Index

A  C  D  E  G  H  I  J  K  L  M  N  O  P  R  S  T  U  V  X  

A

  • ad hoc tools
    • Oracle Data Redaction 1
  • administrative access to policies, restricting 1
  • aggregate functions
    • affect on Data Redaction policy optimization 1
  • ALTER SYSTEM statement
    • how compares with ADMINISTER KEY MANAGEMENT statement 1
  • APEX_UTIL.GET_NUMERIC_SESSION_STATE function
    • Oracle Data Redaction policies (NV public function) 1
  • APEX_UTIL.GET_SESSION_STATE function
    • Oracle Data Redaction policies (V public function) 1
  • applications
    • database applications and Oracle Data Redaction 1
    • modifying to use Transparent Data Encryption 1
  • auto login keystores
    • and Transparent Data Encryption (TDE) 1
  • Automatic Storage Management (ASM)
    • moving software keystores from 1

C

  • CDBs
    • cloning PDBs with encrypted data 1
    • cloning PDBs wth encrypted data, about 1
    • Data Redaction masking policies 1
    • moving PDB from one CDB to another 1
    • PDBs with encrypted data 1
    • preserving keystore passwords in PDB move operations 1
    • TDE operations in root 1
    • TDE operations in root and PDBs 1
  • change data capture, synchronous 1
  • closing hardware keystores 1
  • closing software keystores 1
  • column encryption
    • about 1
    • changing algorithm 1
    • changing encryption key 1
    • creating encrypted table column with default algorithm 1
    • creating encrypted table column with non-default algorithm 1
    • creating index on encrypted column 1
    • data loads from external file 1
    • data types to encrypt 1
    • existing tables
      • about 1
      • adding encrypted column to 1
      • disabling encryption 1
      • encrypting unencrypted column 1
    • external tables 1
    • incompatibilities 1
    • limitations 1
    • performance, optimum 1
    • restrictions 1
    • salt 1
    • security considerations 1
    • skipping integrity check 1
  • column sensitive type discovery
    • enabling when creating a Data Redaction policy 1
  • compliance
    • Transparent Data Encryption 1
  • compression of Transparent Data Encryption data 1
  • configuring software keystores
    • creating local auto-login keystore 1

D

  • data at rest 1
  • database close operations
    • keystores 1
  • database links
    • with Oracle Data Redaction policies 1
  • database roles
    • Data Redaction policies 1
  • databases
    • about encrypting 1
    • encrypting existing 1
    • encrypting offline 1
    • encrypting online 1
  • data deduplication of Transparent Data Encryption data 1
  • data redaction
    • See: Oracle Data Redaction
  • Data Redaction supported functions 1
  • data storage
    • Transparent Data Encryption 1
  • DDL statements
    • Oracle Data Redaction policies 1
  • decryption
    • tablespaces, offline 1 , 2
    • tablespaces, online 1
  • DML statements
    • Oracle Data Redaction policies 1

E

  • editing custom formats 1
  • editing policies 1
  • Editions
    • Transparent Data Encryption 1
  • encrypted columns
    • data loads from external files 1
  • encryption
    • cloning PDBs with encrypted data 1
    • databases offline 1
    • databases online 1
    • encrypting future tablespaces
      • about 1
    • existing databases 1
    • procedure 1
    • supported encryption algorithms 1
    • tablespaces, offline 1
    • tablespaces, online 1
  • encryption algorithms, supported 1
  • EXEMPT REDACTION POLICY privilege
    • using with Database Vault 1
  • expressions
    • LENGTH functions, character string 1
    • namespace functions 1
    • Oracle Application Express 1
    • Oracle Label Security functions 1
    • SUBSTR function 1
  • external credential store, password-based software keystores 1
  • external files
    • loading data to tables with encrypted columns 1
  • external keystores 1
  • external store for passwords
    • open and close operations in CDB 1
    • operations in CDB environment 1
  • external tables, encrypting columns in
    • ORACLE_DATPUMP 1
    • ORACLE_LOADER 1

G

  • guidelines
    • ad hoc query attacks and Data Redaction 1
    • application context value handling by Data Redaction policies 1
    • day-to-day operations and Data Redaction 1
    • DDL statements and Data Redaction policies 1
    • exhaustive SQL queries and inference and Data Redaction 1
    • materialized views and Data Redaction 1
    • recycle bin and Data Redaction 1
    • SYS_CONTEXT values and Data Redaction 1

H

  • hardware keystores
    • backing up 1
    • closing 1
  • hardware security modules
    • backing up keystores 1
    • plugging PDBs 1
    • unplugging PDBs 1

I

  • import/export utilities, original 1
  • indexes
    • creating on encrypted column 1
  • index range scans 1
  • inline views
    • Data Redaction policies order of redaction 1
    • Data Redaction redaction 1
  • intruders
    • ad hoc query attacks 1

J

  • JSON
    • Oracle Data Redaction 1

K

  • keystores
    • about 1
    • architecture 1
    • ASM-based 1
    • auto login 1
    • auto-login, open and close operations in CDBs 1
    • backing up password-based software keystores
      • about 1
      • backup identifier rules 1
      • procedure 1
    • changing hardware keystore password 1
    • changing passwords for password-based software keystores 1
    • closing hardware keystores 1
    • closing in CDBs 1
    • closing software keystores 1
    • database close operations 1
    • deleting 1
    • external 1
    • hardware keystore
      • configuration process 1
    • master encryption key merge differing from import or export 1
    • merging
      • about 1
      • auto-login into password-based 1
      • one into another existing keystore 1
      • reversing merge operation 1
      • two into a third new keystore 1
    • migrating
      • creating master encryption key for hardware keystore-based encryption 1
      • hardware keystore to software keystore 1
      • keystore order after migration 1
      • password key into hardware keystore 1
    • migration using Oracle Key Vault 1
    • moving out of ASM 1
    • moving software keystore to a new location 1
    • opening hardware keystores 1
    • opening in CDBs 1
    • opening software keystores 1
    • Oracle Database secrets
      • about 1
      • storing in hardware keystore 1
      • storing in software keystore 1
    • password access 1
    • password preservation in PDB move operations 1
    • possible states of 1
    • using auto-login hardware keystore 1
  • keystores, software
    • configuration process 1

L

  • LENGTH functions, character string
    • expressions 1

M

  • masking
    • See: Oracle Data Redaction
  • master encryption key
    • See: TDE master encryption key
  • materialized views
    • Data Redaction guideline 1
    • Transparent Data Encryption tablespace encryption 1
  • multitenant container databases
    • See: CDBs

N

  • namespace functions
    • expressions 1
  • nested functions
    • Data Redaction policies order of redaction 1
  • NV public function (APEX_UTIL.GET_NUMERIC_SESSION_STATE function), Data Redaction policies 1

O

  • OLS_LABEL_DOMINATES public function
    • Data Redaction policies 1
  • ONE_STEP_PLUGIN_FOR_PDB_WITH_TDE dynamic system parameter 1
  • opening hardware keystores 1
  • opening software keystores 1
  • ORA-00979
    • not a GROUP BY expression error 1
  • ORA-28081
    • Insufficient privileges - the command references a redacted object error 1
  • Oracle Application Express
    • filtering using by session state in Data Redaction policies 1
  • Oracle Application Expression
    • expressions 1
  • Oracle Call Interface
    • Transparent Data Encryption 1
  • Oracle Database Real Application Security
    • Data Redaction 1
  • Oracle Database Vault
    • using with Data Redaction 1
  • Oracle Data Guard
    • Transparent Data Encryption 1
  • Oracle Data Pump
    • encrypted columns 1
    • encrypted data 1
    • encrypted data with dump sets 1
    • exported data from Data Redaction policies 1
    • exporting Oracle Data Redaction objects 1
    • imported data from Data Redaction policies 1
    • Oracle Data Redaction security policy 1
  • Oracle Data Redaction
    • about 1
    • ad hoc tools 1
    • aggregate functions 1
    • benefits 1
    • CDBs 1
    • columns with XML-generated data 1
    • creating custom format 1
    • database applications 1
    • DBMS_REDACT.ADD_POLICY procedure
      • using 1
    • DBMS_REDACT.ALTER_POLICY procedure
      • about 1
      • example 1
      • parameters required for various actions 1
      • syntax 1
    • DBMS_REDACT.DISABLE_POLICY
      • about 1
      • example 1
      • syntax 1
    • DBMS_REDACT.DROP_POLICY
      • about 1
      • examples 1
      • syntax 1
    • DBMS_REDACT.ENABLE_POLICY
      • about 1
      • example 1
      • syntax 1
    • DBMS_REDACT.UPDATE_FULL_REDACTION_VALUES procedure
      • about 1
      • syntax 1
      • using 1
    • deleting policies 1
    • editing custom format 1
    • editions 1
    • Enterprise Manager Cloud Control 1 , 2 , 3 , 4
    • Enterprise Manager Cloud Control, about 1
    • Enterprise Manager Cloud Control workflow 1
    • exporting data using Data Pump Export 1
    • exporting objects using Data Pump 1
    • full data redaction
      • about 1
      • creating policy for 1
      • examples 1
      • modifying default value 1
      • syntax 1
    • functions used in expressions 1
    • how differs from Oracle Database Real Application Security masking 1
    • how differs from Oracle Virtual Private Database masking 1
    • importing data using Data Pump Export 1
    • inline views order of redaction 1
    • JSON 1
    • managing policies 1
    • named policy expressions
      • about 1
    • nested functions order of redaction 1
    • no data redaction
      • about 1 , 2
      • creating policies for 1
      • example 1
      • syntax 1
    • Oracle Data Pump security policy 1
    • Oracle Enterprise Manager Data Masking and Subsetting Pack 1
    • partial data redaction
      • about 1
      • character types, policies for 1
      • data-time data types 1
      • example using character data type 1
      • example using data-time data type 1
      • example using fixed character format 1
      • example using number data type 1
      • formats, fixed character 1
      • number data types 1
      • syntax 1
    • policy expressions
      • about 1
      • creating 1
      • dropping 1
      • tutorial 1
      • updating 1
    • privileges for creating policies 1
    • random data redaction
      • about 1
      • creating policies for 1
      • example 1
    • randomized data redaction
      • about 1
    • regular expression data redaction
      • creating policies for 1
      • custom, creating policies for 1
      • example 1
      • example of custom 1
      • formats 1
      • formats, creating policies for 1
      • settings for 1
      • syntax 1
    • regular expression redaction
      • about 1
    • returning null values
      • about 1
      • example 1
      • syntax 1
    • SYS schema objects 1
    • SYSTEM schema objects 1
    • use cases 1
    • when to use 1
    • WHERE clause redaction 1
  • Oracle Data Redaction, database links 1
  • Oracle Data RedactionEnterprise Manager Cloud Control
    • deleting custom format 1
  • Oracle Data Redaction formats
    • creating in Cloud Control 1
    • deleting in Cloud Control 1
    • editing in Cloud Control 1
    • Enterprise Management Cloud Control, managing in 1
    • Enterprise Manager Cloud Control, sensitive column types 1
    • Enterprise Manager Cloud Control, viewing in 1
  • Oracle Data Redaction partial redaction
    • creating policies for 1 , 2
  • Oracle Data Redaction policies
    • about 1
    • altering 1
    • building reports 1
    • creating
      • examples 1
      • general syntax 1
      • procedure 1
    • creating in Cloud Control 1
    • deleting in Cloud Control 1
    • disabling 1
    • disabling in Cloud Control 1
    • dropping 1
    • editing in Cloud Control 1
    • enabling 1
    • Enterprise Manager Cloud Control, viewing in 1
    • exempting users from 1
    • expressions
      • by Application Express session state 1
      • by database role 1
      • by OLS label dominance 1
      • by user environment 1
    • filtering users
      • about 1
      • no filtering 1
    • finding information about 1
    • Oracle Enterprise Manager Cloud Control 1
    • redacting multiple columns in one policy 1
  • Oracle Data Redaction policy expressions
    • Cloud Control, about 1
    • creating in Cloud Control 1
    • deleting in Cloud Control 1
    • editing in Cloud Control 1
    • viewing in Cloud Control 1
  • Oracle Enterprise Manager Cloud Control
    • creating custom formats 1
    • creating policy expressions 1
    • deleting policy expressions 1
    • disabling policies 1
    • editing policy expressions 1
    • Oracle Data Redaction 1 , 2 , 3 , 4 , 5 , 6 , 7 , 8
    • Oracle Data Redaction, creating policies 1
    • Oracle Data Redaction, viewing details of a policy 1
    • Oracle Data Redaction formats, viewing in 1
    • policy expressions, about 1
    • viewing policy expressions 1
  • Oracle Enterprise Manager Data Masking and Subsetting Pack
    • Oracle Data Redaction impact 1
  • Oracle GoldenGate
    • storing secrets in Oracle keystores 1
  • Oracle Key Vault
    • migration of keystores 1
  • Oracle Label Security
    • functions using Data Redaction expressions 1
  • Oracle Real Application Clusters
    • non-shared file systems to store TDE keystores 1
    • Transparent Data Encryption 1
  • Oracle Recovery Manager
    • Transparent Data Encryption 1
  • Oracle Securefiles
    • Transparent Data Encryption 1 , 2
  • Oracle Virtual Private Database (VPD)
    • Data Redaction 1
  • orapki utility
    • how compares with ADMINISTER KEY MANAGEMENT statement 1
  • original import/export utilities 1

P

  • passwords
    • access to for ADMINISTER KEY MANAGEMENT operations 1
    • preserving in PDB move operations 1
  • PDBs
    • Data Redaction policies 1
    • finding TDE keystore status for all PDBs 1
    • master encryption keys
      • exporting 1
      • importing 1
    • Transparent Data Encryption 1
  • performance
    • Transparent Data Encryption 1
  • PKI encryption
    • backup and recovery operations 1
    • hardware keystores 1
    • master encryption key 1
    • tablespace encryption 1
  • pluggable databases
    • See: PDBs
  • policy expressions, Oracle Data Redaction 1

R

  • recycle bin
    • Data Redaction policies and 1
  • reports
    • based Data Redaction policies 1
  • returning null values
    • about 1
  • rotating
    • master encryption key 1

S

  • salt
    • removing 1
  • salt (TDE)
    • adding 1
  • secrets
    • storing Oracle Database secrets in keystore
      • about 1
      • storing in hardware keystore 1
      • storing in software keystore 1
  • SecureFiles
    • Transparent Data Encryption 1 , 2
  • software keystores
    • password-based using external keystore 1
  • SUBSTR function
    • expressions 1
  • synchronous change data capture 1
  • SYS_CONTEXT function
    • Data Redaction policies 1
    • SYS_SESSION_ROLES namespace used in Data Redaction 1
  • SYS_SESSION_ROLES SYS_CONTEXT namespace
    • Data Redaction 1
  • SYSTEM user
    • Data Redaction policies 1
  • SYS user
    • Data Redaction policies 1

T

  • tablespace encryption
    • about 1
    • architecture 1
    • creating encrypted tablespaces 1
    • examples 1
    • incompatibilities 1
    • opening keystore 1
    • performance, optimum 1
    • performance overhead 1
    • procedure 1
    • restrictions 1
    • security considerations for plaintext fragments 1
    • setting tablespace key 1
    • storage overhead 1
  • tablespace master encryption key
    • setting 1
  • tablespaces
    • about encrypting 1
    • comparison between offline and online conversions 1
    • rotating encryption algorithm 1
  • tablespaces, offline decryption
    • procedure 1
  • tablespaces, offline encryption
    • about 1
    • procedure 1
  • tablespaces, online encryption
    • about 1
    • decrypting 1
    • finishing interrupted job 1
    • procedure 1
    • rekeying 1
  • TDE
    • See: Transparent Data Encryption (TDE)
  • TDE master encryption keys
    • activating
      • about 1
      • example 1
      • procedure 1
    • architecture 1
    • attributes 1
    • creating for later use
      • about 1
      • examples 1
      • procedure 1
    • custom attribute tags
      • about 1
      • creating 1
    • disabling not allowed 1
    • exporting 1
    • exporting in PDBs 1
    • finding currently used key 1
    • importing 1
    • importing in PDBs 1
    • keystore merge differing from import or export 1
    • resetting in keystore 1
    • rotating 1
    • setting in keystore 1
  • Transparent Data Encryption (TDE)
    • about 1
    • benefits 1
    • CDBs
      • operations in root or PDBs 1
    • column encryption
      • about 1 , 2
      • adding encrypting column to existing table 1
      • changing algorithm 1
      • changing encryption key 1
      • creating encrypted column in external table 1
      • creating index on encrypted column 1
      • creating tables with default encryption algorithm 1
      • creating tables with non-default encryption algorithm 1
      • data types supported 1
      • disabling encryption in existing column 1
      • encrypting columns in existing tables 1
      • encrypting existing column 1
      • encryption and integrity algorithms 1
      • restrictions 1
      • salt in encrypted columns 1
    • columns with identity columns 1
    • compatibility with application software 1
    • compatibility with Oracle Database tools 1
    • compression of encrypted data 1
    • configuring hardware keystores
      • about 1
      • configuration step 1
      • opening 1
      • PKCS#11 library 1
      • reconfiguring software keystore 1
      • setting master encryption key 1
      • sqlnet.ora configuration 1
    • configuring software keystores
      • about 1
      • creating auto-login keystore 1
      • creating password-based keystore 1
      • opening keystores 1
      • setting software master encryption key 1
      • sqlnet.ora file configuration 1
    • data deduplication of encrypted data 1
    • editions 1
    • encryption and integrity algorithms 1
    • finding information about 1
    • frequently asked questions 1
    • incompatibilities 1
    • keystore management
      • ASM-based keystore 1
      • backing up password-based software keystores 1
      • changing hardware keystore password 1
      • changing password-based software keystore password 1
      • closing hardware keystores 1
      • closing software keystore 1
      • master encryption key attributes 1
      • merging keystores, about 1
      • merging keystores, auto-login into password-based 1
      • merging keystores, one into an existing 1
      • merging keystores, reversing merge operation 1
      • merging keystores, two into a third new keystore 1
      • migrating password key and hardware keystore, master encryption key creation 1
      • migrating password key and hardware keystore, reverse migration 1
      • migrating password key and hardware keystore, sqlnet.ora configuration 1
    • keystores
      • about 1
      • benefits 1
      • types 1
    • master encryption key
      • rotating 1
    • master encryption key attributes
      • about 1
      • creating custom tags 1
    • master encryption keys
      • exporting and importing 1
      • resetting in keystore 1
      • setting in keystore, about 1
      • setting in keystore procedure 1
    • modifying applications for use with 1
    • multidatabase environments 1
    • Oracle Call Interface 1
    • Oracle Data Guard 1
    • Oracle Data Pump
      • export and import operations on dump sets 1
      • export and import operations on encrypted columns 1
    • Oracle Data Pump export and import operations
      • about 1
    • Oracle Real Application Clusters
      • about 1
      • non-shared file systems to store keystores 1
    • Oracle Recovery Manager
      • keystores 1
    • PDBs
      • about 1
      • finding keystore status for all PDBs 1
      • operations in root 1
    • performance
      • database workloads 1
      • decrypting entire data set 1
      • optimum 1
      • worst case scenario 1
    • performance overheads
      • about 1
      • typical 1
    • PKI encryption 1
    • privileges required 1
    • SecureFiles 1 , 2
    • security considerations
      • column encryption 1
      • general advice 1
      • platintext fragments 1
    • storage overhead 1
    • storing Oracle GoldenGate secrets 1
    • tablespace encryption
      • about 1 , 2
      • creating 1
      • encryption and integrity algorithms 1
      • examples 1
      • opening keystore 1
      • restrictions 1
      • setting master encryption key 1
    • tablespace encryption, setting with COMPATIBLE parameter 1
    • views 1
  • Transparent Data Encryption (TDE)integrity
    • column encryption
      • creating tables without integrity checks (NOMAC) 1
      • improving performance 1
    • NOMAC parameter (TDE) 1
  • Transparent Data Encryption (TDE) keystores
    • deleting 1
    • moving software keystore to a new location 1
  • transportable tablespaces 1
  • tutorials
    • named Data Redaction policy expressions 1

U

  • utilities, import/export 1

V

  • V$ENCRYPTION_WALLET view
    • keystore order after migration 1
  • views
    • Data Redaction 1
  • V public function (APEX_UTIL.GET_SESSION_STATE function), Data Redaction policies 1

X

  • XML generation 1