CLI Cookbook: Updating Oracle Isolated Mode TDE attributes of a vPDB

This topic describes how to update the parentPdbTdeKeystorePath, parentPdbTdeKeystorePassword and targetPdbTdeKeystorePassword attributes of Oracle TDE-enabled vPDB in isolated mode using the command-line interface.

This process is currently supported only via the CLI.

Procedure

  1. Log into the Delphix command-line interface using the admin user or a user with admin privileges.

    Copy
    $ ssh admin@YOUR_ENGINE

  2. Select the target vPDB (For example: sn_vpdb1).

    Copy
    delphix> source
    delphix source> select vpdb1;
    delphix source "vpdb1" >
  3. List the current attributes of the source object using ‘ls’ command.

    Copy
    delphix source 'sn_vpdb2'> ls
    Properties
        type: OracleVirtualPdbSource
        name: sn_vpdb2
        allowAutoVDBRestartOnHostReboot: false
        allowRefreshRewindPostV2P: false
        archivelogMode: true
        config: dn_vpdb2
        configParams:
            _cdb_disable_pdb_limit: TRUE
            audit_file_dest: '/u01/app/oracle/admin/CDOMSHTG7877/adump'
            audit_trail: 'DB'
            compatible: '19.0.0'
            diagnostic_dest: '/u01/app/oracle'
            dispatchers: '(PROTOCOL=TCP) (SERVICE=CDOMSHTG7877XDB)'
            enable_pluggable_database: TRUE
            log_archive_format: '%t_%s_%r.dbf'
            max_pdbs: 4098
            memory_max_target: 1342177280
            memory_target: 1342177280
            nls_language: 'AMERICAN'
            nls_territory: 'AMERICA'
            open_cursors: 300
            processes: 300
            remote_login_passwordfile: 'EXCLUSIVE'
            tde_configuration: 'KEYSTORE_CONFIGURATION=FILE'
            wallet_root: '/work/tde/blackbox/CDOMSHTG7877'
        configTemplate: (unset)
        container: cn_vpdb2
        containerizationState: NOT_CONTAINERIZED
        customEnvVars: (empty)
        invokeDatapatch: false
        linked: false
        logCollectionEnabled: false
        mountBase: /mnt/provision
        newDBID: false
        nodeListeners: (empty)
        operations:
            type: VirtualSourceOperations
            configureClone: (empty)
            postRefresh: (empty)
            postRollback: (empty)
            postSnapshot: (empty)
            postStart: (empty)
            postStop: (empty)
            preRefresh: (empty)
            preRollback: (empty)
            preSnapshot: (empty)
            preStart: (empty)
            preStop: (empty)
        parentPdbTdeKeystorePassword: ********
        parentPdbTdeKeystorePath: /work/tde/blackbox/CDOMLOSR4ABD/01F8C2DDBB2F35C8E0630D402B0A7668/tde
        parentTdeKeystorePassword: ********
        parentTdeKeystorePath: /work/tde/blackbox/CDOMLOSR4ABD/tde
        redoLogGroups: 3
        redoLogSizeInMB: 50
        reference: ORACLE_VIRTUAL_PDB_SOURCE-34
        replica: false
        runtime:
            type: OraclePDBSourceRuntime
            accessible: true
            accessibleTimestamp: 2025-05-09T16:54:09.657Z
            activeInstances:
                0:
                    type: OracleActiveInstance
                    hostName: sles-15-l2n0-qar-170375-766f97e2
                    instanceName: CDOMSHTG7877
                    instanceNumber: 1
            databaseMode: READ_WRITE
            databaseRole: PRIMARY
            databaseSize: 1.15GB
            databaseStats: [ ... ]
            enabled: ENABLED
            lastNonLoggedLocation: 0
            status: RUNNING
        runtimeMountInformation:
            type: UnixRuntimeMountInformation
            name: (unset)
            encryptionEnabled: false
            nfsVersion: 4
            nfsVersionReason: DEFAULT
        sourceStatus: DEFAULT
        staging: false
        status: DEFAULT
        targetPdbTdeKeystorePassword: ********
        targetPdbTdeKeystorePath: /work/tde/blackbox/CDOMSHTG7877/34B72C0DADAA4677E06367282B0A8E9F/tde
        targetVcdbTdeKeystorePath: (unset)
        tdeExportedKeyFileSecret: ********
        tdeKeyIdentifier: AVsOfVo6Fk+7v1s+kXh1RLMAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
        tdeUUID: 62b11d3c-cc0e-4183-a115-82e73cf5bc3c
        virtual: true
    Operations
    update
    enable
    disable
    start
    stop
    upgrade

  4. Update the attributes with new values.

    Copy
    delphix source "vpdb1" > update
    delphix source "vpdb1" update *> set parentPdbTdeKeystorePath=/work/tde/new_path/CDOMSHTG7877/34B72C0DADAA4677E06367282B0A8E9F/tde
    delphix source "vpdb1" update *> set parentPdbTdeKeystorePassword=newParentPdbKeystorePassword
    delphix source "vpdb1" update *> set targetPdbTdeKeystorePassword=newTargetPdbKeystorePassword
    delphix source "vpdb1" update *> commit
        Dispatched job JOB-251
        SOURCE_UPDATE job started for "sn_vpdb2".
        SOURCE_UPDATE job for "sn_vpdb2" completed successfully.
    delphix source "vpdb1" >

  5. List the attributes again using ‘ls’ command and verify the new values.