 4 node cluster running 11.2.0.3.4 GI/RDBMS on RHEL 5. 6

  You are confusing "expired" with "obsolete".

  When a backupset is created, an account of which is placed in the control file.

  If you backup ' overlap ', rman checks these records against reaility.  If no backup turns out have disappeared, his file is marked as "expired".  That follow-up with a 'delete expired backup', and missing backups (expired) records will be deleted from the repository.

  What you want is "delete obsolete.  Which will remove any backup that is no longer necessary to enforce the retention period.

  BTW, "redundancy" and "x days" are mutually exclusive.

• DBMS_OBFUSCATION_TOOLKIT

  Hello again,
  
  It is a all possible ways to use the device of the customer, in the Oracle DBMS_OBFUSCATION_TOOLKIT package?
  
  I thank you,
  
  Kind regards.

  Hi Peter,.

  It is not possible to use the PLSQL ORacle DB Lite package.

  Oracle Lite provides an API in the database to encrypt a particular column, but you can encrypt the full DB olite.

  Plug-in, you can customized to the Oracle Lite database encryption module by adding the EXTERNAL_ENCRYPTION_DLL parameter to the POLITE. INI configuration file. Use this option if you do not want to use the default AES encryption for the database client.

  You need to implement your cryptographic module in a DLL for the Windows environment or in a shared object (.) SO) for the UNIX environment.

  For example, if you created the module of encryption as a DLL called my_enc.dll, which is located in the C:\my_dir directory, then you would add this module as the default encryption module in the POLITE. INI configuration file, as follows:

  [All databases]
  EXTERNAL_ENCRYPTION_DLL=C:\my_dir\my_enc.dll

  For more information, see Section 14.3, "Providing your own encryption Module for the Oracle Lite Database Client".

  Kind regards.
  Marc