Steps of RMAN backup Encryption (Password Only)

RMAN backups can be restricted to restored by unauthorized persons and exposing the data using Encryption.


Oracle offers several flavors for encrypting the RMAN backups:

1. Transparent Encryption -> Requires Wallet on backup and recovery. (Do Not Lose the Wallet!)

2. Password Only -> Required Password on backup and recovery (Do Not Lose Password!)

3. Dual (Password or Transparent Encryption) -> Can be backed up or restored using the password or a wallet. This works well where database is restored locally where the wallet exists, but has a need to be able to be restored off site where the wallet does not exist.

 1.
Set the Backup Encryption Type via RMAN

Connect to the target database and RMAN catalog database if being used. Within RMAN set the encryption type via an RMAN configure command. This setting will be stored within the database control file and the RMAN catalog if one is being used.

RMAN> CONFIGURE ENCRYPTION ALGORITHM 'AES192';


2. Configure the encryption for the backup

CONFIGURE ENCRYPTION FOR DATABASE ON ;

3. Password Only Encryption

SET ENCRYPTION ON IDENTIFIED BY password ONLY ;

4.  Run the rman command