- 08 Oct, 2023
- 0 Comments
- 1 Min Read
Disable TDE In Oracle 12c
Please Note : Don’t use this on a production database. Any problems that arise as a result of such activities will not be resolved by the Oracle Support/Development team.
Follow Below steps :
Find the encrypted table columns and modify them:
1 2 3 4 5 6 7 8 9 10 11 12 13 14 | SQL> select owner,table_name,column_name,encryption_alg from dba_encrypted_columns;OWNER TABLE_NAME COLUMN_NAME ENCRYPTION_ALG----- ------------ ------------ -----------------------------AMAR EMPLOYEE SALARY AES 192 bits keySQL> alter table AMAR.employee modify( salary decrypt);Table altered.SQL> select owner,table_name,column_name,encryption_alg from dba_encrypted_columns;No rows selected |
Now find the table under encrypted tablespace and move to normal tablespace:
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 | SQL> select segment_name,tablespace_name from dba_segments where tablespace_name in ( select tablespace_name from dba_tablespaces where encrypted='YES');SEGMENT_NAME TABLESPACE_NAME---------------------------------------- ------------------------------TEST_TABLE TEST_ENCRYSQL> alter table TEST_TABLE move tablespace users;Table altered.SQL> select segment_name,tablespace_name from dba_segments where tablespace_name in ( select tablespace_name from dba_tablespaces where encrypted='YES');no rows selectedSQL> drop tablespace test_encry including contents and datafiles;Tablespace dropped. |
Switch logfiles multiple times :
1 2 3 4 5 6 7 8 9 10 11 | SQL> alter system switch logfile;System altered.SQL> ///System altered.SQL>System altered. |
Close the wallet, move the wallet files and restart the database:
1 2 3 4 5 6 7 | SQL>ADMINISTER KEY MANAGEMENT SET KEYSTORE close;cd /media/sf_stuff/walletmv * backup/SQL> startup force |
Please Note : Now TDE has been disabled. Now if you want to enable TDE again, then restore the wallet files and open the key.