1.208 ONE_STEP_PLUGIN_FOR_PDB_WITH_TDE

If a pluggable database (PDB) has Transparent Data Encryption-encrypted (TDE-encrypted) tables or tablespaces, you can enable ONE_STEP_PLUGIN_FOR_PDB_WITH_TDE so that the PDB includes the TDE keys in a PDB move operation. ONE_STEP_PLUGIN_FOR_PDB_WITH_TDE eliminates the need of having to manually provide a keystore password when you import the TDE keys into the PDB after it has moved to a different CDB.
Property Description

Parameter type

Boolean

Default value

FALSE

Modifiable

ALTER SYSTEM

Modifiable in a PDB

No

Range of values

true | false

Basic

No

Oracle RAC

A different value can be set for this parameter on different Oracle RAC instances.

The default for ONE_STEP_PLUGIN_FOR_PDB_WITH_TDE is FALSE.

When ONE_STEP_PLUGIN_FOR_PDB_WITH_TDE is set to TRUE, the database caches the keystore password in memory, obfuscated at the system level, and then uses it for the import operation.

See Also:

Oracle Database Advanced Security Guide for more information about ONE_STEP_PLUGIN_FOR_PDB_WITH_TDE and for an example of using the parameter.