OraFAQ Forum: Security » TDE multiple master encryption keys within single schema.

Home » RDBMS Server » Security » TDE multiple master encryption keys within single schema. (Oracle 11.2.0.4.0 enterprise, CentOS 7.2)

Show: Today's Messages :: Polls :: Message Navigator
E-mail to friend

TDE multiple master encryption keys within single schema. [message #675837]

Tue, 23 April 2019 02:56

weekend79
Messages: 198
Registered: April 2005
Location: Islamabad

Senior Member

Oracle 11.2.0.4.0 enterprise.

We are hosting multiple customers data in single schema, a new customer wants his data to be secure with his unique encryption key.

Using Transparent Data Encryption (TDE), can we somehow create multiple master encryption keys within single schema?

We can upgrade to Oracle 11.2 for that as well if any workaround available.

Lastly if no such thing possible as 'multiple master encryption keys within single schema' then what other approach suits best for us, should we create separate database in same instance or should we commission separate vm-machine for this new customer.

Wishes

Report message to a moderator

Re: TDE multiple master encryption keys within single schema. [message #675839 is a reply to message #675837]

Tue, 23 April 2019 03:06

John Watson
Messages: 8344
Registered: January 2010
Location: Global Village

Senior Member

TDE column encryption generates one key per table, TDE tablespace encrption is one key per tablespace. So all you need do is separate the data accordingly.

Report message to a moderator

Re: TDE multiple master encryption keys within single schema. [message #675841 is a reply to message #675837]

Tue, 23 April 2019 03:41

Michel Cadot
Messages: 67369
Registered: March 2007
Location: Nanterre, France, http://...

Senior Member
Account Moderator

Quote:

a new customer wants his data to be secure

Secure in which way?
Against what (which accesses? from where? from who?...) does he want to be protected?

Report message to a moderator

Previous Topic:	How to create a user which would be able to create other users ?
Next Topic:	SYS/SYSDBA is special

Goto Forum:

-=] Back to Top [=-

[ Syndicate this forum (XML) ] [

]

Current Time: Thu Sep 24 21:23:50 CDT 2020