First page Back Continue Last page Graphics

Encrypted Backups


Notes:

Another RMAN R2 feature (Enterprise Edition only) is support for encrypted backup sets (encrypting image copies is not supported).
Oracle supports three encryption techniques:
Transparent – In this mode an encryption key is stored in the Oracle Encryption Wallet feature, which must be previously configured. I believe this (Oracle Encryption Wallet) also supports the R2 feature transparent column encryption. A password for encryption and decryption is not required. This is the default.
Password – Password encryption requires that the DBA provide the same password on the backup and restore commands. Forgetting the password renders the backupset useless. This mode can be particularly useful when restoring on a remote system.
Dual Mode – With this technique, either the password or the Wallet can be used to decrypt the backup.
Encryption of data requires CPU resources. I have not yet tested the overhead (June 2006).