Cloud Security Perspectives and Insights

Now Available: Oracle Key Vault 18.2

Oracle Key Vault (OKV) in the only enterprise-grade key management solution for your Oracle Database estate, whether on-premises or for hybrid cloud. OKV 18.1 introduced the multi-master cluster architecture with up to 16 geographically distributed OKV nodes for continuous key availability. We are now pleased to announce the release of Oracle Key Vault 18.2 with streamlined administration, better security, and easier deployment. From the list of customer-requested improvements, here are some of the highlights:

1.) OKV Server Certificate Rotation
OKV 18.2 introduces the ability to rotate OKV Server certificates without any downtime or intervention on the database side, thereby eliminating the need to update the certificates manually and to re-enroll all endpoints.

2.) Auto-expiring Persistent Cache
Along with reducing the load on the OKV cluster, the optional persistent cache provides access to keys even with network failures. The persistent cache in OKV 18.2 is now protected by an automatically generated password, limiting any use outside of the currently running database. After a database restart, a new cache is automatically created, protected by a new random password.

3.) Secure OKV Client Deployment
After deploying the OKV Client software, the installation package is automatically deleted to limit unauthorized usage.

OKV 18.2 provides robust, scalable, secure, and the best key management solution for Oracle Databases using Transparent Data Encryption (TDE), and we strongly recommend that you upgrade to this release.

For more details, please refer to the release notes.

This release also includes other improvements including updates to embedded Oracle Database, Oracle GoldenGate, and Oracle Linux.

Download OKV 18.2 from Oracle Software Delivery Cloud for fresh installations, or apply patch 30675657 to upgrade existing OKV 12.2 or 18.1 servers.

Be the first to comment

Comments ( 0 )
Please enter your name.Please provide a valid email address.Please enter a comment.CAPTCHA challenge response provided was incorrect. Please try again.