Registering Oracle Database Vault with Oracle Database

In the registration process, Oracle Database Vault is enabled and you are prompted to create its administrative accounts.

To register Oracle Database Vault:

Stop the database, Database Control console process, and listener.
- UNIX: Log in to SQL*Plus as user SYS with the SYSOPER privilege and shut down the database. Then from the command line, stop the Database Control console process and listener.
  
  For example:
```
sqlplus sys as sysoper
Enter password: password

SQL> SHUTDOWN IMMEDIATE
SQL> EXIT

$ emctl stop dbconsole
$ lsnrctl stop [listener_name]
```
  For Oracle RAC installations, shut down each database instance as follows:
```
$ srvctl stop database -d db_name
```
- Windows: Stop the database, Database Control console process, and listener from the Services tool in the Control Panel. The names of Oracle Database services begin with Oracle.
Enable Oracle Database Vault as follows:
- UNIX: Run the following commands. The make command enables both Oracle Database Vault (dv_on) and Oracle Label Security (lbac_on). You must enable Oracle Label Security before you can use Database Vault. If Oracle Label Security is already enabled, then you can omit lbac_on from the make command.
```
$ cd $ORACLE_HOME/rdbms/lib
$ make -f ins_rdbms.mk dv_on lbac_on ioracle
```
- Windows: In the ORACLE_BASE\ORACLE_HOME\bin directory, rename the oradvll.dll.dbl file to oradvll.dll. If Oracle Label Security has not been enabled, then change the name of the oralbacll.dll.dbl file to oralbacll.dll. You must enable Oracle Label Security before you can use Database Vault.
Restart the database and listener. (Do not restart the Database Control console process yet.)
- UNIX: Log in to SQL*Plus as user SYS with the SYSOPER privilege and restart the database. Then from the command line, restart the listener.
  
  For example:
```
sqlplus sys as sysoper
Enter password: password

SQL> STARTUP
SQL> EXIT

$ lsnrctl start [listener_name]
```
  For Oracle RAC installations, restart each database instance as follows:
```
$ srvctl start database -d db_name
```
- Windows: Restart the database and listener from the Services tool in the Control Panel. The names of Oracle Database services begin with Oracle.
Start Database Configuration Assistant.
- UNIX: Enter the following command at a terminal window:
```
dbca
```
  Typically, dbca is in the $ORACLE_HOME/bin directory.
- Windows: From the Start menu, click All Programs. Then, click Oracle - ORACLE_HOME, Configuration and Migration Tools, and then Database Configuration Assistant.
  
  Alternatively, you can start Database Configuration Assistant at a command prompt:
```
dbca
```
  As with UNIX, typically, dbca is in the ORACLE_BASE\ORACLE_HOME\bin directory.
In the Welcome page, click Next.

The Operations page appears.
Select Configure Database Options, and then click Next.

The Database page appears.
From the list, select the database where you installed Oracle Database and then enter the name and password of a user who has been granted the DBA role. Click Next.

The Database Content page appears.
Perform one of the following actions:
- If Oracle Label Security is already enabled: Select the Oracle Database Vault option, and then click Next.
- If Oracle Label Security is not enabled: Select the Oracle Label Security option so that the Oracle Database Vault option becomes available for selection. Select the Oracle Database Vault option as well, and then click Next.
The Oracle Database Vault Credentials page appears.
Specify the name and password for the Database Vault Owner account (for example, DBVOWNER) and the Database Vault Account Manager (for example, DBVACCTMGR).

Enter any password that is secure, according to the password guidelines described in "Requirements for Creating Passwords". Oracle Database Vault has additional password requirements, which are displayed if you try to create an incorrect password.
Click Next.

The Connection Mode page appears.
Select either Dedicated Server Mode or Shared Server Mode (depending on the selection you made when you created this database), click Finish, and then click OK in the confirmation prompts.

Database Configuration Assistant registers Oracle Database Vault, and then restarts the database instance.
Exit Database Configuration Assistant.
Restart the Database Control console process.
- UNIX: Run the following command:
```
$ emctl start dbconsole
```
- Windows: Restart the Database Control console process (for example, OracleDBConsoleorcl if the database is named orcl) from the Services tool in the Control Panel.