Transparent data encryption are supported with Oracle Advanced Replication?

Similar Questions

• Transparent data encryption and Performance

  We started a project to encrypt our SAP database using the transparent data encryption.  The project is currently mandated by corporate policy, so there is not much choice involved.  The indications are:

  The server O/s: HP - UX 11.31

  CPU: HP Itanium

  Oracle Version: 11.2.0.3 (64-bit)

  DB Dimensions: Approx. 5 TB

  Core SAP: 7.x

  Our leadership is very concerned about the impact on performance.  If you have encrypted your database, SAP or not, I am very interested in hearing if you the performance of your server data after encryption.  Good news, bad news, either.

  TIA,

  Mike

  Dear Mike,

  I can give you a few comments based on direct experience, since we recently migrated from an unencrypted Oracle (11g Enterprise Edition Release 11.2.0.3.0) server to a new server with encryption TDE (same version db).

  Our application is a warehouse of data with massive volumes of data (terabytes) and a few very large tables.

  After having migrated to the new server, which was much more powerful than the former, we were surprised to discover that the performance was much worse (about two times slower, on average, measured on our typical user queries).

  A study on the causes of degradation in performance shows that transparent data encryption are the source of the problem, causing a saturation of the individual CPU (do not look at the aggregate average load on the CPU, which is misleading).

  Basically, we have been deceived by the official Oracle documentation that estimates the impact on the performance of the transparent data encryption in the order of 5 to 8%. Further investigation showed that this low impact may be true of operations that involve a small amount of data. With the full picture of the analyses on large tables however, the truth is that the performance may be (5 - 10 times) slower order that without transparent encryption of data.

  If you want more information, take a look at this excellent article (in two parts):

  https://communities.Intel.com/community/datastack/blog/2012/03/23/real-world-database-encryption-performance-with-Intel-AES-NI-PT-1

  Best,

  Andrea

• After TDE (Transparent Data Encryption) data are always considered as is

  Hello
  
  I encrypted column in the table by using TDE (Transparent Data Encryption), but the data in the column is always displayed as it is. How can I verify that the data has been encrypted. What is the use if tha data are visible even after encryption.
  
  SELECT * from user_encrypted_columns where table_name = 'OA_TRAN_STOCK ';
  
  TABLE_NAME COLUMN_NAME ENCRYPTION_ALG SALT INTEGRITY_ALG
  
  OA_TRAN_STOCK RDPK_KEY AES 128-bit key no. SHA-1
  OA_TRAN_STOCK RDPK_BIN_FILE AES 128-bit key no. SHA-1
  
  Select rdpk_key, RDPK_BIN_FILE from OA_TRAN_STOCK;
  
  RDPK_KEY RDPK_BIN_FILE(Hexadecimal value as inserted in table)
  
  11111 22222-33333-44444-55555 1000011ABCDAAACCC0011110CCBADEF
  11111 21222-33333-44444-55556 1000011ABCDAAACCC0011110CCBADEE
  
  Help, please.

  583003 wrote:
  Tubby thanks for the info.

  But the data is stored as it is in the table. How can I check/confirm that the data is encrypted with proof. Shoding only the metadata that the column was perhaps not enough for the customer.

  Where exactly in the database, I can get this info or how to prove to the client that the data is encrypted, because he sees data as it is in the database.

  http://docs.Oracle.com/CD/E11882_01/network.112/e10746/asotrans.htm#BABEBFBA

  Obviously not something you want to run on a production system, but something that you can easily run in a test/development to demonstrate to your customers environment.

  If they worry about someone in your database hacking and questioning, steal data in this way, then this isn't the solution that you want to implement (or he is not the only solution you would need to implement). As noted in the links I posted before, TDE is designed to protect you against someone steal your support (data files).

  See you soon,.

• Error using Transparent data encryption

  Hi all
  I try to activate the transparent data encryption by performing the following steps:
  1. Add the following clause in sqlnet.ora

  ENCRYPTION_WALLET_LOCATION = (SOURCE =
  (METHOD = FILE)
  (METHOD_DATA =
  (DIRECTORY =
  /usr/oracle/wallets/)))

  2. open wallet set

  SQL> alter system set encryption wallet open identified by foo;
  
  System altered.

  3 but I got the following error when you set the encryption key:

  SQL> alter system set encryption key identified by foo;
  alter system set encryption key identified by manga2
  *
  ERROR at line 1:
  ORA-00600: internal error code, arguments: [ztsmsmkh:set basic key failed], [18446744073709551615],
  [], [], [], [], [], [], [], [], [], []

  What has gone wrong?
  
  Best regards
  Val
  
  Published by: Valerie good-natured October 6, 2011 04:24

  Ora-00600 errors must be triggered through Support of Oracle. They have a corrector of error ora-00600 there, but it does not mean that there's something gone wrong internally and is not likely to be something that someone here can help with, unless they go to Oracle Support themselves and look it up.

• Configuration of transparent data encryption

  Hello
  
  I want to configure Transparent data encryption on a database that is protected with database Vault.
  Is there a document that talks about the integration of vault of the database with Transparent data encryption.
  I want to create an administrator user (other than users of sys/system) common security for Transparent data encryption configuration.
  If I create a new Director of Enterprise Manager console I get the following error:
  SQL error ORA-47401: Violation domain privilege system grant on SELECT no matter WHAT DICTIONARY. ORA-06512: at "SYSMAN.". MGMT_USER', line 9316 ORA-06512
  
  How to avoid this error.
  Pointers on this is appreciated.
  
  Thank you and best regards,
  Srikanth

  Please see if link below will help you:

  http://www.Oracle.com/technology/deploy/security/database-security/database-Vault/dbv_faq.html#A11062

  Concerning
  Rajesh

• Oracle advanced replication vs flow all the differences?

  Hi friends
  
  
  All fdiffrences btw Oracle advanced replication and streams?
  
  Is not Oracle advanced replication one end of product life and the future will be the watercourse.
  
  Found any clarification on this in the docs

  Hello Haggy

  We are saved once more by metalink >

  (14) what is the difference between flow and advanced replication?
  See 370850.1 comparison between the RAC, Dataguard, streams, advanced features of replication or base.

  Hope this helps you understand the differences, you can always ask for more.

• Create schemas for data warehouse for Reporting with Oracle XE

  It is possible to import home charger with the Oracle XE database and dw?

  I get this error ORA-00439: feature not enabled not: progress of replication in the log of the CIM.

  I saw that the database, we do not have have the feature "advanced replication."

  SQL> select * from v $ option where parameter = 'Advanced replication';
  
  
  PARAMETER
  -------------------------------------------------- --------------
  VALUE
  -------------------------------------------------- --------------
  advanced replication
  FALSE
  
  
  

  Journal of the CIM:

  Mon Feb 23 14:16 BRT 2015 1424711760686 atg.cim.database.dbsetup.CimDBJobManager module of high level of information for Reporting data warehouse Datasource list page: domain controllers. DW, ARF. DW.base, ARF. DW. InternalUsers, Store.Storefront

  Info my Feb 23 14:16:05 BRT 2015 1424711765012 atg.cim.database.dbsetup.CimDBJobManager 0 0 imports has not been executed.

  Info my Feb 23 14:16:05 BRT 2015 1424711765192 atg.cim.database.dbsetup.CimDBJobManager list of module level for Datasource Reporting charger: DafEar.Admin, DCS. DW, DCS. PublishingAgent, ARF.base, Store.EStore, Store.EStore.International

  Info my Feb 23 14:16:05 BRT 2015 1424711765733 atg.cim.database.dbsetup.CimDBJobManager 1 1 imports has not been executed.

  Info my Feb 23 14:16:05 BRT 2015 1424711765953 atg.cim.database.dbsetup.CimDBJobManager list of top level for Datasource Publishing module: DCS - UI. Versioned, BIZUI, PubPortlet, DafEar.admin, DCS - UI. SiteAdmin.Versioned, SiteAdmin.Versioned, DCS. Versioned, DCS - UI, Store.EStore.Versioned, Store.Storefront, DAF. Endeca.Index.Versioned, DCS. Endeca.Index.Versioned, ARF.base, DCS. Endeca.Index.SKUIndexing, Store.EStore.International.Versioned, Store.Mobile, Store.Mobile.Versioned, Store.Endeca.International, Store.KnowledgeBase.International, Portal.paf, Store.Storefront

  Info my Feb 23 14:16:11 BRT 2015 1424711771561 atg.cim.database.dbsetup.CimDBJobManager 65 65 imports has not been executed.

  Info my Feb 23 14:16:11 BRT 2015 1424711771722 atg.cim.database.dbsetup.CimDBJobManager list of top level for Datasource Production Core module: Store.EStore.International, DafEar.Admin, DPS, DSS, DCS. PublishingAgent, DCS. AbandonedOrderServices, DAF. Endeca.Index, DCS. Endeca.Index, Store.Endeca.Index, DAF. Endeca.Assembler, ARF.base, PublishingAgent, DCS. Endeca.Index.SKUIndexing,Store.Storefront,Store.EStore.International,Store.Recommendations,Store.Mobile,Store.Endeca.International,Store.Fluoroscope,Store.KnowledgeBase.International,Store.Mobile.Recommendations,Store.Mobile.International,Store.EStore,Store.Recommendations.International

  Info my Feb 23 14:16:12 1424711772473 2015 BRT atg.cim.database.dbsetup.CimDBJobManager 30 30 imports has not been executed.

  Info my Feb 23 14:16:19 BRT 2015 1424711779573 atg.cim.database.dbsetup.CimDBJobManager creating schema to the Reporting data warehouse data source

  Info my Feb 23 14:16:19 BRT 2015 1424711779653 atg.cim.database.dbsetup.CimDBJobManager list of top level for Datasource Reporting data warehouse module: domain controllers. DW, ARF. DW.base, ARF. DW. InternalUsers, Store.Storefront

  Info my Feb 23 14:16:19 BRT 2015 1424711779993 atg.cim.database.dbsetup.CimDBJobManager DatabaseTask Create for Module ARF. DW.base, sql/db_components/oracle/arf_ddl.sql

  Info my Feb 23 14:16:19 BRT 2015 1424711779993 atg.cim.database.dbsetup.CimDBJobManager DatabaseTask Create for Module ARF. DW.base, sql/db_components/oracle/arf_view_ddl.sql

  Info my Feb 23 14:16:19 BRT 2015 1424711779993 atg.cim.database.dbsetup.CimDBJobManager DatabaseTask Create for Module ARF. DW.base, sql/db_components/oracle/arf_init.sql

  Info my Feb 23 14:16:19 BRT 2015 1424711779993 atg.cim.database.dbsetup.CimDBJobManager Create DatabaseTask Module domain controller. DW, sql/db_components/oracle/arf_dcs_ddl.sql

  Info my Feb 23 14:16:19 BRT 2015 1424711779993 atg.cim.database.dbsetup.CimDBJobManager Create DatabaseTask Module domain controller. DW, sql/db_components/oracle/arf_dcs_view_ddl.sql * info my Feb 23 14:16:19 BRT 2015 1424711779993 atg.cim.database.dbsetup.CimDBJobManager Create DatabaseTask Module domain controller. DW, sql/db_components/oracle/arf_dcs_init.sql

  Info my Feb 23 14:16:21 atg.cim.database.dbsetup.CimDBJobManager BRT 2015 1424711781085 found 2 of the 6 unrun previously of tasks for Datasource Reporting data warehouse

  Info my Feb 23 14:16:21 BRT 2015 1424711781085 atg.cim.database.dbsetup.CimDBJobManager 1 ARF. DW.base: sql/db_components/oracle/arf_view_ddl.sql

  Info my Feb 23 14:16:21 atg.cim.database.dbsetup.CimDBJobManager 1424711781085 2015 BRT 2 domain controllers. DW: sql/db_components/oracle/arf_dcs_view_ddl.sql

  Info my Feb 23 14:16:21 BRT 2015 1424711781085/atg/dynamo/dbsetup/job/DatabaseJobManager starting work of setting up data 1424711781085.

  Error my Feb 23 14:16:21 BRT 2015 1424711781516 /atg/dynamo/dbsetup/database/DatabaseOperationManager---java.sql.SQLException: ORA-00439: feature not enabled not: Advanced replication

  is there a solution?

  Hello

  We have not tested and certified with Oracle XE internally

  You must use an Oracle Enterprise Edition for Advanced Replication

  What version of Oracle trade you install, I can't say extract of newspaper, you've posted

  ++++

  Thank you

  Gareth

  Please indicate any update as "Good response" or "Useful answer" If this update help and answers your question, so that others can identify the correct/good update between the many updates.

• Is EBS R12.1 with Oracle Advanced security option - certified?

  Hello
  
  Environmental details are below:
  
  EBS R12.1.1
  Oracle database version is 10g R2 (10.2.0.4).
  OS is Solaris 10
  
  We are looking for an option of implementation of Oracle advanced security option (ASO). But would like to know if its certified with EBS R12.1.1 / database 10g R2.
  
  I checked some links, but I did not understand if its certified.
  
  http://blogs.Oracle.com/stevenChan/2008/07/10gr2_10204_certified_with_apps_11i.html
  
  the link above, I understand his certified on 11i (11.5.10 CU2 only)
  < < advanced Security Option / advanced networking Option (ASO / ANO) (11.5.10.CU2 only) > >
  
  Dees someone knows about this certification. If you have information please let me know.
  
  Thanks for your time.
  
  Note: ASO is certified with database 11g. 11 GR 1 material but I am looking for 10g R2 (10.2.0.4)
  http://blogs.Oracle.com/mt/mt-search.cgi?blog_id=101 & tag = EBS % 2012 & Limit = 20
  
  
  
  See you soon,.
  SBS
  
  Published by: sbs 14 October 2009 17:23

  Hello

  Please see this link.

  10 gr 2 10.2.0.4, certified with 12 applications database
  http://blogs.Oracle.com/stevenChan/2008/08/10gr2_10204_database_certified_with_apps_12.html

  Kind regards
  Hussein

• What editions (Basic or Premium or...?) of Windows 7 are supported with worm 8.3 SSL - VPN

  We intend to upgrade to the version of Cisco ASA 8.3.x and notes for version 8.3.x, it offers based on the browser of the VPN access (without client) to Windows 7 (32 bit) and x 86 platforms (64 bit).

  I need to know what editions (Basic or Premium or...?) of Windows 7 are supported.

  See you soon.

  Please kindly marks the message as answered if you have any other question. Thank you.

• Compound triggers are supported by Oracle 11.2.0.1 worm?

  Hello

  We work with the oracle 11.2.0.3 version and created some compound triggers that work properly. Can someone tell if they will work in 11.2.0.1? We have no test environment for this particular version.

  Thank you.

  Ankit8051 wrote:

  Hi , kastolom,

  Thanks for your reply, but it is also supported by 11.2.0.1?

  It seems that you have chosen to ignore my answer so here is the link to the Oracle 11.1 documenetation, the version in which composed triggers have been introduced.

  http://docs.Oracle.com/CD/B28359_01/server.111/b28318/triggers.htm#CNCPT1681

  And here is the same link to doc 11.2(.0.1),

  http://docs.Oracle.com/CD/E11882_01/AppDev.112/e25519/triggers.htm#LNPLS2005

  Aman...

• Formatted VMFS3 ISCSI data warehouses are compatible with ESX5.5?

  Hi all

  I'm currently building an ESX 5.5 environment to run in parallel with my environment 4.1 existing and need the new 5.5 ESX servers to connect via iSCSI to a couple of VMFS3 formatted lun.

  I can't see them via the iSCSI storage adapter, but when I try to mount it asks me to format first. I wanted to confirm if anyone else had this problem or has confirmed that VMFS3 is fully compatible with ESX 5.5 connected via iSCSI.

  Thanks in advance.

  Looks like that the MTU on my NICs is set too high. Once I lowered around 1500, they began to present correct data warehouses.

  Thanks for the help, I think I have a handle on it.

  Thank you, MP.

• TDE - Transparent data encryption

  Hi all

  I have an EMP table with encrypted column CREDIT_CARD_NO.

  This encrypted table resides on PROD.

  Then I export using the EXP of EMP table that resides on DEV server and it is not encrypted.

  Can I import (imp) this dumpfile prod that is encrypted?

  I tried, but I got error

  H/h = emp file tables IMP = expdat.dmp ignore = yes

  Import: Release 11.2.0.3.0 - Production on Thu Aug 15 18:42:53 2013

  Copyright (c) 1982, 2011, Oracle and/or its affiliates.  All rights reserved.

  IMP-00058: ORACLE error 1031

  ORA-01031: insufficient privileges

  I have already given HR a dba role privileges EXP/IMP.

  Correction: I have only granted privileges DPPUMP, which is the equivalent for EXP/IMP?

  Thank you very much

  zxy

  Post edited by: yxes2013

  Hello

  My knowledge of database vault is that theoretical - I've never really used. As far as I know that same SYS cannot bypass the security of vault database - that explain the error you get with SYS. I think the error with HR is misleading (unless there no DBA) - try to remove the fromuser/touser completely you have not needed - does work?

  Users who access was granted to the Kingdom of database vault? You can import one of these users (temporarily give them s/n?)

  Can give you Kingdom access to HR through the vault db gui tool (see the example here for 12 c - Although it should be the same in previous versions http://docs.oracle.com/cd/E16655_01/server.121/e17609/tdpsg_dv.htm)

  You might have more luck this announcement in a database vault forum - I guess there's a?

  See you soon,.

  Harry

  http://dbaharrison.blogspot.com

• Deletion of data that are shared with multiple clusters warehouses

  Our ESX servers have initially setup by adding all the LUNS in three groups. Cluster 1, 2 and 3 all see the same disks.

  We are redesigning our design and would like to delete unused data from the cluster 2 warehouses.

  My question is, by deleting data warehouses in Group 2 will affect the data in cluster 1 or 3 warehouses?

  Thank you!

  Are you thinking of clicking on delete storage page?  If so, Yes will delete the partition on this volume.  Which will affect the volume and everything that uses it.

  I went through a similar process last year.  What I ended up doing removed access to the volumes of the servers that I didn't want more access and restart the hosts one by one.  I think this is the way you want to go.

  With ESX 3.5, I was unable to find a way to connect to the host on the volume.  ESX 4 looks like it will be possible.

  Charles nights, VCP

  If you have found this or other useful information, please consider awarding points to 'Correct' or 'useful '.

• Upgrade memory for Satellite U200: are supported with 667 mhz modules?

  I am a new user and I'm on a Toshiba Sat U-200-115. I want to upgrade, and I intend to do an upgrade to 4 GB.

  What I want to know, although it said this laptop supports the upgrade to 4 Gig, but this model use a DDR2 533 MHz memory. Considering that since the Web from Toshiba site, I see only 1 slot memory of Gig available with this clock speed and a 2 Gig DDR2 available with clock speed of 667 MHz. What I want to know, if I want to upgrade to 4 GB memory with clock speed more high clock (667 instead of, 533) would work on this machine?

  Thank you.

  Hello

  It depends on the chipset of your Satellite U200-115.

  If chipset supports 4 GB of memory and BIOS and Vista supports 4 GB of memory too, then you can go use the full 4 GB of RAM.
  If the FSB takes care also of 667 Mhz then modules of memory would also go wit full 667 Mhz speed.
  If the chipset supports only 533 Mhz then the chipset would slow the 667 Mhz module and memory would go only to 533 Mhz.

  So what you have to do is check what chipset is equipped in the U200-115.
  Full details and specifications of chipset you can find on the page of Intel.

  But generally, there is no big difference between the modules of 533 Mhz and 667 Mhz modules 667 Mhz turns a little faster but you won't see everything boosts performance

  Concerning

• Transparent data encryption

  Hello
  
  How can I migrate my no tablespace for tablespace encriptación encriptación data?

  user011232 wrote:
  without data can pump including metod I use?

  my no tablespace have 50 GB of data, and I have to migrate data to new encryption tablespace.

  50 GB is a very tiny data volume. Please use the Datapump parallel option to speed up the process, if you think that its slow.

  Aman...