Configurations Required to use TDE (Transparent Data Encryption)

The Oracle Recovery Kit supports TDE (Transparent Data Encryption) provided by the Oracle database to the extent that the following requirements are met:

*Note: There are variations in the terminology on the official Oracle website, such as “Local Auto-login Software Keystore”, “Local Auto-login Keystore”, and “Local auto-login TDE wallet”, but in this article, we will use the term “Local Auto-login Keystore” for consistency.

• Oracle is installed on the local disk
• The encrypted data area is placed on a shared disk protected by the file system resource
• Use the same replicated software keystore on both nodes and place it on each local disk
• Configure a Local Auto-login Keystore for both nodes software keystore

*Note LifeKeeper for Linux uses a “Local Auto-login Keystore” instead of an “Auto-login Keystore” to ensure security.