Adding or editing TDE external key manager credential

The Target TDE External Key Manager Credential can be specified either in the GUI Host Detail tab under the Attribute section or in the GUI Databases tab under Environments. The value specified at the Database tab under Environments will take precedence.

Edit target TDE External Key Manager Credential in the GUI in the Details tab under Environments:

  1. Log in to the Delphix Management application.

  1. Click Manage → Environments.

  1. Click the Details tab for your target environment.

  2. Next to Attributes,click on the pencil icon to set or update attributes, including the TDE External Key Manager Credential.

Environment_attributes.png

Edit target TDE External Key Manager Credential in the GUI in the Database tab under Environments:

  1. Log in to the Delphix Management application.

  1. Click Manage → Environments.

  1. Click the Databases tab for your Environment.

  2. Next to TDE External Key Manager Credential click on the pencil icon to set or update the credential.

  3. Environment_database.png


Unsetting TDE external key manager credential

The Delphix Management application does not support unsetting of the TDE External Key Manager Credential for Oracle hosts. But it can be unset using CLI as follows:

Prerequisite:

The host should not contain any OKV-based or HSM-based TDE-enabled CDB with virtual PDBs.

  1. Log into the Delphix command-line interface using the admin user or a user with admin privileges.

    Copy
    ssh admin@YOUR_ENGINE
  2. Unset the attribute by navigating to ‘host’ and then the desired host:

    Copy
    delphix> host ; select unixhost1
    delphix host 'unixhost1'> update; unset oracleHostParameters.tdeExternalKeyManagerCredential; 
    commit