advanced security option changes in 11g – for the new oracle dba




you are a new oracle dba and you want to know how you can identify if oracle advanced security option is installed.

 

advanced security option in 11g:

Oracle product development has decided that starting with Oracle 11g Oracle Advanced Security Option will be installed by default when installing Enterprise Edition . There is no way to uninstall or to install it. The reason behind this is that Oracle Advanced Security Options are integrated at network adapter level and it is not appropriate to tweak network adapters after database installation .

-/opt/oracle/product/11.2.0/rdbms/admin :->adapters

 

Installed Oracle Net transport protocols are:

 

IPC

BEQ

TCP/IP

SSL

RAW

 

Installed Oracle Net naming methods are:

 

Local Naming (tnsnames.ora)

Oracle Directory Naming

Oracle Host Naming

Error!!!   Oracle Names Server Naming is not completely installed!

NIS Naming

 

Installed Oracle Advanced Security options are:

 

    RC4 40-bit encryption

    RC4 56-bit encryption

    RC4 128-bit encryption

    RC4 256-bit encryption

    DES40 40-bit encryption

    DES 56-bit encryption

    3DES 112-bit encryption

    3DES 168-bit encryption

    AES 128-bit encryption

    AES 192-bit encryption

    AES 256-bit encryption

    MD5 crypto-checksumming

    SHA-1 crypto-checksumming

    Kerberos v5 authentication

    RADIUS authentication

 

in 10g you can check the v$option table  but in 11g you can find the advanced  security option in the v$option table as explained above.here is the proof from an 11g v$option table.

Checked again in the mydb01(new 11g installed db) and could see that “Advanced Security” is not present .

 

SQL> select * from v$option where upper(parameter) like ‘%ADV%’;

 

PARAMETER

—————————————————————-

VALUE

—————————————————————-

Advanced replication

TRUE

 

Advanced Compression

TRUE

 

 

Complete list of existing options

 

SQL> select * from v$option where upper(parameter) in (‘ACTIVE DATA GUARD’,

2  ‘ADVANCED ANALYTICS’,

‘ADVANCED COMPRESSION’,

3    4  ‘ADVANCED SECURITY’,

5  ‘AIRLINE DATA MODEL’,

6  ‘COMMUNICATIONS DATA MODEL’,

7  ‘DATABASE VAULT’,

8  ‘GOLDENGATE’,

9  ‘IN-MEMORY DATABASE CACHE’,

10  ‘LABEL SECURITY’,

‘MANAGEABILITY’,

11   12  ‘OLAP’,

‘PARTITIONING’,

13   14  ‘REAL APPLICATION CLUSTERS’,

15  ‘REAL APPLICATION CLUSTERS ONE NODE’,

16  ‘REAL APPLICATION TESTING’,

17  ‘RETAIL DATA MODEL’,

18  ‘SPATIAL’,

19  ‘TOTAL RECALL’ ) ;

 

PARAMETER                                                        VALUE

—————————————————————- —————————————————————-

Partitioning                                                     TRUE

Real Application Clusters                                        FALSE

Spatial                                                          TRUE

OLAP                                                             TRUE

Real Application Testing                                         TRUE

Active Data Guard                                                TRUE

Advanced Compression                                             TRUE

 

7 rows selected.

 

 

 

oracle advanced security and encrypting  backups:

To create encrypted backups on disk with RMAN, the database must use the Advanced Security Option. The Oracle Secure Backup SBT is the only supported interface for making encrypted RMAN backups directly to tape. RMAN issues an ORA-19916 error if you attempt to create encrypted RMAN backups using an SBT library other than Oracle Secure Backup. The Advanced Security Option is not required when making encrypted backups using the Oracle Secure Backup SBT

Author: admin