{"id":1045,"date":"2024-07-18T19:16:26","date_gmt":"2024-07-18T22:16:26","guid":{"rendered":"https:\/\/www.fernandosimon.com\/blog\/?p=1045"},"modified":"2024-08-13T18:11:13","modified_gmt":"2024-08-13T21:11:13","slug":"23ai-dbca-and-tde","status":"publish","type":"post","link":"https:\/\/www.fernandosimon.com\/blog\/23ai-dbca-and-tde\/","title":{"rendered":"23ai, DBCA and TDE"},"content":{"rendered":"<p style=\"text-align: justify;\">With the 23ai it is possible to create a database protected with TDE from the beginning. In a previous post, for OCI Cloud and ExaCC, was already described what are the options and what can be used. Here, let\u2019s discuss other options, and troubleshoot some other details.<\/p>\n<h1 style=\"text-align: justify;\">OCI Cloud and ExaCC<\/h1>\n<p style=\"text-align: justify;\">To contextualize. The OCI, by default, requires that databases are encrypted. When calling the dbca for 23ai, it detects that it is executing in the cloud, and forces it to use TDE. And since ExaCC is considered cloud, it is needed there as well. <a href=\"https:\/\/www.fernandosimon.com\/blog\/23ai-dbca-cloud-and-tde\/\" target=\"_blank\" rel=\"noopener\">The previous post already described this in detail<\/a>.<\/p>\n<h1 style=\"text-align: justify;\">23ai + DBCA + TDE<\/h1>\n<p style=\"text-align: justify;\">When running the 23ai on-prem more options are available. The examples below were made using the Free Edition of 23ai, but when the full release of 23ai will be available, the options will be the same.<\/p>\n<p style=\"text-align: justify;\"><!--more Click here to read more...--><\/p>\n<p style=\"text-align: justify;\">There are a lot of <a href=\"https:\/\/docs.oracle.com\/en\/database\/oracle\/oracle-database\/23\/multi\/dbca-command.html#GUID-EC3C396B-6FFB-4957-BC73-1BE8F4FD852E\" target=\"_blank\" rel=\"noopener\">options for dbca in silent mode at 23ai<\/a>:<\/p>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\">[oracle@exxc05db01-]$ dbca -silent -createDatabase -help\r\n        -createDatabase - Command to Create a database.\r\n                -responseFile | (-gdbName -templateName)\r\n                -responseFile - &lt;Fully qualified path for a response file&gt;\r\n                -gdbName &lt;Global database name&gt;\r\n                -templateName &lt;Specify an existing template in default location or the complete template path for DB Creation or provide a new template name for template creation&gt;\r\n                [-adminManaged | -managementPolicy]\r\n                [-adminManaged &lt;Admin managed database, this is default option&gt;]\r\n                [-managementPolicy &lt;AUTOMATIC | RANK&gt; Database management Policy, default value is AUTOMATIC]\r\n                [-characterSet &lt;Character set for the database&gt;]\r\n                [-configureTDE &lt;true | false&gt; Specify true to configure TDE wallet]\r\n                        [-encryptPDBTablespaces &lt;Specify ALL to encrypt all Tablespaces or A comma separated list of name:value pairs with tablespace encryption to true\/false. For example SYSTEM:true,SYSAUX:false&gt;]\r\n                        [-encryptTablespaces &lt;Specify ALL to encrypt all Tablespaces or A comma separated list of name:value pairs with tablespace encryption to true\/false. For example SYSTEM:true,SYSAUX:false&gt;]\r\n                        [-pdbTDEPassword &lt;Specify password for PDB TDE wallet&gt;]\r\n                        [-primaryDBTdeWallet &lt;Specify the location for TDE wallet of primary database&gt;]\r\n                        [-sourcePdbTDEPassword &lt;Specify password for source PDB TDE wallet and it is used only in creation of PDB from existing PDB which has TDE wallet&gt;]\r\n                        [-sourceTdeWalletPassword &lt;Specify password for source database TDE wallet&gt;]\r\n                        [-tdeAlgorithm &lt;Specify the TDE Algorithm Type.&gt;]\r\n                        [-tdeWalletLoginType &lt;Specify the TDE Wallet Login Type, PASSWORD | AUTO_LOGIN  | LOCAL_AUTO_LOGIN. Default is PASSWORD for SI and AUTO_LOGIN is default for RAC]\r\n                        [-tdeWalletModeForPDB &lt;Type of keystore, either UNITED or ISOLATED. Default is UNITED&gt;]\r\n                        [-tdeWalletPassword &lt;Specify password for TDE wallet&gt;]\r\n                        [-tdeWalletPathInTarFile &lt;value&gt;]\r\n                        [-tdeWalletRoot &lt;Specify the location for TDE wallet root init parameter&gt;]\r\n                [-createListener &lt;Create a new listener to register your database. Specify in format, LISTENER_NAME:PORT&gt;]\r\n\u2026\r\n\u2026<\/pre>\n<p style=\"text-align: justify;\">The options are linked to the encryption algorithm to be used, the TDE password, the TDE type, and what is desired to be encrypted. &nbsp;The most common to be used will be:<\/p>\n<ul style=\"text-align: justify;\">\n<li>configureTDE: To use or not TDE.<\/li>\n<li>tdeWalletRoot: Path where the wallet will be created (for RAC, needs to be accessible for all instances).<\/li>\n<li>tdeWalletLoginType: Type of wallet (described in details below).<\/li>\n<li>tdeWalletPassword: Wallet password.<\/li>\n<li>encryptPDBTablespaces: To define whether PDB will be encrypted or not.<\/li>\n<li>encryptTablespaces: If encrypt all tablespaces or not (including SYSTEM\/SYSAUX\/UNDO).<\/li>\n<\/ul>\n<p style=\"text-align: justify;\">Whatever the wallet type to be used, the first thing is to create the directory where the wallet will be saved. For RAC, this path needs to be shared for all instances of the cluster:<\/p>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\">[oracle@o23fdc21 ~]$ mkdir \/opt\/oracle\/admin\/FREE\/wallet -p\r\n[oracle@o23fdc21 ~]$<\/pre>\n<h2 style=\"text-align: justify;\">AUTO_LOGIN<\/h2>\n<p style=\"text-align: justify;\">The most used option is the AUTO_LOGIN type, and dbca can be called like this:<\/p>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\">[oracle@o23fdc21 ~]$ dbca -silent -createDatabase -templateName FREE_Database.dbc -gdbName FREE -adminManaged -sid FREE -sysPassword oracle23ai -systemPassword oracle23ai -createAsContainerDatabase TRUE -useLocalUndoForPDBs TRUE -characterSet AL32UTF8 -emConfiguration NONE -storageType FS -datafileDestination \/opt\/oracle\/oradata\/ -databaseConfigType SINGLE -configureTDE TRUE -tdeWalletRoot \/opt\/oracle\/admin\/FREE\/wallet -tdeWalletLoginType AUTO_LOGIN -TdeWalletPassword 'fdertyhj4567890h32aghte2457AAABB'  -encryptPDBTablespaces ALL -encryptTablespaces ALL\r\n[WARNING] [DBT-06208] The 'SYS' password entered does not conform to the Oracle recommended standards.\r\n   CAUSE:\r\na. Oracle recommends that the password entered should be at least 8 characters in length, contain at least 1 uppercase character, 1 lower case character and 1 digit [0-9].\r\nb.The password entered is a keyword that Oracle does not recommend to be used as password\r\n   ACTION: Specify a strong password. If required refer Oracle documentation for guidelines.\r\n[WARNING] [DBT-06208] The 'SYSTEM' password entered does not conform to the Oracle recommended standards.\r\n   CAUSE:\r\na. Oracle recommends that the password entered should be at least 8 characters in length, contain at least 1 uppercase character, 1 lower case character and 1 digit [0-9].\r\nb.The password entered is a keyword that Oracle does not recommend to be used as password\r\n   ACTION: Specify a strong password. If required refer Oracle documentation for guidelines.\r\nPrepare for db operation\r\n10% complete\r\nCopying database files\r\n12% complete\r\n40% complete\r\nCreating and starting Oracle instance\r\n42% complete\r\n46% complete\r\n47% complete\r\n51% complete\r\n55% complete\r\n60% complete\r\nCompleting Database Creation\r\n66% complete\r\n69% complete\r\n70% complete\r\nExecuting Post Configuration Actions\r\n100% complete\r\nDatabase creation complete. For details check the logfiles at:\r\n \/opt\/oracle\/cfgtoollogs\/dbca\/FREE.\r\nDatabase Information:\r\nGlobal Database Name:FREE\r\nSystem Identifier(SID):FREE\r\nLook at the log file \"\/opt\/oracle\/cfgtoollogs\/dbca\/FREE\/FREE0.log\" for further details.\r\n[oracle@o23fdc21 ~]$<\/pre>\n<p style=\"text-align: justify;\">Bellow is possible to notice that the wallet was created as requested, and since specified the encryptTablespaces equals ALL, everything is encrypted:<\/p>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\">[oracle@o23fdc21 ~]$ sqlplus \/ as sysdba\r\n\r\nSQL*Plus: Release 23.0.0.0.0 - Production on Sun Jul 14 19:42:28 2024\r\nVersion 23.4.0.24.05\r\n\r\nCopyright (c) 1982, 2024, Oracle.  All rights reserved.\r\n\r\n\r\nConnected to:\r\nOracle Database 23ai Free Release 23.0.0.0.0 - Develop, Learn, and Run for Free\r\nVersion 23.4.0.24.05\r\n\r\nSQL&gt; set linesize 255\r\nSQL&gt; select TABLESPACE_NAME, ENCRYPTED, con_id from cdb_tablespaces order by con_id, TABLESPACE_NAME;\r\n\r\nTABLESPACE_NAME                ENC     CON_ID\r\n------------------------------ --- ----------\r\nSYSAUX                         YES          1\r\nSYSTEM                         YES          1\r\nTEMP                           YES          1\r\nUNDOTBS1                       YES          1\r\nUSERS                          YES          1\r\n\r\nSQL&gt; exit\r\nDisconnected from Oracle Database 23ai Free Release 23.0.0.0.0 - Develop, Learn, and Run for Free\r\nVersion 23.4.0.24.05\r\n[oracle@o23fdc21 ~]$<\/pre>\n<h2 style=\"text-align: justify;\">LOCAL_AUTO_LOGIN<\/h2>\n<p style=\"text-align: justify;\"><em><strong>Update 13\/Aug<\/strong>: The information below was updated. <a href=\"https:\/\/www.linkedin.com\/in\/peter-wahl\/\" target=\"_blank\" rel=\"noopener\">Peter Wahl<\/a>, PM from TDE and Oracle Key Vault nicely contacted me to clarify the information.<\/em><\/p>\n<p style=\"text-align: justify;\">The next wallet type is the LOCAL_AUTO_LOGIN wallet, which creates a special TDE wallet that can be used only on the computer that created it (more info in the <a href=\"https:\/\/docs.oracle.com\/en\/database\/oracle\/oracle-database\/23\/dbseg\/release-changes.html#GUID-A4C844E6-C3C6-42D5-AB7D-862FE7A7ADB3\" target=\"_blank\" rel=\"noopener\">Security Guide doc<\/a>).<\/p>\n<p style=\"text-align: justify;\">So, the information from DBCA (<em>The specified TDE keystore type LOCAL_AUTO_LOGIN is not supported for SYSTEM tablespaces encryption in root container (CDB$ROOT)<\/em>) <strong>is wrong and is a bug<\/strong> caused by the dbca itself. It will be fixed in a future release of 23ai. It is possible (and documented <a href=\"https:\/\/docs.oracle.com\/en\/database\/oracle\/oracle-database\/21\/asoag\/encryption-conversions-tablespaces-and-databases1.html#GUID-A9746AB3-A3AE-43AE-8A58-FEA59ABA2A08\" target=\"_blank\" rel=\"noopener\">here<\/a>) since version 21c. For RAC (since they need to share the same wallet), we cannot use local auto-login wallet.<\/p>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\">[oracle@o23fdc21 ~]$ dbca -silent -createDatabase -templateName FREE_Database.dbc -gdbName FREE -adminManaged -sid FREE -sysPassword oracle23ai -systemPassword oracle23ai -createAsContainerDatabase TRUE -useLocalUndoForPDBs TRUE -characterSet AL32UTF8 -emConfiguration NONE -storageType FS -datafileDestination \/opt\/oracle\/oradata\/ -databaseConfigType SINGLE -configureTDE TRUE -tdeWalletRoot \/opt\/oracle\/admin\/FREE\/wallet -tdeWalletLoginType LOCAL_AUTO_LOGIN -TdeWalletPassword 'fdertyhj4567890h32aghte2457AAABB'  -encryptPDBTablespaces ALL -encryptTablespaces ALL\r\n[WARNING] [DBT-06208] The 'SYS' password entered does not conform to the Oracle recommended standards.\r\n   CAUSE:\r\na. Oracle recommends that the password entered should be at least 8 characters in length, contain at least 1 uppercase character, 1 lower case character and 1 digit [0-9].\r\nb.The password entered is a keyword that Oracle does not recommend to be used as password\r\n   ACTION: Specify a strong password. If required refer Oracle documentation for guidelines.\r\n[WARNING] [DBT-06208] The 'SYSTEM' password entered does not conform to the Oracle recommended standards.\r\n   CAUSE:\r\na. Oracle recommends that the password entered should be at least 8 characters in length, contain at least 1 uppercase character, 1 lower case character and 1 digit [0-9].\r\nb.The password entered is a keyword that Oracle does not recommend to be used as password\r\n   ACTION: Specify a strong password. If required refer Oracle documentation for guidelines.\r\n[FATAL] [DBT-08117] The specified TDE keystore type LOCAL_AUTO_LOGIN is not supported for SYSTEM tablespaces encryption in root container (CDB$ROOT).\r\n   ACTION: Either specify the auto-login TDE keystore type or choose not to encrypt SYSTEM tablespaces for root container(CDB$ROOT).\r\n[oracle@o23fdc21 ~]$<\/pre>\n<p style=\"text-align: justify;\">So, the option (to bypass the dbca bug) to create the database is to remove the <strong>encryptTablespaces<\/strong> option:<\/p>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\">[oracle@o23fdc21 ~]$ dbca -silent -createDatabase -templateName FREE_Database.dbc -gdbName FREE -adminManaged -sid FREE -sysPassword oracle23ai -systemPassword oracle23ai -createAsContainerDatabase TRUE -useLocalUndoForPDBs TRUE -characterSet AL32UTF8 -emConfiguration NONE -storageType FS -datafileDestination \/opt\/oracle\/oradata\/ -databaseConfigType SINGLE -configureTDE TRUE -tdeWalletRoot \/opt\/oracle\/admin\/FREE\/wallet -tdeWalletLoginType LOCAL_AUTO_LOGIN -TdeWalletPassword 'fdertyhj4567890h32aghte2457AAABB'  -encryptPDBTablespaces ALL\r\n[WARNING] [DBT-06208] The 'SYS' password entered does not conform to the Oracle recommended standards.\r\n   CAUSE:\r\na. Oracle recommends that the password entered should be at least 8 characters in length, contain at least 1 uppercase character, 1 lower case character and 1 digit [0-9].\r\nb.The password entered is a keyword that Oracle does not recommend to be used as password\r\n   ACTION: Specify a strong password. If required refer Oracle documentation for guidelines.\r\n[WARNING] [DBT-06208] The 'SYSTEM' password entered does not conform to the Oracle recommended standards.\r\n   CAUSE:\r\na. Oracle recommends that the password entered should be at least 8 characters in length, contain at least 1 uppercase character, 1 lower case character and 1 digit [0-9].\r\nb.The password entered is a keyword that Oracle does not recommend to be used as password\r\n   ACTION: Specify a strong password. If required refer Oracle documentation for guidelines.\r\nPrepare for db operation\r\n10% complete\r\nCopying database files\r\n12% complete\r\n40% complete\r\nCreating and starting Oracle instance\r\n42% complete\r\n46% complete\r\n47% complete\r\n51% complete\r\n55% complete\r\n60% complete\r\nCompleting Database Creation\r\n66% complete\r\n69% complete\r\n70% complete\r\nExecuting Post Configuration Actions\r\n100% complete\r\nDatabase creation complete. For details check the logfiles at:\r\n \/opt\/oracle\/cfgtoollogs\/dbca\/FREE.\r\nDatabase Information:\r\nGlobal Database Name:FREE\r\nSystem Identifier(SID):FREE\r\nLook at the log file \"\/opt\/oracle\/cfgtoollogs\/dbca\/FREE\/FREE1.log\" for further details.\r\n[oracle@o23fdc21 ~]$<\/pre>\n<h2 style=\"text-align: justify;\">PASSWORD<\/h2>\n<p style=\"text-align: justify;\">The last TDE wallet type is the traditional PASSWORD. As before, can\u2019t be used together with the option encryptTablespaces equal ALL:<\/p>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\">adminManaged -sid FREE -sysPassword oracle23ai -systemPassword oracle23ai -createAsContainerDatabase TRUE -useLocalUndoForPDBs TRUE -characterSet AL32UTF8 -emConfiguration NONE -storageType FS -datafileDestination \/opt\/oracle\/oradata\/ -databaseConfigType SINGLE -configureTDE TRUE -tdeWalletRoot \/opt\/oracle\/admin\/FREE\/wallet -tdeWalletLoginType PASSWORD -TdeWalletPassword 'fdertyhj4567890h32aghte2457AAABB'  -encryptPDBTablespaces ALL -encryptTablespaces ALL\r\n[WARNING] [DBT-06208] The 'SYS' password entered does not conform to the Oracle recommended standards.\r\n   CAUSE:\r\na. Oracle recommends that the password entered should be at least 8 characters in length, contain at least 1 uppercase character, 1 lower case character and 1 digit [0-9].\r\nb.The password entered is a keyword that Oracle does not recommend to be used as password\r\n   ACTION: Specify a strong password. If required refer Oracle documentation for guidelines.\r\n[WARNING] [DBT-06208] The 'SYSTEM' password entered does not conform to the Oracle recommended standards.\r\n   CAUSE:\r\na. Oracle recommends that the password entered should be at least 8 characters in length, contain at least 1 uppercase character, 1 lower case character and 1 digit [0-9].\r\nb.The password entered is a keyword that Oracle does not recommend to be used as password\r\n   ACTION: Specify a strong password. If required refer Oracle documentation for guidelines.\r\n[FATAL] [DBT-08117] The specified TDE keystore type PASSWORD is not supported for SYSTEM tablespaces encryption in root container (CDB$ROOT).\r\n   ACTION: Either specify the auto-login TDE keystore type or choose not to encrypt SYSTEM tablespaces for root container(CDB$ROOT).\r\n[oracle@o23fdc21 ~]$<\/pre>\n<p style=\"text-align: justify;\">So, the option is to remove the parameter and call the dbca:<\/p>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\">[oracle@o23fdc21 ~]$ dbca -silent -createDatabase -templateName FREE_Database.dbc -gdbName FREE -adminManaged -sid FREE -sysPassword oracle23ai -systemPassword oracle23ai -createAsContainerDatabase TRUE -useLocalUndoForPDBs TRUE -characterSet AL32UTF8 -emConfiguration NONE -storageType FS -datafileDestination \/opt\/oracle\/oradata\/ -databaseConfigType SINGLE -configureTDE TRUE -tdeWalletRoot \/opt\/oracle\/admin\/FREE\/wallet -tdeWalletLoginType PASSWORD -TdeWalletPassword 'fdertyhj4567890h32aghte2457AAABB'  -encryptPDBTablespaces ALL\r\n[WARNING] [DBT-06208] The 'SYS' password entered does not conform to the Oracle recommended standards.\r\n   CAUSE:\r\na. Oracle recommends that the password entered should be at least 8 characters in length, contain at least 1 uppercase character, 1 lower case character and 1 digit [0-9].\r\nb.The password entered is a keyword that Oracle does not recommend to be used as password\r\n   ACTION: Specify a strong password. If required refer Oracle documentation for guidelines.\r\n[WARNING] [DBT-06208] The 'SYSTEM' password entered does not conform to the Oracle recommended standards.\r\n   CAUSE:\r\na. Oracle recommends that the password entered should be at least 8 characters in length, contain at least 1 uppercase character, 1 lower case character and 1 digit [0-9].\r\nb.The password entered is a keyword that Oracle does not recommend to be used as password\r\n   ACTION: Specify a strong password. If required refer Oracle documentation for guidelines.\r\nPrepare for db operation\r\n10% complete\r\nCopying database files\r\n12% complete\r\n40% complete\r\nCreating and starting Oracle instance\r\n42% complete\r\n46% complete\r\n47% complete\r\n51% complete\r\n55% complete\r\n60% complete\r\nCompleting Database Creation\r\n66% complete\r\n69% complete\r\n70% complete\r\nExecuting Post Configuration Actions\r\n100% complete\r\nDatabase creation complete. For details check the logfiles at:\r\n \/opt\/oracle\/cfgtoollogs\/dbca\/FREE.\r\nDatabase Information:\r\nGlobal Database Name:FREE\r\nSystem Identifier(SID):FREE\r\nLook at the log file \"\/opt\/oracle\/cfgtoollogs\/dbca\/FREE\/FREE2.log\" for further details.\r\n[oracle@o23fdc21 ~]$<\/pre>\n<p style=\"text-align: justify;\">And is possible to notice the TDE was created correctly:<\/p>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\">[oracle@o23fdc21 ~]$ sqlplus \/ as sysdba\r\n\r\nSQL*Plus: Release 23.0.0.0.0 - Production on Sun Jul 14 23:09:56 2024\r\nVersion 23.4.0.24.05\r\n\r\nCopyright (c) 1982, 2024, Oracle.  All rights reserved.\r\n\r\n\r\nConnected to:\r\nOracle Database 23ai Free Release 23.0.0.0.0 - Develop, Learn, and Run for Free\r\nVersion 23.4.0.24.05\r\n\r\nSQL&gt; set linesize 255\r\nSQL&gt; select con_id, wallet_type, status from v$encryption_wallet;\r\n\r\n    CON_ID WALLET_TYPE          STATUS\r\n---------- -------------------- ------------------------------\r\n         1 PASSWORD             OPEN\r\n         2 PASSWORD             OPEN\r\n\r\nSQL&gt; select TABLESPACE_NAME, ENCRYPTED, con_id from cdb_tablespaces order by con_id, TABLESPACE_NAME;\r\n\r\nTABLESPACE_NAME                ENC     CON_ID\r\n------------------------------ --- ----------\r\nSYSAUX                         NO           1\r\nSYSTEM                         NO           1\r\nTEMP                           NO           1\r\nUNDOTBS1                       NO           1\r\nUSERS                          YES          1\r\n\r\nSQL&gt; exit\r\nDisconnected from Oracle Database 23ai Free Release 23.0.0.0.0 - Develop, Learn, and Run for Free\r\nVersion 23.4.0.24.05\r\n[oracle@o23fdc21 ~]$<\/pre>\n<h1 style=\"text-align: justify;\">Summary<\/h1>\n<p style=\"text-align: justify;\">Now with 23ai is it possible to create the database, since the beginning, using TDE to encrypt it. All the wallet types are supported but some details are important to be cleared. Cloud databases are more restricted because it forced to use TDE. But on-prem it is not a requirement. In the end, it is important to know how to use the dbca properly for TDE.<\/p>\n<p style=\"text-align: justify;\"><a href=\"https:\/\/www.fernandosimon.com\/blog\/wp-content\/uploads\/2021\/08\/red-checklist.jpg\" target=\"_blank\" rel=\"noopener\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter wp-image-890 size-full\" src=\"https:\/\/www.fernandosimon.com\/blog\/wp-content\/uploads\/2021\/08\/red-checklist.jpg\" alt=\"\" width=\"612\" height=\"418\" srcset=\"https:\/\/www.fernandosimon.com\/blog\/wp-content\/uploads\/2021\/08\/red-checklist.jpg 612w, https:\/\/www.fernandosimon.com\/blog\/wp-content\/uploads\/2021\/08\/red-checklist-300x205.jpg 300w\" sizes=\"auto, (max-width: 612px) 100vw, 612px\" \/><\/a><\/p>\n<p style=\"text-align: justify;\">&nbsp;<\/p>\n<p style=\"text-align: justify;\"><strong>Disclaimer<\/strong>: \u201c<em>The postings on this site are my own and don\u2019t necessarily represent my actual employer positions, strategies, or opinions. The information here was edited to be useful for general purposes, and specific data and identifications were removed to allow reach the generic audience and to be useful for the community. Post protected by copyright.<\/em>\u201d<\/p>\n<p style=\"text-align: justify;\">&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>With the 23ai it is possible to create a database protected with TDE from the beginning. In a previous post, for OCI Cloud and ExaCC, was already described what are the options and what can be used. Here, let\u2019s discuss other options, and troubleshoot some other details. OCI Cloud and ExaCC To contextualize. The OCI, [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"ngg_post_thumbnail":0,"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[179,29,5],"tags":[180,65,184],"class_list":["post-1045","post","type-post","status-publish","format-standard","hentry","category-23ai","category-database","category-oracle","tag-23ai","tag-oracle","tag-tde"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v26.8 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>23ai, DBCA and TDE - Fernando Simon<\/title>\n<meta name=\"description\" content=\"How to create 23ai databases with dbca using new parameters for TDE. Troubleshooting, error, and solution described.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.fernandosimon.com\/blog\/23ai-dbca-and-tde\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"23ai, DBCA and TDE - Fernando Simon\" \/>\n<meta property=\"og:description\" content=\"How to create 23ai databases with dbca using new parameters for TDE. Troubleshooting, error, and solution described.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.fernandosimon.com\/blog\/23ai-dbca-and-tde\/\" \/>\n<meta property=\"og:site_name\" content=\"Fernando Simon\" \/>\n<meta property=\"article:published_time\" content=\"2024-07-18T22:16:26+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-08-13T21:11:13+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.fernandosimon.com\/blog\/wp-content\/uploads\/2021\/08\/red-checklist.jpg\" \/>\n<meta name=\"author\" content=\"Simon\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Simon\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.fernandosimon.com\/blog\/23ai-dbca-and-tde\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.fernandosimon.com\/blog\/23ai-dbca-and-tde\/\"},\"author\":{\"name\":\"Simon\",\"@id\":\"https:\/\/www.fernandosimon.com\/blog\/#\/schema\/person\/386da956604bca0d5be5dd52210c1dd9\"},\"headline\":\"23ai, DBCA and TDE\",\"datePublished\":\"2024-07-18T22:16:26+00:00\",\"dateModified\":\"2024-08-13T21:11:13+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.fernandosimon.com\/blog\/23ai-dbca-and-tde\/\"},\"wordCount\":642,\"commentCount\":0,\"image\":{\"@id\":\"https:\/\/www.fernandosimon.com\/blog\/23ai-dbca-and-tde\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.fernandosimon.com\/blog\/wp-content\/uploads\/2021\/08\/red-checklist.jpg\",\"keywords\":[\"23ai\",\"Oracle\",\"tde\"],\"articleSection\":[\"23ai\",\"Database\",\"Oracle\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/www.fernandosimon.com\/blog\/23ai-dbca-and-tde\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.fernandosimon.com\/blog\/23ai-dbca-and-tde\/\",\"url\":\"https:\/\/www.fernandosimon.com\/blog\/23ai-dbca-and-tde\/\",\"name\":\"23ai, DBCA and TDE - Fernando Simon\",\"isPartOf\":{\"@id\":\"https:\/\/www.fernandosimon.com\/blog\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.fernandosimon.com\/blog\/23ai-dbca-and-tde\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.fernandosimon.com\/blog\/23ai-dbca-and-tde\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.fernandosimon.com\/blog\/wp-content\/uploads\/2021\/08\/red-checklist.jpg\",\"datePublished\":\"2024-07-18T22:16:26+00:00\",\"dateModified\":\"2024-08-13T21:11:13+00:00\",\"author\":{\"@id\":\"https:\/\/www.fernandosimon.com\/blog\/#\/schema\/person\/386da956604bca0d5be5dd52210c1dd9\"},\"description\":\"How to create 23ai databases with dbca using new parameters for TDE. Troubleshooting, error, and solution described.\",\"breadcrumb\":{\"@id\":\"https:\/\/www.fernandosimon.com\/blog\/23ai-dbca-and-tde\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.fernandosimon.com\/blog\/23ai-dbca-and-tde\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.fernandosimon.com\/blog\/23ai-dbca-and-tde\/#primaryimage\",\"url\":\"https:\/\/www.fernandosimon.com\/blog\/wp-content\/uploads\/2021\/08\/red-checklist.jpg\",\"contentUrl\":\"https:\/\/www.fernandosimon.com\/blog\/wp-content\/uploads\/2021\/08\/red-checklist.jpg\",\"width\":612,\"height\":418},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.fernandosimon.com\/blog\/23ai-dbca-and-tde\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.fernandosimon.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"23ai, DBCA and TDE\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.fernandosimon.com\/blog\/#website\",\"url\":\"https:\/\/www.fernandosimon.com\/blog\/\",\"name\":\"Fernando Simon\",\"description\":\"Have you hugged your backup today?\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.fernandosimon.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.fernandosimon.com\/blog\/#\/schema\/person\/386da956604bca0d5be5dd52210c1dd9\",\"name\":\"Simon\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.fernandosimon.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/a3dbc48de62fffb1829befb4a588d789ec6dc5e05977afabb3407a5f37a16482?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/a3dbc48de62fffb1829befb4a588d789ec6dc5e05977afabb3407a5f37a16482?s=96&d=mm&r=g\",\"caption\":\"Simon\"},\"sameAs\":[\"http:\/\/www.fernandosimon.com\"],\"url\":\"https:\/\/www.fernandosimon.com\/blog\/author\/simon\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"23ai, DBCA and TDE - Fernando Simon","description":"How to create 23ai databases with dbca using new parameters for TDE. Troubleshooting, error, and solution described.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.fernandosimon.com\/blog\/23ai-dbca-and-tde\/","og_locale":"en_US","og_type":"article","og_title":"23ai, DBCA and TDE - Fernando Simon","og_description":"How to create 23ai databases with dbca using new parameters for TDE. Troubleshooting, error, and solution described.","og_url":"https:\/\/www.fernandosimon.com\/blog\/23ai-dbca-and-tde\/","og_site_name":"Fernando Simon","article_published_time":"2024-07-18T22:16:26+00:00","article_modified_time":"2024-08-13T21:11:13+00:00","og_image":[{"url":"https:\/\/www.fernandosimon.com\/blog\/wp-content\/uploads\/2021\/08\/red-checklist.jpg","type":"","width":"","height":""}],"author":"Simon","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Simon","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.fernandosimon.com\/blog\/23ai-dbca-and-tde\/#article","isPartOf":{"@id":"https:\/\/www.fernandosimon.com\/blog\/23ai-dbca-and-tde\/"},"author":{"name":"Simon","@id":"https:\/\/www.fernandosimon.com\/blog\/#\/schema\/person\/386da956604bca0d5be5dd52210c1dd9"},"headline":"23ai, DBCA and TDE","datePublished":"2024-07-18T22:16:26+00:00","dateModified":"2024-08-13T21:11:13+00:00","mainEntityOfPage":{"@id":"https:\/\/www.fernandosimon.com\/blog\/23ai-dbca-and-tde\/"},"wordCount":642,"commentCount":0,"image":{"@id":"https:\/\/www.fernandosimon.com\/blog\/23ai-dbca-and-tde\/#primaryimage"},"thumbnailUrl":"https:\/\/www.fernandosimon.com\/blog\/wp-content\/uploads\/2021\/08\/red-checklist.jpg","keywords":["23ai","Oracle","tde"],"articleSection":["23ai","Database","Oracle"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.fernandosimon.com\/blog\/23ai-dbca-and-tde\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.fernandosimon.com\/blog\/23ai-dbca-and-tde\/","url":"https:\/\/www.fernandosimon.com\/blog\/23ai-dbca-and-tde\/","name":"23ai, DBCA and TDE - Fernando Simon","isPartOf":{"@id":"https:\/\/www.fernandosimon.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.fernandosimon.com\/blog\/23ai-dbca-and-tde\/#primaryimage"},"image":{"@id":"https:\/\/www.fernandosimon.com\/blog\/23ai-dbca-and-tde\/#primaryimage"},"thumbnailUrl":"https:\/\/www.fernandosimon.com\/blog\/wp-content\/uploads\/2021\/08\/red-checklist.jpg","datePublished":"2024-07-18T22:16:26+00:00","dateModified":"2024-08-13T21:11:13+00:00","author":{"@id":"https:\/\/www.fernandosimon.com\/blog\/#\/schema\/person\/386da956604bca0d5be5dd52210c1dd9"},"description":"How to create 23ai databases with dbca using new parameters for TDE. Troubleshooting, error, and solution described.","breadcrumb":{"@id":"https:\/\/www.fernandosimon.com\/blog\/23ai-dbca-and-tde\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.fernandosimon.com\/blog\/23ai-dbca-and-tde\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.fernandosimon.com\/blog\/23ai-dbca-and-tde\/#primaryimage","url":"https:\/\/www.fernandosimon.com\/blog\/wp-content\/uploads\/2021\/08\/red-checklist.jpg","contentUrl":"https:\/\/www.fernandosimon.com\/blog\/wp-content\/uploads\/2021\/08\/red-checklist.jpg","width":612,"height":418},{"@type":"BreadcrumbList","@id":"https:\/\/www.fernandosimon.com\/blog\/23ai-dbca-and-tde\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.fernandosimon.com\/blog\/"},{"@type":"ListItem","position":2,"name":"23ai, DBCA and TDE"}]},{"@type":"WebSite","@id":"https:\/\/www.fernandosimon.com\/blog\/#website","url":"https:\/\/www.fernandosimon.com\/blog\/","name":"Fernando Simon","description":"Have you hugged your backup today?","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.fernandosimon.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/www.fernandosimon.com\/blog\/#\/schema\/person\/386da956604bca0d5be5dd52210c1dd9","name":"Simon","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.fernandosimon.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/a3dbc48de62fffb1829befb4a588d789ec6dc5e05977afabb3407a5f37a16482?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/a3dbc48de62fffb1829befb4a588d789ec6dc5e05977afabb3407a5f37a16482?s=96&d=mm&r=g","caption":"Simon"},"sameAs":["http:\/\/www.fernandosimon.com"],"url":"https:\/\/www.fernandosimon.com\/blog\/author\/simon\/"}]}},"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p5ofTp-gR","_links":{"self":[{"href":"https:\/\/www.fernandosimon.com\/blog\/wp-json\/wp\/v2\/posts\/1045","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.fernandosimon.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.fernandosimon.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.fernandosimon.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.fernandosimon.com\/blog\/wp-json\/wp\/v2\/comments?post=1045"}],"version-history":[{"count":0,"href":"https:\/\/www.fernandosimon.com\/blog\/wp-json\/wp\/v2\/posts\/1045\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.fernandosimon.com\/blog\/wp-json\/wp\/v2\/media?parent=1045"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.fernandosimon.com\/blog\/wp-json\/wp\/v2\/categories?post=1045"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.fernandosimon.com\/blog\/wp-json\/wp\/v2\/tags?post=1045"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}