• Ensure that you have set up Oracle Database Appliance as described in the Oracle Database Appliance X11 Deployment and User’s Guide.
• Determine the Oracle Key Vault shape to be deployed. Ensure that the appliance has sufficient resources to meet the requirements.
  The steps documented in this section assume the installation of a single Oracle Key Vault node in dedicated mode on Oracle Database Appliance X11-S with the following shape:

  • CPUs: 28 cores (56 vCPUs)
  • Memory: 128 GB
  • Storage: 4 TB

  If your deployment on Oracle Database Appliance is different, use the guidance in the section Deployment Options and Shape Selection to adjust the configuration values for CPU, memory, and disk, and modify the following steps as needed.

• Decide the names that you will use for the Virtual Machine and VM Storage. The setup instructions in this section assume the following names and configuration:
  • <OKV VM NAME>: okv_node_1
  • <OKV VM STORAGE>: okvstorage
  • <vCPUs>: 56
  • <Memory>: 128 GB
  • <Disk size>: 4096 GB
• Commands in the setup instructions in this section are run as root on Oracle Database Appliance. However, if you have provisioned Oracle Database Appliance using multi-user access (MUA), then you must use the odaadmin user to run ODACLI commands.

• 4 TB for Oracle Key Vault disk size.
• 22 GB for Oracle Key Vault install ISO file.
• 10 GB for additional metadata.

To create a virtual machine storage, run the following ODACLI command:

odacli create-vmstorage –-name <OKV VM STORAGE> --size <OKV VM storage size>

For example:

# odacli create-vmstorage –-name okvstorage –-size 4128G 
 
Job details                                                       
---------------------------------------------------------------- 
                     ID:  6a3f635d-5117-4c45-a2c1-6dfea0803609 
            Description:  VM storage okvstorage creation 
                 Status:  Created 
                Created:  November 12, 2025 23:43:08 GMT 
                Message:   
 
Task Name                                Start Time
Time                                     Status            
---------------------------------------- ----------------  

Confirm that the VM storage is created using the following ODACLI command:

odacli describe-vmstorage –-name <OKV VM STORAGE> 

For example:

# odacli describe-vmstorage –-name okvstorage

VM Storage details
--------------------------------------------
ID:  402c1168-a7a7-41d8-b253-01e34a09b341
Name:  okvstorage
Created:  2025-11-13 06:54:58 GMT
Updated:  2025-11-13 06:54:58 GMT
Disk group:  DATA
Volume name:  OKVSTORAGE
Volume device:  /dev/asm/okvstorage-103
Size:  4.03 TB
Used:  8.55 GB
Used %:  0.21%
Available:  4.02 TB
Logical Available:  4.03 TB
Mount Point:  /u05/app/sharedrepo/okvstorage
Redundancy:  High

mkdir /u05/app/sharedrepo/<OKV VM STORAGE>/iso

# mkdir /u05/app/sharedrepo/okvstorage/iso

Copy the Oracle Key Vault installation ISO file that you downloaded in Step 2 to the Oracle Key Vault appliance software directory. To do so, use scp or any other secure transmission method.

scp <OKV ISO image> root@<oda-machine>:/u05/app/sharedrepo/<OKV STORAGE NAME>/iso/

For example:

# scp okv-installer-disc-21.12.0.0.0.iso root@scaoda11s01:/u05/app/sharedrepo/okvstorage/iso/

# ls -l /u05/app/sharedrepo/okvstorage/iso 
total 21929984 
-rwxr-xr-x. 1 root 22453157888 Nov 12 23:39 okv-installer-disc-21.12.0.0.0.iso 

You can use the default network pubnet, or you can create a custom network.

To create a custom network, use the following ODACLI command:

odacli create-vnetwork

For this setup, use the default network pubnet.

To list the available VM networks, run the ODACLI command:

odacli list-vnetworks

For example:

# odacli list-vnetworks
Name Type Interface Bridge Uniform Created Updated
---- ---- --------- ------ ------- ------- -------
pubnet Bridged btbond1 pubnet NO 2025-11-09 11:39:30 GMT 2025-11-09 11:39:30 GMT

Collect Network Details for Oracle Key Vault

Collect the required network information that you will need to specify later when you install Oracle Key Vault.

You must reserve a static IP address for the Oracle Key Vault server, as DHCP is not supported.

Network Information Using pubnet

Select an IP address that is reserved for the Oracle Key Vault node. For the gateway and network mask, use the gateway and subnet mask information from the pubnet vnetwork.

IP address: <IP address reserved for Oracle Key Vault>

Gateway: <from pubnet vnetwork>

Network mask: <from pubnet vnetwork>

Network Information When Using a Customer-defined Network

Select an IP address that is reserved for the Oracle Key Vault node. Additionally, note the gateway and network mask for this custom network.

Run the following command to reclaim memory reserved for HugePages:

odacli modify-osconfigurations --number-hugepages 0

For example:

# odacli modify-osconfigurations -–number-hugepages 0 
{ 
  “jobId” : “8526f4c7-f6d9-458f-b029-546f6f931c03”, 
  “status” : “Created”, 
  “message” : “Successfully submitted a request to configure OS parameters. Restart of nodes is required. “, 
  “reports” : [ ], 
  “createTimestamp” : “November 12, 2025 07:02:27 AM GMT”, 
  “resourceList” : [ ], 
  “description” : “Configuring OS Parameter”, 
  “updatedTime” : “November 12, 2025 07:02:27 AM GMT”, 
  “jobType” : null,   
  “cpsMetadata” : null
}

Reboot Oracle Database Appliance for the new settings to take effect. For example:

# /sbin/reboot

odacli create-vm –-name <OKV VM NAME>     
                 --vcpus <vCPUs>
                 --memory <Memory>
                 --size <Disk size>
                 --vmstorage <OKV VM STORAGE> 
                 --vnetworks pubnet 
                 --boot-options UEFI  
                 --os-variant ol8.10  
                 --source <Oracle Key Vault appliance software directory> 

Guidelines to Create a Virtual Machine

1. Use the same operating system version and its variant that is used for Oracle Key Vault. For more information, see Critical Patch Updates Included in Release 21.12.
2. Ensure that boot options are in UEFI mode only.
3. The VM size should only include storage space reserved for the Oracle Key Vault disk, and not the total size of VM storage created previously in Step 3: Create VM Storage. The VM storage okvstorage includes space for other objects such as metadata and the Oracle Key Vault installation ISO file.

   For example, to create a virtual machine, specify the VM size as 4096 GB, 56 virtual CPUs, and 128 GB of memory for the new VM to meet the Oracle Key Vault shape assumptions described in Step 1: Prerequisites and Assumptions.

   #odacli create-vm –-name okv_node_1             
                     --vcpus 56  
                     --memory 128G  
                     --size 4096G 
                     --vmstorage okvstorage 
                     --vnetworks pubnet 
                     --boot-options UEFI  
                     --os-variant ol8.10  
                     --source /u05/app/sharedrepo/okvstorage/iso/okv-installer-disc-21.x.0.0.0.iso 
   
    Job details                                                       
   ---------------------------------------------------------------- 
   ID:  74de535e-716e-4f36-b0f7-bbb1cc0914c9 
   Description:  VM okv_node_1 creation 
   Status: Created 
   Created: November 12, 2025 07:03:35 GMT
   Message:   
    
   Task Name                                Start Time                               
   End Time                                 Status           
   ---------------------------------------- -----------------------
   ---------------------------------------- ----------------
   

   Use the following ODACLI command to confirm that the Oracle Key Vault virtual machine (okv_node_1) is created:

   odacli describe-vm –-name <OKV VM NAME>

   For example:

   # odacli describe-vm –-name okv_node_1
   
   VM details                                                                       
   -------------------------------------------------------------------------------- 
                  ID:  1c99d7ce-0659-46d5-98b6-d99bcf772d84 
                Name:  okv_node_1 
             Created:  2025-11-12 23:47:41 GMT 
             Updated:  2025-11-12 23:47:41 GMT 
          VM Storage:  okvstorage
         Description:  NONE 
       VM image path:  /u05/app/sharedrepo/okvstorage/.ACFS/snaps/vm_okv_node_1/okv_node_1 
             VM size:  4.00 TB 
              Source:  okv-installer-disc-21.x.0.0.0.iso 
         Cloned from:  N/A 
          OS Variant:  ol8.10 
   Graphics settings:  vnc,listen=127.0.0.1 
        Display Port:  127.0.0.1:0 
    
    Status                    
   -------------------------- 
        Current node:  scaoda11s01 
       Current state:  ONLINE 
        Target state:  ONLINE 
    
    Parameters                
   -------------------------- 
      Preferred node:  NONE 
        Boot options:  uefi, hd 
          Auto start:  YES 
           Fail over:  NO 
        NUMA enabled:  NO 
    
                               Config                     Live                      
                               -------------------------  ------------------------- 
                      Memory:  128.00 GB                  128.00 GB
                  Max Memory:  128.00 GB                  128.00 GB 
                       count:  56                         56
              Max vCPU count:  56                         56 
                    CPU Pool:  NONE 
           Effective CPU set:  0-63                       0-63
                       vCPUs:  0:0-63                     0:0-63
                               1:0-63                     1:0-63
                               . . .
                               55:0-63                    55:0-63
                      vDisks:  NONE
                   vNetworks:  pubnet:52:54:00:13:72:0e
   
   

Use the following command to start a VNC server:

# vncserver :1 -geometry 1600x900

Run the following command to start the virtual machine manager (VM manager):

# export DISPLAY=:1
# virt-manager