One should be careful in securing the key and i think data can not be viewed unless we have the right key and wallet is open with right key.
Please do check with oracle online documentation all the time... its good.
SQL> select * from tde_test;Please note: wallet should be open each time the db is restarted.
select * from tde_test
*
ERROR at line 1:
ORA-28365: wallet is not open
SQL> conn sys as sysdba
Enter password:
Connected.
SQL> desc dba_wallets;
ERROR:
ORA-04043: object dba_wallets does not exist
SQL> desc dba_wallet_acls;
Name Null? Type
----------------------------------------- -------- ----------------------------
WALLET_PATH NOT NULL VARCHAR2(1000)
ACL VARCHAR2(4000)
ACLID NOT NULL RAW(16)
SQL> select * from dba_wallet_Acls;
no rows selected
SQL>
SQL> desc v$encryption_Wallet;
Name Null? Type
----------------------------------------- -------- ----------------------------
WRL_TYPE VARCHAR2(20)
WRL_PARAMETER VARCHAR2(4000)
STATUS VARCHAR2(18)
SQL> select * from v$encryption_wallet;
WRL_TYPE
--------------------
WRL_PARAMETER
--------------------------------------------------------------------------------
STATUS
------------------
file
F:\app\HOME\admin\orcl\encryption_wallet/
CLOSED
SQL> desc v$wallet;
Name Null? Type
----------------------------------------- -------- ----------------------------
CERT_ID VARCHAR2(52)
DN VARCHAR2(255)
SERIAL_NUM VARCHAR2(40)
ISSUER VARCHAR2(255)
KEYSIZE NUMBER
STATUS VARCHAR2(16)
SQL> select * from v$wallet;
no rows selected
SQL> alter system set wallet open identified by "wrongpassword";
alter system set wallet open identified by "1myPassword"
*
ERROR at line 1:
ORA-28353: failed to open wallet
SQL> alter system set wallet open identified by "correctpassword";
System altered.
SQL> conn test/test;
SQL> select * from tde_test;
ID DATA
---------- --------------------------------------------------
1 It is a secret and can not be shown unless wallet is open!
SQL>
SQL>
One can close the wallet with alter command : ALTER SYSTEM SET WALLET CLOSE;
DBA personal should remember the key or should keep the key safe...
-- Have a fun working in oracle technologies.. Cheers....
No comments:
Post a Comment