Tuesday, September 29, 2015

Secure oracle dumps with encryption.

8:37 PM Posted by Dilli Raj Maharjan , No comments

Available encryption options 


ENCRYPTION
Encrypt part or all of a dump file.
Valid keyword values are: ALL, DATA_ONLY, ENCRYPTED_COLUMNS_ONLY, METADATA_ONLY and NONE.

ENCRYPTION_ALGORITHM
Specify how encryption should be done.
Valid keyword values are: [AES128], AES192 and AES256.

ENCRYPTION_MODE
Method of generating encryption key.
Valid keyword values are: DUAL, PASSWORD and [TRANSPARENT].

ENCRYPTION_PASSWORD
Password key for creating encrypted data within a dump file.

Executing expdp command without encryption options.


expdp userid=system directory=tts_dir transport_tablespaces=TBS_TTS dumpfile=TBS_TTS.dmp logfile=TBS_TTS_exp.log

Executing expdp command with encryption options.

expdp system directory=tts_dir dumpfile=TBS_TTS_encrypted.dmp logfile=TBS_TTS_encrypted.log \
ENCRYPTION=ALL ENCRYPTION_ALGORITHM=AES256 ENCRYPTION_MODE=PASSWORD ENCRYPTION_PASSWORD='n**********3' schemas=USR_TTS









Regular impdp command without encryption options.

impdp system directory=tts_dir dumpfile=TBS_TTS_encrypted.dmp logfile=TBS_TTS_encrypted_imp.log


Trying to import encrypted dump without encryption options. 

[oracle@myhost tts_dir]$ impdp system directory=tts_dir dumpfile=TBS_TTS_encrypted.dmp logfile=TBS_TTS_encrypted_imp.log

Import: Release 11.2.0.3.0 - Production on Mon Sep 28 18:06:06 2015

Copyright (c) 1982, 2011, Oracle and/or its affiliates.  All rights reserved.
Password:

Connected to: Oracle Database 11g Enterprise Edition Release 11.2.0.3.0 - 64bit Production
With the Partitioning, OLAP, Data Mining and Real Application Testing options
ORA-39002: invalid operation
ORA-39174: Encryption password must be supplied.















Now Executing import with encryption options. 


impdp system directory=tts_dir dumpfile=TBS_TTS_encrypted.dmp logfile=TBS_TTS_encrypted_imp_1.log \
ENCRYPTION_PASSWORD='n**********3'


0 comments:

Post a Comment