Oracle TDE – how to use it and survive

Security of data at rest and online becomes more and more important for database users. An Oracle database addressed this long ago by adding a Transparent Date Encryption (TDE) on column or tablespace level. This functionality was enhancement over a time and become almost a standard solution for data encryption. There is a set of typical challenges related to a TDE configuration, especially when people want to use a production like environments in non-production areas. With the introduction of the new Oracle multitenant architecture, managing an TDE becomes more complicated as each PDB has a separated key.This talk is focusing on managing clones of production databases with TDE in non-production environments in the automated way and with addressing a data security in the non-production environments.During a talk the following topics will be addressed:- How to TDE works and how to configure it- Wallet management for non-MT and MT architecture (password changes, rekey, backup)- RMAN duplication- PDB cloning - Nonproduction environments data protection