VKM to CAKM for Oracle TDE
Prerequisites
Data Security Manager (DSM) is up and running at a supported version. Refer to the DSM documentation for details.
A supported Vormetric Key Manager (VKM) version is configured with a supported DSM version. Refer to the VKM documentation for details.
CipherTrust Manager is up and running at a supported version. Refer to CipherTrust Manager Deployment for details.
Note
If you are running an unsupported version, upgrade your environment to a supported version before proceeding. Refer to the corresponding product documentation for upgrade instructions.
Supported Versions
Current Setup
| Product | Version |
|---|---|
| VKM | 6.3.0 or higher |
| DSM | 6.4.4 or higher |
Target Setup
| Product | Version |
|---|---|
| CAKM for Oracle TDE | 8.10 |
| CipherTrust Manager | 2.11.1 LTS or higher |
Migration Steps
Migrate your keys from DSM to a supported CipherTrust Manager version. Refer to Migrate from Data Security Manager for details.
Note
The backed up keys when restored on the CipherTrust Manager will reside in their respective domains as were on DSM, which will be later used for migration tasks.
Shut down the database.
Uninstall the VKM agent from the Oracle machine.
Note
It is recommended to take a backup of required files and database(s).
CAKM for Oracle TDE does not support slot. Refer to Slot and Domain Support for more details.
Install the CAKM for Oracle TDE provider on the Oracle machine and complete the configuration settings. Refer to Installing and Configuring CAKM for Oracle TDE for details.
Perform the Migration Tasks.
