{"id":23300,"date":"2023-03-14T16:56:22","date_gmt":"2023-03-14T15:56:22","guid":{"rendered":"https:\/\/www.dbi-services.com\/blog\/?p=23300"},"modified":"2023-06-20T10:39:04","modified_gmt":"2023-06-20T08:39:04","slug":"unplug-plug-pdb-in-tde-environment","status":"publish","type":"post","link":"https:\/\/www.dbi-services.com\/blog\/unplug-plug-pdb-in-tde-environment\/","title":{"rendered":"Unplug\/Plug PDB in TDE Environment"},"content":{"rendered":"\n<p><strong>By Mouhamadou Diaw<\/strong><\/p>\n\n\n\n<p><\/p>\n\n\n\n<p>In an oracle environment with Transparent Data Encryption (TDE) the transfer of PDB may require additional steps.<\/p>\n\n\n\n<p>In this blog we will see some steps which may be required when doing Unplug and Plug &nbsp;of pluggable database<\/p>\n\n\n\n<p>We plan to unplug the pluggable database PDB1 from PROD01 and plug it into CLNE02. Both container have TDE configured<\/p>\n\n\n\n<p>Source : PROD01&nbsp; with TDE<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>10:37:38 SQL&gt; show PDB1s\n\n    CON_ID CON_NAME                       OPEN MODE  RESTRICTED\n---------- ------------------------------ ---------- ----------\n         2 PDB1$SEED                       READ ONLY  NO\n         3 PDB1                            READ WRITE NO\n10:37:43 SQL&gt;\n<\/code><\/pre>\n\n\n\n<p>Target : CLNE02&nbsp;with TDE<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>10:37:05 SQL&gt; show PDB1s\n\n    CON_ID CON_NAME                       OPEN MODE  RESTRICTED\n---------- ------------------------------ ---------- ----------\n         2 PDB1$SEED                       READ ONLY  NO\n\t 3 POD2                           READ WRITE NO\n10:37:09 SQL&gt;\n<\/code><\/pre>\n\n\n\n<p><strong>Export the encryption key on the source PDB1<\/strong><\/p>\n\n\n\n<p>On the source container PROD01, we have to export the encryption key while connecting to PDB1.<\/p>\n\n\n\n<p>The option force is needed if AUTO LOGIN is used<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>SQL&gt; alter session set container=PDB1;\n\nSession altered.\n\n\n11:24:23 SQL&gt; ADMINISTER KEY MANAGEMENT EXPORT ENCRYPTION KEYS WITH SECRET \"********\" TO '\/home\/oracle\/tde\/export.p12' FORCE keystore IDENTIFIED BY ********;\n\nkeystore altered.\n\n11:24:25 SQL&gt;\n<\/code><\/pre>\n\n\n\n<p>Then verify that the key was exported.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>11:24:25 SQL&gt; host ls -l \/home\/oracle\/tde\/export.p12\n-rw-r--r--. 1 oracle oinstall 2612 Feb 28 11:24 \/home\/oracle\/tde\/export.p12\n\n11:25:36 SQL&gt;\n<\/code><\/pre>\n\n\n\n<p><strong>Unplug PDB1 from PROD01<\/strong><\/p>\n\n\n\n<p>After exporting the key, we can now unplug &nbsp;PDB1<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>11:28:08 SQL&gt; show con_name\n\nCON_NAME\n------------------------------\nCDB$ROOT\n\n11:28:17 SQL&gt; alter pluggable database PDB1 close;\n\nPluggable database altered.\n\n11:28:30 SQL&gt; show PDB1s\n\n    CON_ID CON_NAME                       OPEN MODE  RESTRICTED\n---------- ------------------------------ ---------- ----------\n         2 PDB1$SEED                       READ ONLY  NO\n         3 PDB1                           MOUNTED\n         5 PDB1CLONE                      MOUNTED\n11:28:36 SQL&gt;\n\n\n11:28:36 SQL&gt; ALTER PLUGGABLE DATABASE PDB1 UNPLUG INTO '\/home\/oracle\/PDB1.xml';\n\nPluggable database altered.\n\n11:30:54 SQL&gt;\n<\/code><\/pre>\n\n\n\n<p><strong>Plug the database on CLNE02&nbsp;<\/strong><\/p>\n\n\n\n<p>Now plug &nbsp;PDB1 into CLNE02&nbsp;<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>SQL&gt; show parameter db_name\n\nNAME                                 TYPE        VALUE\n------------------------------------ ----------- ------------------------------\ndb_name                              string      CLNE02\nSQL&gt; show con_name\n\nCON_NAME\n------------------------------\nCDB$ROOT\n\nSQL&gt; CREATE PLUGGABLE DATABASE PDB1 USING '\/home\/oracle\/PDB1.xml';\n\nPluggable database created.\n\nSQL&gt;\n<\/code><\/pre>\n\n\n\n<p>At this level we can open PDB1 in CLNE02 with errors, which is normal as we need to import the encryption key<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>11:37:16 SQL&gt; alter pluggable database PDB1 open;\n\nWarning: PDB1 altered with errors.       \n11:37:34 SQL&gt;\n<\/code><\/pre>\n\n\n\n<p><strong>Import the key into PDB1 on CLNE02<\/strong><\/p>\n\n\n\n<p>Now let&#8217;s import the exported key into PDB1 on CLNE02. <\/p>\n\n\n\n<p>-Open PDB1 in R\/W mode if not<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>13:13:18 SQL&gt; alter pluggable database PDB1 open;\n\nWarning: PDB1 altered with errors.\n\n13:13:35 SQL&gt; show PDB1s\n\n    CON_ID CON_NAME                       OPEN MODE  RESTRICTED\n---------- ------------------------------ ---------- ----------\n         2 PDB1$SEED                       READ ONLY  NO\n         3 POD2                           READ WRITE NO\n         4 PDB1                           READ WRITE YES\n<\/code><\/pre>\n\n\n\n<p>-Open the keystore on PDB if not<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>13:13:46 SQL&gt; alter session set container=PDB1;\n\n\n13:16:55 SQL&gt; ADMINISTER KEY MANAGEMENT SET KEYSTORE OPEN IDENTIFIED BY ********;\n\nkeystore altered.\n\n13:16:59 SQL&gt;\n<\/code><\/pre>\n\n\n\n<p>-And then import the key<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>SQL&gt; ADMINISTER KEY MANAGEMENT IMPORT ENCRYPTION KEYS WITH SECRET ******** FROM '\/home\/oracle\/tde\/export.p12' IDENTIFIED BY ******** WITH BACKUP;\n\n\nkeystore altered.\n<\/code><\/pre>\n\n\n\n<p>-On CLNE02, restart the pluggable database PDB1<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>SQL&gt; show con_name\n\nCON_NAME\n------------------------------\nPDB1\n\n13:18:52 SQL&gt; shutdown\nPluggable Database closed.\n\n13:19:00 SQL&gt; startup\nPluggable Database opened.\n<\/code><\/pre>\n\n\n\n<p>PDB1 should no longer return any error now when starting in open mode<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>SQL&gt; conn \/ as sysdba\nConnected.\n13:21:56 SQL&gt; alter pluggable database PDB1 close;\n\nPluggable database altered.\n\n13:22:07 SQL&gt; alter pluggable database PDB1 open;\n\nPluggable database altered.\n\n13:22:14 SQL&gt; alter pluggable database all save state;\n\nPluggable database altered.\n\n<\/code><\/pre>\n\n\n\n<p>We can then validate on PDB1 that encrypted objects are accessible.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Conclusion<\/h2>\n\n\n\n<p>Hope this blog may help<\/p>\n","protected":false},"excerpt":{"rendered":"<p>By Mouhamadou Diaw In an oracle environment with Transparent Data Encryption (TDE) the transfer of PDB may require additional steps. In this blog we will see some steps which may be required when doing Unplug and Plug &nbsp;of pluggable database We plan to unplug the pluggable database PDB1 from PROD01 and plug it into CLNE02. [&hellip;]<\/p>\n","protected":false},"author":27,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[229,198,59,149],"tags":[875,2856,2868,449,2869],"type_dbi":[],"class_list":["post-23300","post","type-post","status-publish","format-standard","hentry","category-database-administration-monitoring","category-database-management","category-oracle","category-security","tag-oracle-multitenant","tag-oracle-tde","tag-pdb-clone","tag-transparent-data-encryption","tag-unplug-plug-pdb"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v27.2 (Yoast SEO v27.2) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>Unplug\/Plug PDB in TDE Environment - dbi Blog<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.dbi-services.com\/blog\/unplug-plug-pdb-in-tde-environment\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Unplug\/Plug PDB in TDE Environment\" \/>\n<meta property=\"og:description\" content=\"By Mouhamadou Diaw In an oracle environment with Transparent Data Encryption (TDE) the transfer of PDB may require additional steps. In this blog we will see some steps which may be required when doing Unplug and Plug &nbsp;of pluggable database We plan to unplug the pluggable database PDB1 from PROD01 and plug it into CLNE02. [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.dbi-services.com\/blog\/unplug-plug-pdb-in-tde-environment\/\" \/>\n<meta property=\"og:site_name\" content=\"dbi Blog\" \/>\n<meta property=\"article:published_time\" content=\"2023-03-14T15:56:22+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-06-20T08:39:04+00:00\" \/>\n<meta name=\"author\" content=\"Oracle Team\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Oracle Team\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.dbi-services.com\/blog\/unplug-plug-pdb-in-tde-environment\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.dbi-services.com\/blog\/unplug-plug-pdb-in-tde-environment\/\"},\"author\":{\"name\":\"Oracle Team\",\"@id\":\"https:\/\/www.dbi-services.com\/blog\/#\/schema\/person\/66ab87129f2d357f09971bc7936a77ee\"},\"headline\":\"Unplug\/Plug PDB in TDE Environment\",\"datePublished\":\"2023-03-14T15:56:22+00:00\",\"dateModified\":\"2023-06-20T08:39:04+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.dbi-services.com\/blog\/unplug-plug-pdb-in-tde-environment\/\"},\"wordCount\":242,\"commentCount\":2,\"keywords\":[\"Oracle Multitenant\",\"Oracle TDE\",\"PDB clone\",\"Transparent data encryption\",\"Unplug\/Plug PDB\"],\"articleSection\":[\"Database Administration &amp; Monitoring\",\"Database management\",\"Oracle\",\"Security\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/www.dbi-services.com\/blog\/unplug-plug-pdb-in-tde-environment\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.dbi-services.com\/blog\/unplug-plug-pdb-in-tde-environment\/\",\"url\":\"https:\/\/www.dbi-services.com\/blog\/unplug-plug-pdb-in-tde-environment\/\",\"name\":\"Unplug\/Plug PDB in TDE Environment - dbi Blog\",\"isPartOf\":{\"@id\":\"https:\/\/www.dbi-services.com\/blog\/#website\"},\"datePublished\":\"2023-03-14T15:56:22+00:00\",\"dateModified\":\"2023-06-20T08:39:04+00:00\",\"author\":{\"@id\":\"https:\/\/www.dbi-services.com\/blog\/#\/schema\/person\/66ab87129f2d357f09971bc7936a77ee\"},\"breadcrumb\":{\"@id\":\"https:\/\/www.dbi-services.com\/blog\/unplug-plug-pdb-in-tde-environment\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.dbi-services.com\/blog\/unplug-plug-pdb-in-tde-environment\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.dbi-services.com\/blog\/unplug-plug-pdb-in-tde-environment\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Accueil\",\"item\":\"https:\/\/www.dbi-services.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Unplug\/Plug PDB in TDE Environment\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.dbi-services.com\/blog\/#website\",\"url\":\"https:\/\/www.dbi-services.com\/blog\/\",\"name\":\"dbi Blog\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.dbi-services.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.dbi-services.com\/blog\/#\/schema\/person\/66ab87129f2d357f09971bc7936a77ee\",\"name\":\"Oracle Team\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/secure.gravatar.com\/avatar\/f711f7cd2c9b09bf2627133755b569fb5be0694810cfd33033bdd095fedba86d?s=96&d=mm&r=g\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/f711f7cd2c9b09bf2627133755b569fb5be0694810cfd33033bdd095fedba86d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/f711f7cd2c9b09bf2627133755b569fb5be0694810cfd33033bdd095fedba86d?s=96&d=mm&r=g\",\"caption\":\"Oracle Team\"},\"url\":\"https:\/\/www.dbi-services.com\/blog\/author\/oracle-team\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Unplug\/Plug PDB in TDE Environment - dbi Blog","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.dbi-services.com\/blog\/unplug-plug-pdb-in-tde-environment\/","og_locale":"en_US","og_type":"article","og_title":"Unplug\/Plug PDB in TDE Environment","og_description":"By Mouhamadou Diaw In an oracle environment with Transparent Data Encryption (TDE) the transfer of PDB may require additional steps. In this blog we will see some steps which may be required when doing Unplug and Plug &nbsp;of pluggable database We plan to unplug the pluggable database PDB1 from PROD01 and plug it into CLNE02. [&hellip;]","og_url":"https:\/\/www.dbi-services.com\/blog\/unplug-plug-pdb-in-tde-environment\/","og_site_name":"dbi Blog","article_published_time":"2023-03-14T15:56:22+00:00","article_modified_time":"2023-06-20T08:39:04+00:00","author":"Oracle Team","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Oracle Team","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.dbi-services.com\/blog\/unplug-plug-pdb-in-tde-environment\/#article","isPartOf":{"@id":"https:\/\/www.dbi-services.com\/blog\/unplug-plug-pdb-in-tde-environment\/"},"author":{"name":"Oracle Team","@id":"https:\/\/www.dbi-services.com\/blog\/#\/schema\/person\/66ab87129f2d357f09971bc7936a77ee"},"headline":"Unplug\/Plug PDB in TDE Environment","datePublished":"2023-03-14T15:56:22+00:00","dateModified":"2023-06-20T08:39:04+00:00","mainEntityOfPage":{"@id":"https:\/\/www.dbi-services.com\/blog\/unplug-plug-pdb-in-tde-environment\/"},"wordCount":242,"commentCount":2,"keywords":["Oracle Multitenant","Oracle TDE","PDB clone","Transparent data encryption","Unplug\/Plug PDB"],"articleSection":["Database Administration &amp; Monitoring","Database management","Oracle","Security"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.dbi-services.com\/blog\/unplug-plug-pdb-in-tde-environment\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.dbi-services.com\/blog\/unplug-plug-pdb-in-tde-environment\/","url":"https:\/\/www.dbi-services.com\/blog\/unplug-plug-pdb-in-tde-environment\/","name":"Unplug\/Plug PDB in TDE Environment - dbi Blog","isPartOf":{"@id":"https:\/\/www.dbi-services.com\/blog\/#website"},"datePublished":"2023-03-14T15:56:22+00:00","dateModified":"2023-06-20T08:39:04+00:00","author":{"@id":"https:\/\/www.dbi-services.com\/blog\/#\/schema\/person\/66ab87129f2d357f09971bc7936a77ee"},"breadcrumb":{"@id":"https:\/\/www.dbi-services.com\/blog\/unplug-plug-pdb-in-tde-environment\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.dbi-services.com\/blog\/unplug-plug-pdb-in-tde-environment\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.dbi-services.com\/blog\/unplug-plug-pdb-in-tde-environment\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Accueil","item":"https:\/\/www.dbi-services.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Unplug\/Plug PDB in TDE Environment"}]},{"@type":"WebSite","@id":"https:\/\/www.dbi-services.com\/blog\/#website","url":"https:\/\/www.dbi-services.com\/blog\/","name":"dbi Blog","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.dbi-services.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/www.dbi-services.com\/blog\/#\/schema\/person\/66ab87129f2d357f09971bc7936a77ee","name":"Oracle Team","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/f711f7cd2c9b09bf2627133755b569fb5be0694810cfd33033bdd095fedba86d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/f711f7cd2c9b09bf2627133755b569fb5be0694810cfd33033bdd095fedba86d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/f711f7cd2c9b09bf2627133755b569fb5be0694810cfd33033bdd095fedba86d?s=96&d=mm&r=g","caption":"Oracle Team"},"url":"https:\/\/www.dbi-services.com\/blog\/author\/oracle-team\/"}]}},"_links":{"self":[{"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/posts\/23300","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/users\/27"}],"replies":[{"embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/comments?post=23300"}],"version-history":[{"count":6,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/posts\/23300\/revisions"}],"predecessor-version":[{"id":26155,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/posts\/23300\/revisions\/26155"}],"wp:attachment":[{"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/media?parent=23300"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/categories?post=23300"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/tags?post=23300"},{"taxonomy":"type","embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/type_dbi?post=23300"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}