Database Administration (MOSC)

MOSC Banner

Should/Can we remove old keys from wallet after rotating to a new key

We have multiple databases set up using TDE and keys are stored in an Oracle Key Vault. We are required by our corporate policy to rotate the keys on a regular basis and we do this by running the following.


ADMINISTER KEY MANAGEMENT SET KEY FORCE KEYSTORE IDENTIFIED BY **********;


Once we do this a new key is added the wallet. Is there are way to then remove the old key(s) from the wallet? It seems by still having the old keys that there it is a security concern. We also have other applications(QLIK), that read the data and need the key information added into them. As we get more and more keys, we will have a long list of keys added to that application.

Tagged:

Howdy, Stranger!

Log In

To view full details, sign in to My Oracle Support Community.

Register

Don't have a My Oracle Support Community account? Click here to get started.

Category Leaderboard

Top contributors this month

New to My Oracle Support Community? Visit our Welcome Center

MOSC Help Center