Can I use Oracle Wallet Manager (OWM) to create the encryption wallet and master key for TDE?
If you create a wallet with Oracle Wallet Manager, it does not contain the master key required by TDE. Only the SQL command: SQL> alter system set encryption key identified by “wallet_password”; creates a wallet (if it doesn’t already exist in the location specified in the local sqlnet.ora file) and adds the TDE master key to it. In Oracle 11gR1, TDE and other security features have been migrated to Enterprise Manager Database Control, thus enabling the wallet and the master key to be generated using the Web-based GUI of Enterprise Manager. Also new in 11gR1, the master encryption key for TDE column encryption can be created, re-keyed (rotated) and stored in an HSM device. Starting with Oracle Database 11gR1 11.1.0.7, the master key for TDE tablespace encryption can also be created and stored in an HSM device, but re-keying (or migrating the TDE tablespace encryption master key from wallet to HSM) is not supported. New in Oracle 11g Release 2 is the unified master encryption key, which
If you create a wallet with Oracle Wallet Manager, it does not contain the master key required by TDE. Only the SQL command: SQL> alter system set encryption key identified by “wallet_password”; creates a wallet (if it doesn’t already exist in the location specified in the local sqlnet.ora file) and adds the TDE master key to it. In Oracle 11gR1, TDE and other security features have been migrated to Enterprise Manager Database Control, thus enabling the wallet and the master key to be generated using the Web-based GUI of Enterprise Manager. Also new in 11gR1, the master encryption key for TDE column encryption can be created, re-keyed (rotated) and stored in an HSM device. Starting with Oracle Database 11gR1 11.1.0.7, the master key for TDE tablespace encryption can also be created and stored in an HSM device, but re-keying (or migrating the TDE tablespace encryption master key from wallet to HSM) is not supported. New in Oracle 11g Release 2 is the unified master encryption key, which
