Scrambling Sensitive Data in E-Business Suite Release 12 Cloned Environments

Securing the Oracle E-Business Suite includes protecting the underlying E-Business data in production and non-production databases.  While steps can be taken to provide a secure configuration to limit EBS access, a better approach to protecting non-production data is simply to scramble (mask) the data in the non-production copy. 

You can use the Oracle Data Masking Pack with Oracle Enterprise Manager today to scramble sensitive data in cloned environments. Due to data dependencies, scrambling E-Business Suite data is not a trivial task.  The data needs to be scrubbed in such a way that allows the application to continue to function. 

Using the Data Masking Pack in E-Business Suite environments is now easier with the release of new set of templates for E-Business Suite databases:

This template works with the Oracle Data Masking Pack and Oracle Enterprise Manager to obscure sensitive E-Business Suite information that is copied from production to non-production environments. 

Is there a charge for this?

Yes. You must purchase licenses for Oracle Enterprise Manager and the Oracle Data Masking Pack plug-in. The Oracle E-Business Suite 12.1.3 Template for the Data Masking Pack is included with the Oracle Data Masking Pack license.  You can contact your Oracle account manager for more details about licensing.

What does data masking do in E-Business Suite environments?

Application data masking does the following:

  • De-identify the data:  Scramble identifiers of individuals, also known as personally identifiable information or PII.  Examples include information such as name, account, address, location, and driver's license number.
  • Mask sensitive data:  Mask data that, if associated with personally identifiable information (PII), would cause privacy concerns.  Examples include compensation, health and employment information.  
  • Maintain data validity:  Provide a fully functional application.

How can EBS customers use data masking?

The Oracle E-Business Suite Template for Data Masking Pack can be used in situations where confidential or regulated data needs to be shared with other non-production users who need access to some of the original data, but not necessarily every table.  Examples of non-production users include internal application developers or external business partners such as offshore testing companies, suppliers or customers.  

The Oracle E-Business Suite Template for Data Masking Pack is applied to a non-production environment with the Enterprise Manager Grid Control Data Masking Pack.  When applied, the Oracle E-Business Suite Template for Data Masking Pack will create an irreversibly scrambled version of your production database for development and testing.  


References

For additional information on the Oracle E-Business Suite Template for Data Masking Pack please refer to the following:

Related Articles

Comments:

Hello, Elke

Can we use it with CC 12c?
Or with EM 11g only?

Cheers,
Mark

Posted by Mark on May 29, 2012 at 10:05 PM PDT #

Mark,

The E-Business Suite Template for Data Masking is currently certified with Enterprise Manager 11g only. Continue to watch this blog for updates regarding certification with Enterprise Manager 12c.

Thanks.
Elke

Posted by Elke Phelps (Oracle Development) on May 30, 2012 at 04:28 AM PDT #

Please note according to note 1437485.1 you need to apply Patch 12833678 on Enterprise Manager 11g PSU5. We have Enterprise Manager 11g PSU6 and there is no patch for this version. We had to raise an SR to get one created. So if you are at PSU6 you will have to wait for Oracle to create the patch.

Posted by Cliff on May 30, 2012 at 12:41 PM PDT #

"Is there a charge for this?

Yes. You must purchase licenses for Oracle Enterprise Manager and the Oracle Data Masking Pack plug-in."

Elke... I think you phrased that incorrectly. To my knowledge there is no license that needs to be purchased for Oracle Enterprise Manager. The only reference to licensing costs in the latest licensing guide ( http://www.oracle.com/us/corporate/pricing/price-lists/index.html ) are for the Add-on packs.

Perhaps also relevant, the database for the Oracle Enterprise Manager repository also need not be licensed -
http://docs.oracle.com/cd/E11882_01/license.112/e10594/editions.htm#CJAHFHBJ

Infrastructure Repository Databases

A separate Oracle Database can be installed and used as a Recovery Manager (RMAN) repository without additional license requirements, provided that all the Oracle databases managed in this repository are correctly licensed. This repository database may also be used for the Oracle Enterprise Grid Control repository. It may not be used or deployed for other uses.

A separate Oracle Database can be installed and used as an Oracle Enterprise Manager Grid Control (OEM Grid Control) repository without additional license requirements, provided that all the targets (databases, applications, and so forth) managed in this repository are correctly licensed. This database may also be used for the RMAN repository. It may not be used or deployed for other uses.
--
I realize you're in development and not a licensing expert, so I'll ask it this way - are you aware of any changes in the above mentioned policies?

Posted by Jay Weinshenker on June 05, 2012 at 11:49 AM PDT #

Hi Elke,
Is the Data Scramble is simply a patch? If yes, then can we apply this using EBS application patch Utility?

Regards,
Suvendu

Posted by Suvendu on July 09, 2012 at 12:55 AM PDT #

Jay,

Thanks for your update and inquiry. I am not aware of any changes to the licensing policies you referenced.

Thanks.
Elke

Posted by Elke Phelps (Oracle Development) on July 09, 2012 at 06:02 AM PDT #

Suvendu,

Thanks for your inquiry.

The Oracle E-Business Suite Release 12.1.3 Data Masking Template is delivered with My Oracle Support as a patch. The patch itself need not be applied to the Oracle E-Business Suite, but rather extracted and utilized in Oracle Enterprise Grid Control.

For additional details, refer to the patch README and Using the Oracle E-Business Suite, Release 12.1.3 Template for the Data Masking Pack, Note 1437485.1.

Note: As per this article, you are required to license the EM Data Masking Pack in order to utilize the functionality delivered with patch 13898999, Oracle E-Business Suite Release 12.1.3 Template for Data Masking Pack.

Thanks.
Elke

Posted by Elke Phelps (Oracle Development) on July 09, 2012 at 06:08 AM PDT #

Can you tell me if the Masking Pack uses the E-Business API's or does it directly update the relevant tables? If it doesn't use the API's, what's Oracle Support's position?

Posted by guest on December 14, 2012 at 12:43 AM PST #

Hi Elke!
We are planning to upgrade 12.1.1 to 12.1.3.
But is there any way or work around to scramble data in 12.1.1?

Thanx.

Posted by Rawish Siddiqui on December 17, 2012 at 09:38 PM PST #

Rawish,

Thanks for the inquiry. Currently, there is not a template for data masking for E-Business Suite Release 12.1.1. We currently do not have plans to release a template for data masking for E-Business Suite Release 12.1.1.

You could consider altering the delivered E-Business Suite Release 12.1.3 Template for Data Masking and execute it in an E-Business Suite Release 12.1.1 enviornment. WARNING: Altering the E-Business Suite Release 12.1.3 Template for Data Masking and executing it in an E-Busines Suite Release 12.1.1 environment is not a certified configuration. You will not receive Oracle support if you choose to execute the E-Business Suite Release 12.1.3 Template for Data Masking in an E-Business Suite 12.1.1 environment.

Good luck with your upgrade to E-Business Suite Release 12.1.3.
Regards,
Elke

Posted by Elke Phelps (Oracle Development) on December 18, 2012 at 07:28 AM PST #

hi elke
i've read the blog content regarding masking and much of the reference material available online but have not seen a reference to oracle's fusion apps. can you confirm that the same or similar masking capability is available for the fusion apps? if it is available for fusion, i would also like your thoughts on the feasibility of using the masking capability in an R12/fusion co-existence model...i.e. what are the challenges, if any?
ben h

Posted by guest on January 24, 2013 at 11:12 AM PST #

Hi, Ben,

This blog is dedicated to the E-Business Suite. I'm afraid that we don't have any insight into Fusion Applications. I'd recommend logging a Service Request against Fusion Apps for certification questions about that product family.

Can you elaborate on how you might wish to use data scrambling in a coexistence scenario?

Regards,
Steven

Posted by Steven Chan on January 25, 2013 at 09:45 AM PST #

Are there any data masking templates for ebusiness 11.5.10.2?

Posted by guest on May 22, 2013 at 01:18 PM PDT #

Guest,
All our efforts are focused on future releases. We only have templates for Data Masking for Release 12 at this time.

Posted by Max Arderius on May 23, 2013 at 07:44 AM PDT #

Hi Steven

We are going to implement data masking pack on our ebs 12.1.3 env using dbconsole OEM 11.2.0.3. But i did't find any reference or any white paper on this. Please let me know the feasibility of this.

thanks

jatin

Posted by jatin on August 18, 2013 at 02:28 AM PDT #

Jatin,

Thanks for the inquiry. The Oracle E-Business Suite Release 12.1.3 Template for Data Masking requires Oracle Enterprise Manager Grid Control and the data masking pack. We do not currently have plans to certify this solution with Oracle DB Console.

Additional details and prerequisites required for the Oracle E-Business Suite Release 12.1.3 Template for Data Masking Pack are provided in the following My Oracle Support Knowledge Documents:

Enterprise Manager Grid Control 11g:
•Using the Oracle E-Business Suite, Release 12.1.3 Template for the Data Masking Pack (Note 1437485.1)

For Enterprise Manager Grid Control 12c:
•Using Oracle E-Business Suite Release 12.1.3 Template for the Data Masking Pack with Oracle Enterprise Manager 12.1.0.2 Data Masking Tool (Note 1481916.1)

Thanks.
Elke

Posted by Elke Phelps (Oracle Development) on August 19, 2013 at 09:25 AM PDT #

Hi,
I was referring to metalin id Using Oracle E-Business Suite Release 12.1.3 Template for the Data Masking Pack with Oracle Enterprise Manager 11g (Doc ID 1437485.1) where it states to apply patch Patch 12833678 on OEM 11g PSU5. When I read the readme.txt for this patch, this patch needs to be applied on OMS ORACLE BINARIES. I have 11.2.0.3 database with OEM for standalone database configured. I am not using 11g grid control. So how do I apply this OMS patch on ORACLE binaries?

Posted by Aman Vats on January 22, 2014 at 10:16 AM PST #

Hi, Aman,

I'm sorry to hear that you've encountered an issue with this.

We can provide general conceptual guidance here, but I'm afraid that this blog isn't the best place to get technical support for specific issues like the one that you're working through.

Your best bet would be to log a formal Service Request via My Oracle Support (formerly Metalink) to get one of our OEM specialists engaged.

Regards,
Steven

Posted by Steven Chan on January 22, 2014 at 01:33 PM PST #

Aman,

Thanks for the inquiry. When using the Data Masking Pack and Oracle E-Business Suite Masking Template, you must deploy with either Oracle Enterprise Manager 11g (Note 1437485.1) or Oracle Enterprise Manager 12c (Note 1481916.1). Deploying with database control is not certified.

Thanks.
Elke

Posted by Elke Phelps (Oracle Development) on January 23, 2014 at 07:13 AM PST #

Post a Comment:
  • HTML Syntax: NOT allowed
About

Search

Categories
Archives
« April 2014
SunMonTueWedThuFriSat
  
1
4
5
6
7
8
9
10
11
12
13
14
19
20
21
24
25
26
27
28
29
30
   
       
Today