Oracle GoldenGate Administrator Tasks
- Run GGSCI.
- Issue the
ENCRYPT PASSWORDcommand to encrypt the shared secret so that it is obfuscated within the Extract parameter file. This is a security requirement.ENCRYPT PASSWORD
sharedsecret{AES128 | AES192 | AES256} ENCRYPTKEYkeynameWhere:
-
sharedsecretis the clear-text shared secret. This value is case-sensitive. -
{AES128 | AES192 | AES256}specifies Advanced Encryption Standard (AES) encryption. Specify one of the values, which represents the desired key length. -
keynameis the logical name of the encryption key in theENCKEYSlookup file. Oracle GoldenGate uses this key to look up the actual key in theENCKEYSfile. To create a key andENCKEYSfile, see Administering Oracle GoldenGate.Example:
ENCRYPT PASSWORD sharedsecret AES256 ENCRYPTKEYmykey1
-
- In the Extract parameter file, use the
DBOPTIONSparameter with theDECRYPTPASSWORDoption. As input, supply the encrypted shared secret and the decryption key.DBOPTIONS DECRYPTPASSWORD
sharedsecret{AES128 | AES192 | AES256} ENCRYPTKEYkeynameWhere:
-
sharedsecretis the encrypted shared secret. -
{AES128 | AES192 | AES256}must be same value that was used forENCRYPT PASSWORD. -
keynameis the logical name of the encryption key in theENCKEYSlookup file.Example:
DBOPTIONS DECRYPTPASSWORD AACAAAAAAAAAAAIALCKDZIRHOJBHOJUH AES256 ENCRYPTKEY mykey1
-
- Log in to SQL*Plus as a user with the
SYSDBAsystem privilege. - Close and then re-open the wallet.
SQL> alter system set encryption wallet close identified by "
hsm/wallet_password"; System altered. SQL> alter system set encryption wallet open identified by "hsm/wallet_password"; System altered.