When encrypting LOB data by moving to an encrypted tablespace: DISABLE STORAGE IN ROW!
There are basically two methods to encrypt LOB data:
- use securefile LOB with the ENCRYPT attribute
- store the LOB segment in an encrypted tablespace
The second one needs special attention, since if the table segment is not also in an encrypted tablespace the piece that is stored 'in row' will not be encrypted,
this seems to be a common pitfall and I just wanted to make you aware of this, for more information and syntax examples see:
note 1538089.1 How To Encrypt a LOB using Transparent Data Encryption
Harm ten Napel
Security Support Team