Saturday, 22 June 2019

how to configure AES cypher keys using wallet method in 12c GG


1] Login to oracle user.

2] connect golden gate prompt.

./ggsci

3] Open oracle wallet

GGSCI (source.example.com) 8> OPEN WALLET
Opened wallet at location 'dirwlt'.
GGSCI (source.example.com) 9> ADD MASTERKEY
Master key 'OGG_DEFAULT_MASTERKEY' added to wallet at location 'dirwlt'.

GGSCI (source.example.com) 10> INFO MASTERKEY
Masterkey Name:                 OGG_DEFAULT_MASTERKEY
Creation Date:                  Sat Jun 22 07:29:55 2019

Version:        Creation Date:                  Status:
1               Sat Jun 22 07:29:55 2019        Current

GGSCI (source.example.com) 11> INFO MASTERKEY VERSION 1
Masterkey Name:                 OGG_DEFAULT_MASTERKEY
Creation Date:                  Sat Jun 22 07:29:55 2019
Version:                        1
Renew Date:                     Sat Jun 22 07:29:55 2019
Status:                         Current
Key Hash (SHA1):                0xC683C5495E86196C25B316664BD91EFB1E15A200

GGSCI (source.example.com) 12> exit

4] Copy wallet file to remote server.

GGSCI (source.example.com) 12> exit
[oracle@source ggs]$ cd dirwlt
[oracle@source dirwlt]$ ls -ltr
total 4
-rw-r-----. 1 oracle oinstall 685 Jun 22 07:29 cwallet.sso
[oracle@source dirwlt]$ pwd
/u01/ggs/dirwlt
[oracle@source dirwlt]$ scp cwallet.sso oracle@target.example.com:/u01/ggs/dirwlt/.
The authenticity of host 'target.example.com (192.*.*.190)' can't be established.
ECDSA key fingerprint is SHA256:kUZS1JE7C6Oaseh72HegtiXt9z8NfG7DJsKlimwq0/Y.
ECDSA key fingerprint is MD5:08:1d:34:97:6c:6c:d6:de:7b:57:e1:02:ca:6b:6f:5f.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added 'target.example.com,192.*.*.190' (ECDSA) to the list of known hosts.
oracle@target.example.com's password:
cwallet.sso                                                  100%  685    38.4KB/s   00:00
[oracle@source dirwlt]$ cd ..

5] Add the ENCRYPT and KEYNAME parameters to RMTHOST in the data pump parameter file.

RMTHOST target.example.com, MGRPORT 7809, ENCRYPT AES192

6] Stop and restart the Extract process

No comments:

Post a Comment

work on autovacuum postgreSQL parameter

 In This blog, we are discussing the auto vacuum parameter on a small scale. we will understand the below parameters and will see how to mod...