Stop Hardcoding your TDE keystore-password

When you encrypt your databases, you will often end up needing the keystore password to perform certain operations. For instance, cloning an encrypted PDB will require the keystore password:

CREATE PLUGGABLE DATABASE ... KEYSTORE IDENTIFIED BY S3cr3t;

Using TDE password into an Oracle Secure External Password Store ([TDE-]SEPS)

 

References :

• Configuring an External Store for a Keystore Password (Oracle Database 19c: Advanced Security Guide)
• Blog of Daniel Overby Hansen - Senior Principal Product Manager, Cloud Migrations
• Joords Oracle DBA blog - SEPS