Breadcrumbs

Decrypting an Existing Tablespace with Online Conversion

To decrypt an existing tablespace with online conversion, you can use the ALTER TABLESPACE SQL statement with DECRYPT clause.

  1. Login to DB instance as a system user.

›_ sqlplus console 

SQL> connect system/<password>;

  1. List encrypted tablespace.

›_ sqlplus console 

SQL> select TABLESPACE_NAME, ENCRYPTED from DBA_TABLESPACES;

  1. Open a Keystore.

›_ sqlplus console 

SQL> ADMINISTER KEY MANAGEMENT SET KEYSTORE OPEN IDENTIFIED BY <hsm_password>;

  1. Decrypt the existing tablespace NONSECURE_TS.

›_ sqlplus console 

SQL> alter tablespace NONSECURE_TS ENCRYPTION ONLINE DECRYPT  FILE_NAME_CONVERT = ('SECURETS_02.DBF', 'NONSECURETS_02.DBF');

  1. Verify that the tablespace no longer encrypted

›_ sqlplus console 

SQL> select TABLESPACE_NAME, ENCRYPTED from DBA_TABLESPACES WHERE TABLESPACE_NAME='NONSECURE_TS';