首先

Configuring Transparent Data Encryption

编辑 sqlnet.ora

ENCRYPTION_WALLET_LOCATION=
(SOURCE=
  (METHOD= FILE)
   (METHOD_DATA=
    (DIRECTORY= path_to_keystore)))

创建Software Keystore密码

Creating a Password-Based Software Keystore

ADMINISTER KEY MANAGEMENT CREATE KEYSTORE ' keystore_location' IDENTIFIED BY software_keystore_password;

查询状态视图

V$ENCRYPTION_WALLET

检查目录下是否有ewallet.p12生成

打开 Software Keystore

ADMINISTER KEY MANAGEMENT SET KEYSTORE OPEN IDENTIFIED BY software_keystore_password [CONTAINER = ALL | CURRENT];

Setting the TDE Master Encryption Key in the Software Keystore

ADMINISTER KEY MANAGEMENT SET KEY IDENTIFIED BY keystore_password WITH BACKUP USING 'emp_key_backup';

加密表空间：

STARTUP MOUNT;
ADMINISTER KEY MANAGEMENT SET KEYSTORE OPEN IDENTIFIED BY keystore_password;
ALTER DATABASE OPEN;

Alter session set container=xxx

CREATE TABLESPACE encrypt_ts
  DATAFILE '$ORACLE_HOME/dbs/encrypt_df.dbf' SIZE 1M
   ENCRYPTION USING 'AES256'
  DEFAULT STORAGE (ENCRYPT);

ITPub博客

Pdb tde加密表空间配置