Oracle Database 11 g - Online Public Access Catalog

CHAPTER 5 ■ DATABASE SECURITY 241• By invoking the Oracle Wallet Manager through a GUI• By invoking the Oracle Wallet Manager by issuing the command owm at the command line• By using the mkstore command from the operating system command line■Tip Use the following syntax to create a wallet from the OS:mkstore -wrl $ORACLE_BASE/admin/$ORACLE_SID/wallet –createEnter password:EnterWallet RequirementsTDE requires an Oracle Wallet encryption key be established and opened. Because the wallet isthe essence of TDE, we will take you on a little tour to create a key and open it for use for thedatabase. The easiest way to create a wallet is by using the ALTER SYSTEM command, which isthe method we use here:SQL> alter system set encryption key identified by "clidba123";System altered.The alter system statement shown here both creates the wallet if it does not already existand adds a master key to it. You must replace the password with your own password for the wallet.The ALTER SYSTEM statement you issued in the previous example works in the following way:• If you already have an Oracle Wallet, it opens that wallet and creates (or re-creates) themaster encryption key.• If you do not have an Oracle Wallet already, it creates a new wallet, opens the wallet, andcreates a new master encryption key.Since we created an encryption wallet, we must re-open the wallet after database start-up.To open the wallet (ewallet.p12) after database start-up, you can issue the following command:alter system set wallet open identified by "clidba123";Please remember that since the wallet was created with the double quotes around it, it needsto be opened with double quotes. Otherwise, you will receive the ORA- 28353 (“failed to openwallet”) error. To verify that a wallet is open, you can query the V$ENCRYPTION_WALLET view:SQL> select wrl_parameter, status from v$encryption_walletSQL> /WRL_PARAMETERSTATUS----------------------------------- -----------/apps/oracle/general/walletOPEN