1. 
wallet password 변경

 

변경전 기존 wallet 백업

 

orapki wallet
change_pwd -wallet
wallet_location
[-oldpwd
password ] [-newpwd password]

orapki
wallet change_pwd -wallet /u01/app/wallet -oldpwd oracle -newpwd welcome1


wallet close (old password oracle), 


다시 open (new
password
welcome1
시부터 적용

 

 

2. 
Master Key 변경

 

2-1.변경전 기존 wallet 백업

 

orapki    wallet    change_pwd   -wallet     wallet_location    [-oldpwd     password   ]    [-

 

newpwd password]

 

orapki wallet change_pwd -wallet
/u01/app/wallet -oldpwd oracle -newpwd welcome1

 

2-2. old password wallet close

 

ALTER SYSTEM SET WALLET CLOSE IDENTIFIED BY “oracle

 

 

 

3. Re-Key – wallet의 변경된 비밀번호를 이용

 

alter system set encryption key identified by “welcome1“;

 

 

4. Re-Key후 변경된 Master key의 확인

 

mkstore -wrl wallet_location -list 

저장된 모든 master key에 대한 정보 


mkstore -wrl
wallet_location -viewEntry 
ORACLE.SECURITY.DB.ENCRYPTION.MASTERKEY

현재 사용하고 있는 master key에 대한 정보

 


또는


 

orapki wallet display –wallet /u01/app/wallet



5. wallet 설정 Default / auto open / local auto open:



DB shutdown -> startup 시 확인

 

orapki wallet
create -wallet wallet_location -auto_login [-pwd password] 

orapki wallet create -wallet /u01/app/wallet -auto_login -pwd
welcome1

 





To create a local auto login wallet, use the
following command:

 

 

orapki wallet
create -wallet wallet_location -auto_login_local [-pwd password] 

orapki wallet create -wallet /u01/app/wallet
-auto_login_local -pwd welcome1

 

oracle@:/u01/app/wallet $ ls -alrt cwallet.sso  권한 600, 백업

 

 

 

6.   wallet Recovery:

 

6-1.   
Wallet close ewallet.p12 삭제

 

       DB shutdown / startup 후 데이타 조회

 

       백업받은 ewallet.p12 로 복구


6-2.  Wallet open
상태에서
ewallet.p12 삭제

 

         
DB shutdown / startup
데이타 조회

 

       백업받은 ewallet.p12 로 복구

 

6-3.   
Local auto open 으로 전환 후 cwallet.sso 삭제

 

       Auto login / local auto login 으로 변경을 위해서는 비밀번호가 최소 8 자리 이상이어야 함.

 

       DB shutdown / startup 후 데이타 조회

 

       백업받은 ewallet.p12 로 복구 후 local auto open 으로
변경

By haisins

오라클 DBA 박용석 입니다. haisins@gmail.com 으로 문의 주세요.

9 thoughts on “ORACLE ASO TDE 암호화 KEY 관리 방법”
  1. Hello there! This is my first visit to your blog! We are a group of volunteers and starting
    a new project in a community in the same niche.
    Your blog provided us valuable information to work on. You
    have done a extraordinary job!

  2. Spot on with this write-up, I really feel this web site needs much more attention. I’ll probably be back again to see more,
    thanks for the information!

  3. Hi to every , since I am actually keen of reading this webpage’s post to be updated on a regular basis.
    It includes pleasant data.

  4. Hi! Quick question that’s entirely off topic.
    Do you know how to make your site mobile friendly?
    My weblog looks weird when browsing from my iphone4.
    I’m trying to find a theme or plugin that might be able to resolve this problem.

    If you have any suggestions, please share. Thanks!

  5. That is a great tip especially to those new to the blogosphere.
    Brief but very precise info… Thank you for sharing this
    one. A must read post!

답글 남기기

이메일 주소를 발행하지 않을 것입니다. 필수 항목은 *(으)로 표시합니다