{"id":6946,"date":"2022-01-05T06:25:24","date_gmt":"2022-01-05T06:25:24","guid":{"rendered":"https:\/\/rax-stg-wp-aws.com\/blogs\/how-to-configure-tde-auto-login-wallet-in-oracle-19c\/"},"modified":"2026-11-03T19:27:18","modified_gmt":"2026-11-03T19:27:18","slug":"how-to-configure-tde-auto-login-wallet-in-oracle-19c","status":"publish","type":"blogs","link":"https:\/\/www.rackspace.com\/de\/blogs\/how-to-configure-tde-auto-login-wallet-in-oracle-19c\/","title":{"rendered":"How to Configure TDE Auto Login Wallet in Oracle 19c"},"content":{"rendered":"

In this post, we will discuss about enabling Transparent Data Encryption \u2013 TDE in Oracle 19c.<\/p>\n

\nTo configure Auto Login Wallet in Oracle 19c there are few parameters which needs to be set in spfile\/pfile.<\/p>\n

Step 1 <\/h3>\n

Create Wallet folder in ASM<\/p>\n

If necessary, create a wallet directory. Typically, wallet directory is located in `ASM or $ORACLE_BASE\/admin\/db_unique_name\/wallet.` 
\nIdeally wallet directory should be empty.
\n`.\/grid.env — asm file system environment file env`
\n`asmcmd`<\/p>\n

\"How<\/p>\n

Step 2<\/h3>\n

Update wallet details in the parameter file.<\/p>\n

You must configure Keystore location and type by setting WALLET_ROOT and TDE_CONFIGURATION parameters in pfile or spfile.
\n`. .\/clprod.env`<\/p>\n

\"How<\/p>\n

Step 3. Restart the Database<\/h3>\n

Source the container database environment
\n`. clprod.env`<\/p>\n

`sqlplus ‘\/as sysdba’`<\/p>\n

`show con_name;`<\/p>\n

`CON_NAME`
\n——————————
\nCDB$ROOT<\/p>\n

CLPROD> shut immediate<\/p>\n

Database closed.<\/p>\n

Database dismounted.<\/p>\n

ORACLE instance shut down.<\/p>\n

CLPROD> startup<\/p>\n

ORACLE instance started.<\/p>\n

Total System Global Area 16106127360 bytes<\/p>\n

Fixed Size 35621984 bytes<\/p>\n

Variable Size 1017607903 bytes<\/p>\n

Database Buffers 534432665431 bytes<\/p>\n

Redo Buffers 9817655 bytes<\/p>\n

Database mounted.<\/p>\n

Database opened.<\/p>\n

or if RAC<\/p>\n

`srvctl status database -d CLPROD`<\/p>\n

`srvctl stop database -d CLPROD`<\/p>\n

`srvctl start database -d CLPROD`<\/p>\n

Step 4.Check the status of the wallet<\/strong><\/h3>\n

\"How<\/p>\n

\"How<\/p>\n

Step 5. Create KEYSTORE for container<\/h3>\n

Source the container database environment
\n`. clprod.env`<\/p>\n

\"How<\/p>\n

\"How<\/p>\n

 Source the container database environment
\n`. clprod.env`<\/p>\n

\"How<\/p>\n

Step 7. Create an Auto-Login or a Local Auto-Login Software Keystore
\nSource the container database environment<\/h3>\n

`. clprod.env` <\/p>\n

\"How<\/p>\n

\"How<\/p>\n

 <\/p>\n

\"How<\/p>\n

Step 8. Restart the Database `sqlplus ‘\/as sysdba’ <\/h3>\n

`CLPROD> shut immediate`<\/p>\n

Database closed.<\/p>\n

Database dismounted.<\/p>\n

ORACLE instance shut down.<\/p>\n

CLPROD> startup<\/p>\n

ORACLE instance started.<\/p>\n

Total System Global Area 16106127360 bytes<\/p>\n

Fixed Size 35621984 bytes<\/p>\n

Variable Size 1017607903 bytes<\/p>\n

Database Buffers 534432665431 bytes<\/p>\n

Redo Buffers 9817655 bytes<\/p>\n

Database mounted.<\/p>\n

Database opened.<\/p>\n

or if RAC<\/p>\n

`srvctl status database -d CLPROD`<\/p>\n

`srvctl stop database -d CLPROD`<\/p>\n

`srvctl start database -d CLPROD`<\/p>\n

Step 9. Verify autologin<\/h3>\n

\"How<\/p>\n

\"How<\/p>\n

 Step 10. Recreate temp tspace in cdb<\/h3>\n

\"How<\/p>\n

 Step 11. Enable TDE for all container tablespaces<\/h3>\n

\"How<\/p>\n

Step 12. Drop and recreate temp tspace for the pdb (prod) <\/h3>\n

\"How<\/p>\n

Step 13. Restart the application services. <\/h3>\n

Step 14. Start Tablespace encryption<\/h3>\n

                 a) Run the following command on VNC as terminal no.1<\/p>\n

\"How<\/p>\n

                b) Run the following command on VNC as terminal no.2<\/p>\n

\"How<\/p>\n

 <\/p>\n

\"How<\/p>\n

\nUpdate\/edit the encrypt_prod_tspaces2.sql and run it to start the encryption for other tablespaces. <\/h3>\n

\"How<\/p>\n

Complete the APPSUNDO tablespaces & system tspace at the end individually. <\/h3>\n

Make sure this is done only after all the other tablespaces are encrypted completely<\/h3>\n

\"How<\/p>\n

Incase if the encryption process errors are out you need to restart the encryption process by using the following command.<\/p>\n

To restart a failed encryption:<\/strong><\/p>\n

\"How<\/p>\n

Conclusion<\/h2>\n

Security
\nAfter the data is encrypted, it is transparently decrypted for authorized users or applications when accessed. TDE helps protect data stored on media (also called data at rest) if the storage media or data file is stolen.<\/p>\n

Data is safe (some tools don\u2019t encrypt by default).<\/p>\n

Whole database encryption also hides SYSTEM, SYSAUX, TEMP and UNDO data.<\/p>\n

You don\u2019t need OMF anymore if you use tablespace online encryption. <\/p>\n

Keystore can be closed even SYSTEM, SYAUX and UNDO is encrypted.<\/p>\n

Reference: 2586100.1
\n2559570.1<\/p>\n","protected":false},"excerpt":{"rendered":"

How to Configure TDE Auto Login Wallet in Oracle 19c<\/p>\n","protected":false},"author":2,"featured_media":6948,"menu_order":0,"comment_status":"open","ping_status":"open","template":"","format":"standard","meta":{"content-type":"","nid":"25795","content_type":"blog","created_by":"10130","authored_on":"2023-07-30T05:25:24+00:00","field_article_industries":"","tag_category":"Technical","field_blog_author_text":"by Rackspace Technology Staff","seo_description":"Discover how to enable Transparent Data Encryption and configure Auto Login Wallet in Oracle 19c for enhanced data security.\r\n","field_featured_image":"","insights_image":"\/wp-content\/uploads\/2026\/blog_technical_images\/25795-insights_image-oracle-technical-blog-1-insights.jpg","field_partners":"","rxt_platforms":"Oracle, Oracle ERP","product":"","publisheddate":"2022-01-05T06:25:24","rxt_solutions":"Applications","opengraph_tag":"","x_tag":"","teaser_flag":"Technical Blog","seo_titile":"Setup Transparent Data Encryption Wallet","field_topics":"","field_slug":"how-to-configure-tde-auto-login-wallet-in-oracle-19c","footnotes":""},"categories":[178],"tags":[204],"class_list":["post-6946","blogs","type-blogs","status-publish","format-standard","has-post-thumbnail","hentry","category-blog","tag-technical"],"_links":{"self":[{"href":"https:\/\/www.rackspace.com\/de\/wp-json\/wp\/v2\/blogs\/6946","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.rackspace.com\/de\/wp-json\/wp\/v2\/blogs"}],"about":[{"href":"https:\/\/www.rackspace.com\/de\/wp-json\/wp\/v2\/types\/blogs"}],"author":[{"embeddable":true,"href":"https:\/\/www.rackspace.com\/de\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.rackspace.com\/de\/wp-json\/wp\/v2\/comments?post=6946"}],"version-history":[{"count":3,"href":"https:\/\/www.rackspace.com\/de\/wp-json\/wp\/v2\/blogs\/6946\/revisions"}],"predecessor-version":[{"id":17130,"href":"https:\/\/www.rackspace.com\/de\/wp-json\/wp\/v2\/blogs\/6946\/revisions\/17130"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.rackspace.com\/de\/wp-json\/wp\/v2\/media\/6948"}],"wp:attachment":[{"href":"https:\/\/www.rackspace.com\/de\/wp-json\/wp\/v2\/media?parent=6946"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.rackspace.com\/de\/wp-json\/wp\/v2\/categories?post=6946"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.rackspace.com\/de\/wp-json\/wp\/v2\/tags?post=6946"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}