Oracle RAC: Rotating the TDE Master Key and Oracle Wallet Password with a Wallet Copy on Each Node

1. rac 환경

ENCRYPTION_WALLET_LOCATION = (SOURCE = (METHOD = FILE) (METHOD_DATA = (DIRECTORY = /etc/ORACLE/WALLETS/rac-hr/))) 

mkdir –pv ORACLE/WALLETS/rac-hr

chown –R oracle:oinstall ORACLE  

chmod –R 700 ORACLE 

-- RAC TNS_ADMIN 환경 등록

 srvctl setenv database –d rac-hr –t TNS_ADMIN=/u01/app/oracle/product/11.2/rac-hr/network/admin

-- master key 변경

alter system set encryption key identified by "password"

-- wallet 내용 확인

orapki wallet display -wallet 

-- wallet 패스워드 변경

orapki wallet change_pwd -wallet /etc/ORACLE/WALLETS/rac-hr