Security Management - Oracle 10g/11g Data and Database Management Utilities - page 248

Considering these circumstances, the use of encryption techniques to protect the
backups should be considered, both for Recovery Manager and Data Pump.

Advanced Security Option

rman>

Encrypted Disk Backup

Oracle Database

Password

Oracle
Secure
Backup

Oracle Wallet Manager Encrypted Tape Backup

Recovery Manager encryption
Recovery Manager provides three encryption modes, the transparent mode , the
password mode , and the dual mode . You must consider that Recovery Manager
encrypts only backup sets, not image copies. These encryption techniques are
available on Enterprise Edition using the Advanced Security Option and the
COMPATIBLE instance parameter must be set to at least 10.2.0.

• Transparent mode : This mode requires you to have the Oracle Wallet
Manager properly configured. It uses the Oracle key management
infrastructure. Transparent mode is best used for regular backups that are
meant to be restored on the same system where they were taken from.
• Password mode : This mode requires you to declare the password in the
rman scripts by means of the SET ENCRYPTION ON IDENTIFIED BY password
ONLY clause.
• Dual mode : This mode is flexible, it uses both the transparent mode and
the password mode. This kind of backup is useful when the data is to be
recovered on environments where the wallet is not available. This provides
an alternative means to restore the backup.

Using the transparent mode
This mode requires the user to configure the Wallet location and set the Master
Encryption Key. The user must have Recovery Manager configured in encryption
mode and declare the encryption algorithm to use.