To decrypt an existing tablespace with online conversion, use the ALTER TABLESPACE SQL statement with the DECRYPT clause.
-
Log in to the DB instance as a system user.
SQL
SQL> connect system/<password>;
-
List the encrypted tablespace.
SQL
SQL> select TABLESPACE_NAME, ENCRYPTED from DBA_TABLESPACES;
-
Open a Keystore.
SQL
SQL> ADMINISTER KEY MANAGEMENT SET KEYSTORE OPEN IDENTIFIED BY <hsm_password>;
-
Decrypt the existing tablespace NONSECURE_TS.
SQL
SQL> alter tablespace NONSECURE_TS ENCRYPTION ONLINE DECRYPT FILE_NAME_CONVERT = ('SECURETS_02.DBF', 'NONSECURETS_02.DBF');
-
Verify that the tablespace is no longer encrypted.
SQL
SQL> select TABLESPACE_NAME, ENCRYPTED from DBA_TABLESPACES WHERE TABLESPACE_NAME='NONSECURE_TS';