question about TDE (transparent data encryption)
-----------------------------------------------------------------------------------------------
Transparent Data Encryption is implemented at the tablespace level. A master wallet exists (as well as an auto-open wallet tied to that master wallet). Currently only one tablespace is encryted, though that may change in the future, more wallets may be assigned to new encrypted tablespaces in the future. The password on the master wallet is reset periodically as part of routine maintenance. And the wallet is not backed up with the database (i.e. it's backed up by a separate utility to a separate tape).