This document explains how to set up and configure the Oracle Transparent Database Encryption with an nShield HSM.
Oracle Transparent Database Encryption (TDE) protects data stored in the Oracle database without requiring changes to the application that runs on top of the application. Supporting both TDE tablespace encryption and TDE column encryption, the nShield HSM secures the unified TDE master encryption key, taking the place of the Oracle Wallet. The benefits of using an nShield HSM with the Oracle Transparent Database Encryption include:
- FIPS 140-2 level 3 validated hardware
- Secure storage of master keys
- Full life cycle management of the keys
- Failover support
- Load balancing between modules