I’m currently involved in an integration project using SKBA SG-KMS TDE with Oracle Database 18c, where we are utilizing Oracle GoldenGate (OGG) in classic mode. We are planning a migration from late June to early July.
During our internal testing of TDE, we’ve encountered some issues which I’m sharing here for a broader insight.
Setup Information:
Oracle Version: Oracle Enterprise 18.0.0.0 with TDE for tablespace encryption.
OGG Version: v18.0.0.0 installed and configured in classic mode for data synchronization between source and target DB servers.
Expected vs. Actual Behavior:
I have performed the following operations after creating a master key in HSM:
**Successfully added an OGG secret (ORACLEGG) to the HSM at the source DB server.
Attempting to delete the OGG secret from HSM at the source DB server results in a session EOF error, **although the SG-KMS DB data object table shows that the secret has been deleted and the access log records the deletion of the data object.
Updating the OGG secret in the HSM also leads to a session EOF error. The data object table in SG-KMS DB doesn’t seem to reflect a successful update, and there are no logs other than those recording the request for data object info and deletion.
These issues suggest potential problems with session management or synchronization between the database and HSM. Any insights or similar experiences would be highly appreciated.
jaeyu is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.