Provisioning a TDE OCI Vault-enabled vPDB to a TDE OCI Vault-enabled target container requires specifying several TDE provisioning parameters.

Delphix Continuous Data Engine does not support provisioning a TDE OCI Vault-enabled vPDB from a source snapshot of a dSource or virtual database that is not encrypted or encrypted using a any other key provider at the time of linking

For more information, read Oracle documentation and the Provisioning TDE OCI vault-enabled vPDB page.

Provision a TDE OCI vault-enabled vPDB to an existing or linked CDB

To provision a TDE OCI vault-enabled vPDB in DCT, follow these steps:

  1. Log in to the DCT instance.

  2. Navigate to Data > VDB and click Provision VDB. For more information, read the Provisioning a VDB page.

  3. Select the Oracle dSource under the dSources tab to provision and click Next.

  4. On the Provision Point page, choose any of the following options:

    • Select Provision Point: Select the provision point displayed on this page.

    • Select Exact Time (Slower): Choose the exact date and time using the calendar.

    • SCN Number Refresh (Slower): Enter the Oracle system change (SCN) number range.

    • Bookmarks: Choose the bookmark from the list.

    • Click Next.

  5. Select target environment and repository and click Next.

  6. On the Target Configuration page, select the OCI Vault option under the TDE Keystore Config Type and enter the following details:s:

    • Parent Database TDE Keystore Location: Enter the Parent KeyStore path with the keys used to encrypt the dSource PDB files.

    • TDE Encryption Secret: Enter a secret encryption value.

    • Click Next.

      provision tde oci enabled database in dct

  7. On the Policies page, select the default DCT Snapshot and DCT Retention policies and click Next.

  8. (Optional) On the Masking page, select the Mask this VDB check box and click Next.

  9. (Optional) On the Hooks page, configure provisioning hooks and click Next. For more information, read the Hook operations list and Oracle Hook operations page.

  10. Review the VDB summary details and click Submit.provision tde oci enabled database in dct

Provision a TDE OCI Vault-enabled vPDB to a new CDB

To provision a TDE OCI-enabled VDB to a new CDB in DCT, follow these steps:

  1. Log in to the DCT instance.

  2. Navigate to Data > VDB and click Provision VDB.

  3. Select the Oracle dSource under the dSources tab to provision and click Next.

  4. On the Provision Point page, choose any of the provision point option and click Next.

  5. On the Target Environment page, select the Create a new container database check box and click Next.

    dct provision a new cdb

  6. Follow the instructions from step # 6 to 10 in the previous section to complete the provisioning of a new CDB.

Last updated
Oct 9, 2026