Oracle 参数 ONE_STEP_PLUGIN_FOR_PDB_WITH_TDE 官方解释,作用,如何配置最优化建议

本站中文解释

一步插件PDB,其中TDE是可靠性数据加密(Transparent Data Encryption)的简写。

1. ONE_STEP_PLUGIN_FOR_PDB_WITH_TDE 参数用于设置快速创建PDB 时启用TDE功能.

2. 一般情况下,如果客户要求创建PDB 时启用TDE,可以使用本参数设置.

3. 设置方法:

A. 登录sqlplus 系统:

sqlplus / as sysdba

B. 执行一下命令:

SQL>alter system set ONE_STEP_PLUGIN_FOR_PDB_WITH_TDE=true;

C. 确认参数生效:

SQL>show parameter one_step_plugin_for_pdb_with_TDE

Name Type Value
——————————————— ———- ——-
one_step_plugin_for_pdb_with_tde boolean TRUE

D. 重启CDB:

SQL>shutdown immediate
SQL> startup

E. 接下来,创建PDB 后,会自动初始化TDE 功能.

官方英文解释

If a pluggable database (PDB) has Transparent Data Encryption-encrypted (TDE-encrypted) tables or tablespaces, you can enable ONE_STEP_PLUGIN_FOR_PDB_WITH_TDE on the target CDB to simplify the move of TDE keys in a single step PDB move operation. ONE_STEP_PLUGIN_FOR_PDB_WITH_TDE eliminates the need of having to manually provide a keystore password when you import the TDE keys into the PDB after it has moved to the target CDB.
Property Description

Parameter type

Boolean

Default value

FALSE

Modifiable

ALTER SYSTEM

Modifiable in a PDB

No

Range of values

true | false

Basic

No

Oracle RAC

A different value can be set for this parameter on different Oracle RAC instances.

The default for ONE_STEP_PLUGIN_FOR_PDB_WITH_TDE is FALSE.

When ONE_STEP_PLUGIN_FOR_PDB_WITH_TDE is set to TRUE on the target CDB, the plug in of the PDB does not require a keystore password.

See Also:

Oracle Database Advanced
Security Guide
for more information about ONE_STEP_PLUGIN_FOR_PDB_WITH_TDE and for an example of using the parameter.


数据运维技术 » Oracle 参数 ONE_STEP_PLUGIN_FOR_PDB_WITH_TDE 官方解释,作用,如何配置最优化建议