Migrating Software Oracle Wallet to an HSM Wallet

In order to migrate the software Oracle Wallet, an existing wallet is needed. To create a test wallet, the sqlnet.ora file located in the $ORACLE_HOME/network/admin folder needs to be changed. The following lines need to be added:

ENCRYPTION_WALLET_LOCATION = 
(SOURCE = 
  (METHOD = FILE) 
  (METHOD_DATA = 
    (DIRECTORY = /u01/app/oracle/admin/orcl/hsmwallet) 
  ) 
) 

1. When the wallet is created, execute the following commands:

SQL> ADMINISTER KEY MANAGEMENT SET KEYSTORE OPEN IDENTIFIED BY password; 

SQL> ADMINISTER KEY MANAGEMENT SET KEY IDENTIFIED BY password; 

2. The sqlnet.ora file has to be changed (change METHOD=FILE to METHOD=HSM) and the server restarted.

ENCRYPTION_WALLET_LOCATION = 
(SOURCE = 
  (METHOD = HSM) 
  (METHOD_DATA = 
    (DIRECTORY = /u01/app/oracle/admin/orcl/hsmwallet) 
  ) 
) 

3. The wallet can be migrated, when the server is configured:

ADMINISTER KEY MANAGEMENT SET KEYSTORE OPEN IDENTIFIED BY "pin[|<token_label>]"; 

ADMINISTER KEY MANAGEMENT SET KEY IDENTIFIED BY "pin[|<token_label>]" [MIGRATE USING sw_wallet_password]