Encrypting a Tablespace

You can encrypt a new tablespace while you are creating it, but you cannot encrypt an existing tablespace. As a workaround, you can use the CREATE TABLE AS SELECT, ALTER TABLE MOVE, or use Oracle Data Pump import to get data from an existing tablespace into an encrypted tablespace. For details about creating a tablespace, see Creating a Tablespace.

To encrypt a tablespace:  

1. Ensure that you have created and opened a wallet key.

   "Step 2: Create the Wallet" explains how to create a wallet key. To open an existing wallet key, see "Step 3: Open (or Close) the Wallet".

2. Start Database Control.

   See Accessing the Database Home Page for instructions about how to start Database Control.

3. Enter an administrator user name (for example, SYSTEM, or the name of a security administrator) and password, and then click Login.

   The Database Home page appears.

4. Click Server to display the Server subpage.

5. Under Storage, click Tablespaces.

   The Tablespaces page appears.

6. Click Create, and then answer the questions in the subsequent page to start creating the tablespace and its required data file.

7. In the Create Tablespace page, do the following:

   1. Under Type, select the Encryption box, under Permanent.

   2. Select Encryption options to display the Encryption Options page.

   3. From the Encryption Algorithm list, select from the following options:

      • AES192: Sets the key length to 192 bits. AES is the abbreviation for Advanced Encryption Standard.

      • 3DES168: Sets the key length to 168 bits. 3DES is the abbreviation for Triple Data Encryption Standard.

      • AES128: Sets the key length to 128 bits. This option is the default.

      • AES256: Sets the key length to 256 bits.

      See "Available Methods" under Step 5 in "Configuring Network Encryption" for more information about these encryption algorithms.

   4. Click Continue.

      The Create Tablespace page appears.

8. Click OK.

   The new tablespace appears in the list of existing tablespaces. Remember that you cannot encrypt an existing tablespace.