Replicating Encrypted Data
Oracle GoldenGate supports columns that are encrypted with a system-encrypted password, but not columns that are encrypted with a user-defined password. Check the tables from which you want to capture data against the following Oracle GoldenGate limitations:
-
The table that contains the encrypted columns must have a primary or unique key.
-
Columns that use encryption cannot be part of the primary key.
Encrypted columns are encrypted in the data files and in the log, so Extract must be configured to fetch the clear-text values from the database. To trigger this fetch, use the FETCHCOLS
and FETCHMODCOLS[EXCEPT]
options of the Extract TABLE
parameter. FETCHCOLS
forces a fetch of values that are not in the log, and FETCHMODCOLS
or FETCHMODCOLS[EXCEPT]
forces a fetch of values that are in the logs. Used together, these parameters ensure that the encrypted columns are always fetched from the database.
The following is an example of how to configure Extract to support the encryption. In this example, the encrypted column is cardnum
.
TABLE ab.payments, FETCHCOLS (cardnum), FETCHMODCOLS (cardnum);