Decrypting an Existing Tablespace with Online Conversion

To decrypt an existing tablespace with online conversion, use the ALTER TABLESPACE SQL statement with the DECRYPT clause.

  1. Log in to the DB instance as a system user.

SQL
SQL> connect system/<password>;
  1. List the encrypted tablespace.

SQL
SQL> select TABLESPACE_NAME, ENCRYPTED from DBA_TABLESPACES;
  1. Open a Keystore.

SQL
SQL> ADMINISTER KEY MANAGEMENT SET KEYSTORE OPEN IDENTIFIED BY <hsm_password>;
  1. Decrypt the existing tablespace NONSECURE_TS.

SQL
SQL> alter tablespace NONSECURE_TS ENCRYPTION ONLINE DECRYPT FILE_NAME_CONVERT = ('SECURETS_02.DBF', 'NONSECURETS_02.DBF');
  1. Verify that the tablespace is no longer encrypted.

SQL
SQL> select TABLESPACE_NAME, ENCRYPTED from DBA_TABLESPACES WHERE TABLESPACE_NAME='NONSECURE_TS';