X

The Latest Technology Stack News Directly from EBS Development

Using Fast Offline Conversion to Enable Transparent Data Encryption in EBS

Robert Farrington
Applications Technology Integration

We are pleased to announce a new capability that enables you to perform offline, in-place conversion of datafiles for use with Transparent Data Encryption (TDE). This Fast Offline Conversion feature is now available for use with Oracle E-Business Suite 12.1.3 and 12.2.2 and later 12.2.x databases.

What does this feature do?

Fast Offline Conversion converts existing clear data to TDE-encrypted tablespaces.

The encryption is transparent to the application, so code does not have to be rewritten and existing SQL statements will work unchanged. Any authorized database session can read the encrypted data: the encryption only applies to the database datafiles and backups.

This new process is now the recommended procedure for converting to TDE with minimal downtime and lowest complexity. It supersedes previous methods for converting to TDE.

How do I go about using this feature?

You enable Fast Offline Conversion by applying a patch to your EBS 12.1.0.2 or 11.2.0.4 database. The patch - which is available on request from Oracle Support - enables offline, in-place TDE conversion of datafiles.

Where are the detailed instructions?

Full steps for enabling Fast Offline Conversion are provided in the following My Oracle Support knowledge document:

Related Articles

Join the discussion

Comments ( 5 )
  • Dba Tuesday, November 21, 2017
    Can you confirm once again, through which db onwards this is supported.
  • Robert Farrington Tuesday, November 21, 2017
    Hi Dba,

    For supported EBS and database versions, please refer to Section 2, "Prerequisites" of Doc ID 2322920.1:

    ---

    Supported versions of Oracle E-Business Suite: 12.1.3, 12.2.2 and higher.

    This procedure can be used with Oracle E-Business Suite Database - Enterprise Edition - Version 11.2.0.4 to 12.1.0.2 (Release 11.2 to 12.1).

    ---

    Regards,

    Robert.
  • TomO Monday, November 27, 2017
    I ran thru this in a non-prod last week in 12.1.0.2 with Oct 2017 PSU applied, since that seems to have the bug fix. It went well. I wonder if I can run the encrypt action in parallel, if that would help, split the alter datafile commands into two sql scripts, run from separate sqlplus sessions?
  • Steven Chan Thursday, November 30, 2017
    Hi, Tom,

    We haven't tried that, so your proposed approach would be treated as a customization. As always, I'd recommend thoroughly testing before doing anything irrevocable with a production environment.

    Regards,
    Steven
  • Jaydeep Tuesday, October 30, 2018
    Hi Robert,

    I have a specific query on optimizing the downtime required for TDE at tablespace level on EBS 12.1.3 Oracle Database version 12.1.0.2
    We see MOS Doc ID 2202358.1 provides a way of using physical standby database to minimize downtime using offline in-place data file encryption.

    As per certification, both physical standby database and TDE at tablespace level are certified against EBS 12.1.3. However, when requested through SR 3-18603407641, Oracle Support stated that the method described in Doc ID 2202358.1 is not supported for EBS as it is not tested for EBS.

    Request a second opinion if the method described in MOS Doc ID 2202358.1 will work for EBS 12.1.3 database running on 12.1.0.2 with physical standby database in place.

    Thanks,
    Jaydeep
Please enter your name.Please provide a valid email address.Please enter a comment.CAPTCHA challenge response provided was incorrect. Please try again.