{"id":9823,"date":"2017-02-26T19:57:13","date_gmt":"2017-02-26T18:57:13","guid":{"rendered":"https:\/\/www.dbi-services.com\/blog\/oracle-12cr2-online-tablespace-encryption\/"},"modified":"2017-02-26T19:57:13","modified_gmt":"2017-02-26T18:57:13","slug":"oracle-12cr2-online-tablespace-encryption","status":"publish","type":"post","link":"https:\/\/www.dbi-services.com\/blog\/oracle-12cr2-online-tablespace-encryption\/","title":{"rendered":"Oracle 12cR2: Online tablespace encryption"},"content":{"rendered":"<h2>By Franck Pachot<\/h2>\n<p>.<br \/>\nBy default, all data is visible in the datafiles. Transparent Tablespace Encryption (TDE) can be used to get them encrypted. It requires Enterprise Edition plus Advanced Security Option. Except in the Oracle Cloud when it is available &#8211; and mandatory &#8211; in all editions. And we can foresee that security policies will be enforced in the future years, by law or because companies realize their files can be stolen. This means that lot of databases will have to be encrypted, and this may take too long to do it during a maintenance window. In 12.2 we can encrypt online. Online means that we can do it while our application is running, but of course there is a performance overhead on the system.<br \/>\n<!--more--><br \/>\nI&#8217;ve run a SLOB workload with reads and writes (PCT_UPDATE=25). Four times the same workload:<\/p>\n<ul>\n<li>during the first one, I encrypted the tablespace online<\/li>\n<li>the second one is running on the encrypted tablespace<\/li>\n<li>during the third one, I decrypted the tablespace online<\/li>\n<li>the fourth one is running on the decrypted tablespace<\/li>\n<\/ul>\n<p>Here is the ASH visualized with Orachrome Lighty:<\/p>\n<p><a href=\"https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/sites\/2\/2022\/04\/Online_encryption_ASH_Response_Time.png\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/sites\/2\/2022\/04\/Online_encryption_ASH_Response_Time.png\" alt=\"Online_encryption_ASH_Response_Time\" width=\"1709\" height=\"177\" class=\"alignnone size-full wp-image-14982\" \/><\/a><\/p>\n<p>The dark blue is &#8216;db file sequential read&#8217; is ny 4 SLOB sessions activity. Light blue is all background activity (DBWR, LGWR) and the encrypt\/decrypt (db file parallel write).<br \/>\nThe green is CPU activity. The brown is free buffer gets: DBWR can&#8217;t keep up with the rate of changes we are doing, while encrypting the tablespace.<\/p>\n<p>You may wonder how I was able to have un-encrypted tablespaces on 12.2 which is available only on the Oracle Cloud where encryption is mandatory. This is explained in <a href=\"https:\/\/www.dbi-services.com\/blog\/oracle-public-cloud-12cr2-tde-is-not-an-option\/\" target=\"_blank\" rel=\"noopener noreferrer\">Oracle Public Cloud 12cR2: TDE is not an option<\/a>. This means that I created the SLOB database and I have created the wallet.<\/p>\n<h3>Configure the TDE keystore<\/h3>\n<p>I&#8217;ve created the directory<\/p>\n<pre><code>mkdir -p \/u01\/app\/oracle\/admin\/SLOB\/tde_wallet\n<\/code><\/pre>\n<p>I declared it in sqlnet.ora<\/p>\n<pre><code>ENCRYPTION_WALLET_LOCATION=(SOURCE=(METHOD=FILE)(METHOD_DATA=(DIRECTORY=\/u01\/app\/oracle\/admin\/SLOB\/tde_wallet)))\n<\/code><\/pre>\n<p>I created the wallet<\/p>\n<pre><code>administer key management create keystore '\/u01\/app\/oracle\/admin\/SLOB\/tde_wallet' identified by oracle;\n<\/code><\/pre>\n<p>Opened it<\/p>\n<pre><code>administer key management set keystore open identified by oracle;\n<\/code><\/pre>\n<p>Created the master key<\/p>\n<pre><code>administer key management set key identified by oracle with backup;\n<\/code><\/pre>\n<p>Optionally created an auto-login wallet<\/p>\n<pre><code>administer key management create auto_login keystore from keystore '\/u01\/app\/oracle\/admin\/SLOB\/tde_wallet' identified by oracle;\n<\/code><\/pre>\n<h3>Statspack<\/h3>\n<p>I\u2019ll show some statistics for the following runs: Inital (when not encrypted), Encryption (when encryption is running concurrently), Encrypted (when tablespace encryption has been completed), Decryption (when decrypt is running concurrently) and Decrypted (once decryption is completed).<\/p>\n<h3>Run on non-encrypted tablespace<\/h3>\n<pre><code>Load Profile              Per Second    Per Transaction    Per Exec    Per Call\n~~~~~~~~~~~~      ------------------  ----------------- ----------- -----------\n      DB time(s):                4.0                0.1        0.02        6.39\n       DB CPU(s):                0.4                0.0        0.00        0.68\n       Redo size:        1,064,743.9           18,829.0\n   Logical reads:           15,635.7              276.5\n   Block changes:            7,293.4              129.0\n  Physical reads:            9,451.4              167.1\n Physical writes:            3,303.2               58.4<\/code><\/pre>\n<pre><code>Top 5 Timed Events                                                    Avg %Total\n~~~~~~~~~~~~~~~~~~                                                   wait   Call\nEvent                                            Waits    Time (s)   (ms)   Time\n----------------------------------------- ------------ ----------- ------ ------\ndb file sequential read                        817,591       1,000      1   48.9\nlog file parallel write                         12,258         408     33   20.0\ndb file parallel write                          18,284         217     12   10.6\nCPU time                                                       128           6.3\ndb file parallel read                           46,263         121      3    5.9<\/code><\/pre>\n<pre><code>Time Model System Stats  DB\/Inst: SLOB\/SLOB  Snaps: 26-27\n-&gt; Ordered by % of DB time desc, Statistic name\n&nbsp;\nStatistic                                       Time (s) % DB time\n----------------------------------- -------------------- ---------\nsql execute elapsed time                         1,201.2     100.0\nDB CPU                                             127.8      10.6\nPL\/SQL execution elapsed time                        1.7        .1\nparse time elapsed                                   0.0        .0\nconnection management call elapsed                   0.0        .0\nhard parse elapsed time                              0.0        .0\nTablespace encryption elapsed time                   0.0        .0\nrepeated bind elapsed time                           0.0        .0\nDB time                                          1,201.7<\/code><\/pre>\n<h3>Run during tablespace encryption<\/h3>\n<p>As soon as I started this SLOB run, I started the encryption:<\/p>\n<pre><code>alter tablespace IOPS encryption encrypt;<\/code><\/pre>\n<pre><code>Load Profile              Per Second    Per Transaction    Per Exec    Per Call\n~~~~~~~~~~~~      ------------------  ----------------- ----------- -----------\n      DB time(s):                4.8                0.1        0.03        8.27\n       DB CPU(s):                0.4                0.0        0.00        0.72\n       Redo size:          644,447.5           18,839.1\n   Logical reads:            9,441.5              276.0\n   Block changes:            4,412.8              129.0\n  Physical reads:            5,702.6              166.7\n Physical writes:            1,952.0               57.1<\/code><\/pre>\n<pre><code>Time Model System Stats  DB\/Inst: SLOB\/SLOB  Snaps: 28-29\n-&gt; Ordered by % of DB time desc, Statistic name\n&nbsp;\nStatistic                                       Time (s) % DB time\n----------------------------------- -------------------- ---------\nsql execute elapsed time                         1,455.0      99.9\nDB CPU                                             126.9       8.7\nTablespace encryption elapsed time                  15.4       1.1\nTablespace encryption cpu time                      12.1        .8<\/code><\/pre>\n<pre><code>\nTop 5 Timed Events                                                    Avg %Total\n~~~~~~~~~~~~~~~~~~                                                   wait   Call\nEvent                                            Waits    Time (s)   (ms)   Time\n----------------------------------------- ------------ ----------- ------ ------\ndb file sequential read                        546,294         660      1   30.8\nfree buffer waits                               30,704         325     11   15.2\nlog file parallel write                          8,057         304     38   14.2\ndb file parallel write                           9,929         260     26   12.1\ndb file async I\/O submit                         6,304         185     29    8.7\n<\/code><\/pre>\n<pre><code>Statistic                                      Total     per Second    per Trans\n--------------------------------- ------------------ -------------- ------------\nsession logical reads                      2,860,788        9,441.5        276.0\nconsistent gets                            2,154,358        7,110.1        207.9\nblocks decrypted                             850,557        2,807.1         82.1\nblocks encrypted                           1,042,777        3,441.5        100.6<\/code><\/pre>\n<h3>Run on encrypted tablespace<\/h3>\n<pre><code>Load Profile              Per Second    Per Transaction    Per Exec    Per Call\n~~~~~~~~~~~~      ------------------  ----------------- ----------- -----------\n      DB time(s):                4.0                0.1        0.02        6.95\n       DB CPU(s):                0.5                0.0        0.00        0.95\n       Redo size:        1,057,446.8           18,806.5\n   Logical reads:           15,534.1              276.3\n   Block changes:            7,248.4              128.9\n  Physical reads:            9,415.8              167.5\n Physical writes:            3,266.7               58.1<\/code><\/pre>\n<pre><code>Time Model System Stats  DB\/Inst: SLOB\/SLOB  Snaps: 30-31\n-&gt; Ordered by % of DB time desc, Statistic name\n&nbsp;\nStatistic                                       Time (s) % DB time\n----------------------------------- -------------------- ---------\nsql execute elapsed time                         1,201.1      99.9\nDB CPU                                             164.7      13.7\nTablespace encryption elapsed time                  19.0       1.6\nTablespace encryption cpu time                      10.1        .8<\/code><\/pre>\n<pre><code>Top 5 Timed Events                                                    Avg %Total\n~~~~~~~~~~~~~~~~~~                                                   wait   Call\nEvent                                            Waits    Time (s)   (ms)   Time\n----------------------------------------- ------------ ----------- ------ ------\ndb file sequential read                        824,329         958      1   47.3\nlog file parallel write                         12,207         416     34   20.5\ndb file parallel write                          17,405         202     12   10.0\nCPU time                                                       166           8.2\ndb file parallel read                           46,394         113      2    5.6<\/code><\/pre>\n<pre><code>Statistic                                      Total     per Second    per Trans\n--------------------------------- ------------------ -------------- ------------\nsession logical reads                      4,706,832       15,534.1        276.3\nconsistent gets                            3,546,519       11,704.7        208.2\nblocks decrypted                           2,852,666        9,414.7        167.4\nblocks encrypted                             989,254        3,264.9         58.1\n<\/code><\/pre>\n<h3>Run during tablespace decryption<\/h3>\n<p>As soon as I started this SLOB run, I started the decryption:<\/p>\n<pre><code>alter tablespace IOPS encryption decrypt;<\/code><\/pre>\n<pre><code>Load Profile              Per Second    Per Transaction    Per Exec    Per Call\n~~~~~~~~~~~~      ------------------  ----------------- ----------- -----------\n      DB time(s):                4.9                0.2        0.04        7.56\n       DB CPU(s):                0.4                0.0        0.00        0.61\n       Redo size:          606,680.3           19,111.0\n   Logical reads:            8,817.1              277.8\n   Block changes:            4,121.4              129.8\n  Physical reads:            5,294.9              166.8\n Physical writes:            1,827.2               57.6<\/code><\/pre>\n<pre><code>Top 5 Timed Events                                                    Avg %Total\n~~~~~~~~~~~~~~~~~~                                                   wait   Call\nEvent                                            Waits    Time (s)   (ms)   Time\n----------------------------------------- ------------ ----------- ------ ------\ndb file sequential read                        515,429         629      1   25.9\nfree buffer waits                               34,335         362     11   14.9\nlog file parallel write                          7,287         293     40   12.1\ndirect path write                                7,703         275     36   11.3\ndb file parallel write                           9,966         270     27   11.1<\/code><\/pre>\n<pre><code>Time Model System Stats  DB\/Inst: SLOB\/SLOB  Snaps: 32-33\n-&gt; Ordered by % of DB time desc, Statistic name\n&nbsp;\nStatistic                                       Time (s) % DB time\n----------------------------------- -------------------- ---------\nsql execute elapsed time                         1,464.6      99.9\nDB CPU                                             117.9       8.0\nTablespace encryption elapsed time                   9.4        .6\nTablespace encryption cpu time                       4.6        .3<\/code><\/pre>\n<pre><code>Statistic                                Total     per Second    per Trans\n--------------------------------- ------------------ -------------- ------------\nsession logical reads                      2,662,776        8,817.1        277.8\nconsistent gets                            2,001,129        6,626.3        208.7\nblocks decrypted                           1,026,940        3,400.5        107.1\nblocks encrypted                             696,105        2,305.0         72.6\n<\/code><\/pre>\n<h3>Run on decrypted tablespace<\/h3>\n<pre><code>Load Profile              Per Second    Per Transaction    Per Exec    Per Call\n~~~~~~~~~~~~      ------------------  ----------------- ----------- -----------\n      DB time(s):                4.0                0.1        0.02        6.79\n       DB CPU(s):                0.4                0.0        0.00        0.72\n       Redo size:        1,060,856.5           18,876.7\n   Logical reads:           15,565.8              277.0\n   Block changes:            7,258.6              129.2\n  Physical reads:            9,418.8              167.6\n Physical writes:            3,330.5               59.3<\/code><\/pre>\n<pre><code>Top 5 Timed Events                                                    Avg %Total\n~~~~~~~~~~~~~~~~~~                                                   wait   Call\nEvent                                            Waits    Time (s)   (ms)   Time\n----------------------------------------- ------------ ----------- ------ ------\ndb file sequential read                        818,717         999      1   42.1\nlog file parallel write                         11,799         421     36   17.8\ndirect path write                                8,887         299     34   12.6\ndb file parallel write                          18,817         222     12    9.4\nCPU time                                                       129           5.4<\/code><\/pre>\n<pre><code>Time Model System Stats  DB\/Inst: SLOB\/SLOB  Snaps: 34-35\n-&gt; Ordered by % of DB time desc, Statistic name\n&nbsp;\nStatistic                                       Time (s) % DB time\n----------------------------------- -------------------- ---------\nsql execute elapsed time                         1,201.1     100.0\nDB CPU                                             127.1      10.6\nPL\/SQL execution elapsed time                        1.7        .1\nparse time elapsed                                   0.0        .0\nconnection management call elapsed                   0.0        .0\nTablespace encryption cpu time                       0.0        .0\nTablespace encryption elapsed time                   0.0        .0<\/code><\/pre>\n<pre><code>Statistic                                Total     per Second    per Trans\n--------------------------------- ------------------ -------------- ------------\nsession logical reads                      4,685,294       15,565.8        277.0\nconsistent gets                            3,528,610       11,723.0        208.6\nblocks decrypted                                 271            0.9          0.0\nblocks encrypted                                  10            0.0          0.0\n<\/code><\/pre>\n<h3>Observations<\/h3>\n<p>During encryption and decryption, we have contention on &#8216;free buffer waits&#8217;. When running a workload that is I\/O bound, and with updates, the DBWR cannot keep-up when encryption\/decryption is running in parallel. Online encryption works like online datafile move: there is a double write, one the the current file and one to the file encrypted one. Only when completed, the reads and writes are directed to ne new file and the old one is removed.<\/p>\n<p>The statistics &#8216;blocks decrypted&#8217; and &#8216;block encrypted&#8217; are related to reads and writes from an encrypted tablespace.<\/p>\n<p>The Time Model &#8216;Tablespace encryption&#8217; statistics are significant only when the tablespace is encrypted, or during encryption\/decryption. But the time is not so significant: 1% of DB Time. I&#8217;m not completely sure about how to interpret it and it is not yet documented. From my test, it looks like it measures the overhead of reading from encrypted tablespaces.<\/p>\n<p>But fore sure, having the tablespaces encrypted is not a big overhead, and online encryption can be useful to avoid a large maintenance window (it can take few hours to encrypt hundred of GB) but don&#8217;t run it at a time where you have lot of modifications.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>By Franck Pachot . By default, all data is visible in the datafiles. Transparent Tablespace Encryption (TDE) can be used to get them encrypted. It requires Enterprise Edition plus Advanced Security Option. Except in the Oracle Cloud when it is available &#8211; and mandatory &#8211; in all editions. And we can foresee that security policies [&hellip;]<\/p>\n","protected":false},"author":27,"featured_media":9824,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[229],"tags":[656,447,209,448],"type_dbi":[],"class_list":["post-9823","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-database-administration-monitoring","tag-12-2","tag-encryption","tag-oracle-12c","tag-tde"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v27.2 (Yoast SEO v27.5) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>Oracle 12cR2: Online tablespace encryption - dbi Blog<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.dbi-services.com\/blog\/oracle-12cr2-online-tablespace-encryption\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Oracle 12cR2: Online tablespace encryption\" \/>\n<meta property=\"og:description\" content=\"By Franck Pachot . By default, all data is visible in the datafiles. Transparent Tablespace Encryption (TDE) can be used to get them encrypted. It requires Enterprise Edition plus Advanced Security Option. Except in the Oracle Cloud when it is available &#8211; and mandatory &#8211; in all editions. And we can foresee that security policies [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.dbi-services.com\/blog\/oracle-12cr2-online-tablespace-encryption\/\" \/>\n<meta property=\"og:site_name\" content=\"dbi Blog\" \/>\n<meta property=\"article:published_time\" content=\"2017-02-26T18:57:13+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/sites\/2\/2022\/04\/Online_encryption_ASH_Response_Time.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1709\" \/>\n\t<meta property=\"og:image:height\" content=\"177\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Oracle Team\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Oracle Team\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"7 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/oracle-12cr2-online-tablespace-encryption\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/oracle-12cr2-online-tablespace-encryption\\\/\"},\"author\":{\"name\":\"Oracle Team\",\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/#\\\/schema\\\/person\\\/66ab87129f2d357f09971bc7936a77ee\"},\"headline\":\"Oracle 12cR2: Online tablespace encryption\",\"datePublished\":\"2017-02-26T18:57:13+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/oracle-12cr2-online-tablespace-encryption\\\/\"},\"wordCount\":613,\"commentCount\":0,\"image\":{\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/oracle-12cr2-online-tablespace-encryption\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/wp-content\\\/uploads\\\/sites\\\/2\\\/2022\\\/04\\\/Online_encryption_ASH_Response_Time.png\",\"keywords\":[\"12.2\",\"encryption\",\"Oracle 12c\",\"TDE\"],\"articleSection\":[\"Database Administration &amp; Monitoring\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/oracle-12cr2-online-tablespace-encryption\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/oracle-12cr2-online-tablespace-encryption\\\/\",\"url\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/oracle-12cr2-online-tablespace-encryption\\\/\",\"name\":\"Oracle 12cR2: Online tablespace encryption - dbi Blog\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/oracle-12cr2-online-tablespace-encryption\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/oracle-12cr2-online-tablespace-encryption\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/wp-content\\\/uploads\\\/sites\\\/2\\\/2022\\\/04\\\/Online_encryption_ASH_Response_Time.png\",\"datePublished\":\"2017-02-26T18:57:13+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/#\\\/schema\\\/person\\\/66ab87129f2d357f09971bc7936a77ee\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/oracle-12cr2-online-tablespace-encryption\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/oracle-12cr2-online-tablespace-encryption\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/oracle-12cr2-online-tablespace-encryption\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/wp-content\\\/uploads\\\/sites\\\/2\\\/2022\\\/04\\\/Online_encryption_ASH_Response_Time.png\",\"contentUrl\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/wp-content\\\/uploads\\\/sites\\\/2\\\/2022\\\/04\\\/Online_encryption_ASH_Response_Time.png\",\"width\":1709,\"height\":177},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/oracle-12cr2-online-tablespace-encryption\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Accueil\",\"item\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Oracle 12cR2: Online tablespace encryption\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/\",\"name\":\"dbi Blog\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/#\\\/schema\\\/person\\\/66ab87129f2d357f09971bc7936a77ee\",\"name\":\"Oracle Team\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/f711f7cd2c9b09bf2627133755b569fb5be0694810cfd33033bdd095fedba86d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/f711f7cd2c9b09bf2627133755b569fb5be0694810cfd33033bdd095fedba86d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/f711f7cd2c9b09bf2627133755b569fb5be0694810cfd33033bdd095fedba86d?s=96&d=mm&r=g\",\"caption\":\"Oracle Team\"},\"url\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/author\\\/oracle-team\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Oracle 12cR2: Online tablespace encryption - dbi Blog","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.dbi-services.com\/blog\/oracle-12cr2-online-tablespace-encryption\/","og_locale":"en_US","og_type":"article","og_title":"Oracle 12cR2: Online tablespace encryption","og_description":"By Franck Pachot . By default, all data is visible in the datafiles. Transparent Tablespace Encryption (TDE) can be used to get them encrypted. It requires Enterprise Edition plus Advanced Security Option. Except in the Oracle Cloud when it is available &#8211; and mandatory &#8211; in all editions. And we can foresee that security policies [&hellip;]","og_url":"https:\/\/www.dbi-services.com\/blog\/oracle-12cr2-online-tablespace-encryption\/","og_site_name":"dbi Blog","article_published_time":"2017-02-26T18:57:13+00:00","og_image":[{"width":1709,"height":177,"url":"https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/sites\/2\/2022\/04\/Online_encryption_ASH_Response_Time.png","type":"image\/png"}],"author":"Oracle Team","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Oracle Team","Est. reading time":"7 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.dbi-services.com\/blog\/oracle-12cr2-online-tablespace-encryption\/#article","isPartOf":{"@id":"https:\/\/www.dbi-services.com\/blog\/oracle-12cr2-online-tablespace-encryption\/"},"author":{"name":"Oracle Team","@id":"https:\/\/www.dbi-services.com\/blog\/#\/schema\/person\/66ab87129f2d357f09971bc7936a77ee"},"headline":"Oracle 12cR2: Online tablespace encryption","datePublished":"2017-02-26T18:57:13+00:00","mainEntityOfPage":{"@id":"https:\/\/www.dbi-services.com\/blog\/oracle-12cr2-online-tablespace-encryption\/"},"wordCount":613,"commentCount":0,"image":{"@id":"https:\/\/www.dbi-services.com\/blog\/oracle-12cr2-online-tablespace-encryption\/#primaryimage"},"thumbnailUrl":"https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/sites\/2\/2022\/04\/Online_encryption_ASH_Response_Time.png","keywords":["12.2","encryption","Oracle 12c","TDE"],"articleSection":["Database Administration &amp; Monitoring"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.dbi-services.com\/blog\/oracle-12cr2-online-tablespace-encryption\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.dbi-services.com\/blog\/oracle-12cr2-online-tablespace-encryption\/","url":"https:\/\/www.dbi-services.com\/blog\/oracle-12cr2-online-tablespace-encryption\/","name":"Oracle 12cR2: Online tablespace encryption - dbi Blog","isPartOf":{"@id":"https:\/\/www.dbi-services.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.dbi-services.com\/blog\/oracle-12cr2-online-tablespace-encryption\/#primaryimage"},"image":{"@id":"https:\/\/www.dbi-services.com\/blog\/oracle-12cr2-online-tablespace-encryption\/#primaryimage"},"thumbnailUrl":"https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/sites\/2\/2022\/04\/Online_encryption_ASH_Response_Time.png","datePublished":"2017-02-26T18:57:13+00:00","author":{"@id":"https:\/\/www.dbi-services.com\/blog\/#\/schema\/person\/66ab87129f2d357f09971bc7936a77ee"},"breadcrumb":{"@id":"https:\/\/www.dbi-services.com\/blog\/oracle-12cr2-online-tablespace-encryption\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.dbi-services.com\/blog\/oracle-12cr2-online-tablespace-encryption\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.dbi-services.com\/blog\/oracle-12cr2-online-tablespace-encryption\/#primaryimage","url":"https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/sites\/2\/2022\/04\/Online_encryption_ASH_Response_Time.png","contentUrl":"https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/sites\/2\/2022\/04\/Online_encryption_ASH_Response_Time.png","width":1709,"height":177},{"@type":"BreadcrumbList","@id":"https:\/\/www.dbi-services.com\/blog\/oracle-12cr2-online-tablespace-encryption\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Accueil","item":"https:\/\/www.dbi-services.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Oracle 12cR2: Online tablespace encryption"}]},{"@type":"WebSite","@id":"https:\/\/www.dbi-services.com\/blog\/#website","url":"https:\/\/www.dbi-services.com\/blog\/","name":"dbi Blog","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.dbi-services.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/www.dbi-services.com\/blog\/#\/schema\/person\/66ab87129f2d357f09971bc7936a77ee","name":"Oracle Team","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/f711f7cd2c9b09bf2627133755b569fb5be0694810cfd33033bdd095fedba86d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/f711f7cd2c9b09bf2627133755b569fb5be0694810cfd33033bdd095fedba86d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/f711f7cd2c9b09bf2627133755b569fb5be0694810cfd33033bdd095fedba86d?s=96&d=mm&r=g","caption":"Oracle Team"},"url":"https:\/\/www.dbi-services.com\/blog\/author\/oracle-team\/"}]}},"_links":{"self":[{"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/posts\/9823","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/users\/27"}],"replies":[{"embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/comments?post=9823"}],"version-history":[{"count":0,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/posts\/9823\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/media\/9824"}],"wp:attachment":[{"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/media?parent=9823"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/categories?post=9823"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/tags?post=9823"},{"taxonomy":"type","embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/type_dbi?post=9823"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}