3 Replies Latest reply: Mar 26, 2014 11:10 AM by Emad Al-Mousa RSS

    TDE - Data pump vs alter table...move


      Oracle 11gR1

      The goal is to do tablespace level encryption of all tablespaces in a ~2TB database. Oracle's white paper http://www.oracle.com/technetwork/database/security/twp-transparent-data-encryption-bes-130696.pdf recommends using Data Pump to move  data from the unencrypted tablespace to the new encrypted tablespace. I am not sure I understand the rationale behind this. Wouldn't the ALTER TABLE ... MOVE <encrypted_tablespace> followed by ALTER INDEX ... REBUILD <encrypted tablespace> be a much cleaner and atomic operation? Just generate a script with those 2 statements for all the tables & indexes in the tablespaces that are being migrated.

      What am I missing? Thanks