IS Transperent Data Encryption is secure from DBA?

Hi all,
I want to encrypt some of data, for that i learn about Transperent Data Encryption, But i have doubt that TDE cant able to provide security against DBA.
I want your valluable comment on this. and I want to know, is there any other way to secure my data From DBA except Database Vault?
Thanks
Message was edited by:
Pratik Brahmbhatt

Hi Sam,
We use Oracle Applications 11.5.5 and 11.5.7 and DB 8.1.7.4.0 so TDE is not applicable for us.. but I think I got my objective (to encrypt and decrypt an attribute column) using the dbms_obfuscation_toolkit through the custom.pll
There's only one thing to do, and its being a bit difficult for me to do it: how to capture the event KEY-EXIT (there/then is when I've planned to call the encrypt procedure)? That even is not in the "captured events list" for the custom.pll.
Any ideas? How do you do when you want to make some operation in custom.pll corresponding with a KEY-EXIT event of a form?
Thanks,
Jose.

Similar Messages

Transperant Data Encryption issue with database startup

Hi, I am trying to implemete TDE in oracle databse and have create encryption successfully too.
All the steps went on fine and encryption is working successfully.
now, I have an issue everytime when database shutdown and startup.
for which I have created a procedure to open the wallet and a trigger to open the wallet on DB startup.
here is the example : tde_proc.sql
1 create or replace procedure open_wallet
2 as
3 wallet_open exception;
4 pragma exception_init(wallet_open,-28354);
5 v_stmt varchar2(100);
6 v_password varchar2(20);
7 begin
8 v_password:='abcdef1' ;
9 -- edit the following line to store your secret wallet password
10 v_stmt :='ALTER SYSTEM SET ENCRYPTION WALLET OPEN IDENTIFIED BY "'||v_password||'"';
11 execute immediate v_stmt ;
12 exception
13 when wallet_open then
14 null;
15 end;
16 /
@wrap iname=tde_proc.sql
Processing tde_proc.sql to tde_proc.plb
SQL> @tde_proc.plb
Procedure created.
TRIGGER :
create or replace trigger open_tde_wallet
after startup on database
begin
-- call wrapped pl/sql pocedure
open_wallet;
end open_tde_wallet;
SQL> @open_wal.trg
Trigger created.
when I startup the database, alert log is showing the below error.
Errors in file /opt/oracle10/admin/bmp10/udump/bmp10_ora_18396.trc:
ORA-00604: error occurred at recursive SQL level 1
ORA-28353: failed to open wallet
ORA-06512: at "SYS.OPEN_WALLET", line 11
ORA-06512: at line 3
Thu Jul 23 17:36:41 2009
Completed: ALTER DATABASE OPEN
Please give me some solution to resolve the issue.

Hi..
Thanks for your reply.
1. yes variable v_password and wallet passwords are same. I had double checked after reading your reply. variable pwd
and encryption wallet passwords are same.
2. the entryof ENCRYPTION_WALLET_LOCATION in the SQLNET.ORA is also added.
here is the sqlnet.ora
ENCRYPTION_WALLET_LOCATION =
(SOURCE =
(METHOD = FILE)
(METHOD_DATA =
(DIRECTORY = /opt/oracle10/admin/tstbmp10/encrypt)
Thanks,
Krishna

Securing data from dba access , like Credit Card Details

Hello ,
is there any way of hiding CC details from all users in db level except specifc users
enrypting cc data like oracle hashed passwords
for ex,
case (1)
user 1 ( has access to these details )
select acc#,customer_name from cc_details
output : it will show all the details decrypted
case (2)
user 2 : ( doesnt have access )
select acc#,customer_name from cc_details
output : it will show all the details encrypted
both in db level , like using sqlplus or toad
any idea!
thanks and regards,

Hi, Peter,
You wrote:
Can you please document the problems you mention for Patch Sets/ CPU?
What are the vulnerabilities? Search Alex's Web site but didn't find anything in regards to >DBVault.I've told about these
http://dms.aladdin.ru/file.php?id=d7eb03f7f47ec3c68f4b1f1fe3317119
http://dms.aladdin.ru/file.php?id=88cf1d7a962eddf7e57e2447d1e5b207
and may be this
http://dms.aladdin.ru/file.php?id=232eb8ed58d04295bb3920dbe805358d
(Note: The link will be valid until 26 Jun 2008 GMT).
In reg's to reading data from datafile, that's where TDE comes into the picture; then no-one can read from data file directly.
There is no user who owns TDE; TDE is enabled on a database-wide level. So the >normal data owner (who is the only who should have full access to his own data with >DBVault) can use TDE to encrypt; no extra privileges needed.I’ve told about the user who is the owner of the database wallet (usually SYS). He can temporary disable encryption, takes the data, then restore encryption.
DBVault and TDE should be the perfect match for 'securing data from dba access , like >Credit Card Details'In other words we have yet another administrator (DV owner) instead of the good old SYS :)
And I have a question: in case the protection with DV of some tables was made from the SYS, can he make (in example) full backup or full export of the data (his ordinary administrative tasks)? If yes, then it isn't protection, if no, then...what?
The solution is somewhere else, I think

Is it possible to perform network data encryption between Oracle 11g databases without the advance security option?

Is it possible to perform network data encryption between Oracle 11g databases without the advance security option?
We are not licensed for the Oracle Advanced Security Option and I have been tasked to use Oracle Network Data Encryption in order to encryption network traffic between Oracle instances that reside on remote servers. From what I have read and my prior understanding this is not possible without ASO. Can someone confirm or disprove my research, thanks.

Hi, Srini Chavali-Oracle
As for http://www.oracle.com/technetwork/database/options/advanced-security/advanced-security-ds-12c-1898873.pdf?ssSourceSiteId… ASO is mentioned as TDE and Redacting Sensitive Data to Display. Network encryption is excluded.
As for Network Encryption - Oracle FAQ (of course this is not Oracle official) "Since June 2013, Net Encryption is now licensed with Oracle Enterprise Edition and doesn't require Oracle Advanced Security Option." Could you clarify this? Thanks.

[ADF-11.1.2] Protecting data, even from DBA

Hi,
I am looking for a way to encrypt/decrypt database records of specific table at Application level without loosing BC Features like search functionality.
Reason: I don't want to expose clean records even to customers/DBA as I want them to come back to us for such usecase - e.g.: Generating Reports.
I had started working on this one by encrypting values while storing, and decrypting while reading but I released that I will be loosing ADF features like Search.
So is there anyway I can protect data from DBAs w/o loosing BC features ?

Is this question related to the original post?
I don't see the connection :(
Anyway, who decides how to do the translation? Does 'A%' always mean 'ABC' and 'ACD'?
What if the user enters 'AB%' or 'B%'?
There are two possible solution:
1) http://jobinesh.blogspot.com/2010/12/using-oraclejbodomainarray-with.html
2) http://tompeez.wordpress.com/2011/08/21/extending-viewcriteria-to-use-sql-contains-4/
You still have to answer the above questions and implement it using either of the above techniques-
Timo

Hey yall.. I lost everything from my mac from a data encrypted error and now it won't let me download Lightroom off of the disk again onto my new mac. What should I do?

Hey yall.. I lost everything from my mac from a data encrypted error and now it won't let me download Lightroom off of the disk again onto my new mac. What should I do?

Hi Brennacoyle,
Can you please share the error message that you are getting while trying to download on the new MAC ?
Cheers,
Kartikay Sharma

Sending PGP encrypted e-mails from HCM via SAP PO Secure Connectivity Add-On

Hi all,
we are having a requirement to send PGP encrypted e-mails from HCM. As SAP Standard does not support PGP encryption, we are considering the possibility of using the Secure Connectivity Add-on of SAP PO, targeting a Scenario like the below.
Has anyone dealt with similar scenario? I'm wondering on the Setup on HCM and the Receiver side in PO? Would such scenario work with a Proxy? What I mean is, is it possible to redirect the E-Mail message from HCM via Proxy to SAP PO?
Every feedback is appreciated.
Thanks
Thomas

Hi Thomas
SAPConnect is tied to the email protocol, so AFAIK there is no other choice besides mail adapter.
If you skip the SAPConnect part and use a proxy directly, you can generate an outbound proxy (client proxy) in your HCM system based on a service interface definition from PI's ESR.
Below are some more information about proxy generation and development. You can find more on SCN by searching "outbound proxy".
ABAP Proxy outbound program - purchase order send - Community Profiles - SCN Wiki
ABAP Proxy (Complete Developments on SAP-PI & SAP-ABAP Systems)
Rgds
Eng Swee

General review of Transparent Data Encryption (TDE) and performance of...

I understand that the implementation of just about any database encryption solution, is going to result in a some degree of a performance hit, especially as searches are performed against the database, but none-the-less, we are thinking about implementing the Oracle TDE solution and as recommended, just isolating encryption needs to ONLY necessary columns of data - in our case, columns pertaining to private ASNWER (results) data and/or PII (Pers. Ident. Info.). This being said, is anyone else doing something similar with TDE, or does anyone have any pointers up front on what to look out for, what to expect, and how they are operating with TDE. (Just reaching out for some thoughts, insight, comments, and/or warnings)... Thank you very much. - Jason

Yes, we have many customers using it, please check my updated TDE best practices paper; it has lots of hints and tricks and things to look out for:
Available from http://www.oracle.com/technology/deploy/security/database-security/transparent-data-encryption/index.html (scroll down, please).
Thanks, Peter

Opening Encrypted/Certificate Secured PDF.

Hello,
I have a pdf encrypted using certificate. I want to open this pdf using Acrobat sdk APIs. I have read the documentation of "Opening secured Pdf". I learnt that AVDocOpen() function calls Acrobat built in authorization procedure and using PD layer to open a encrypted pdf we need to write our own authorozation procedure. I want some example which demostrates how encrypted pdf are opened. Also, when opening certificate secured pdf, where does Acrobat installs the certificate?
Please can someone guide me!!
Thanks in advance.

Yes, you can read XMP w/o opening the PDF – of course, that assumes that the XMP is not encrypted (it's a choice of the PDF authoring/encrypting tool).
From: Adobe Forums <[email protected]<mailto:[email protected]>>
Reply-To: "[email protected]<mailto:[email protected]>" <[email protected]<mailto:[email protected]>>
Date: Mon, 16 Jan 2012 21:10:56 -0800
To: Leonard Rosenthol <[email protected]<mailto:[email protected]>>
Subject: Opening Encrypted/Certificate Secured PDF.
Re: Opening Encrypted/Certificate Secured PDF.
created by poortip87<http://forums.adobe.com/people/poortip87> in Acrobat SDK - View the full discussion<http://forums.adobe.com/message/4145422#4145422

SQL Server Transparent Data encryption

I have implemented TDE for the Database and Column Level Encryption for Sensitive data in Tables. But, the Porblem is the data is entered through an front end application how could i encrypt this data when it is inserted from the Front end. And how to decry-pt
this data for the users when it is selected.
Your suggestions are most valuable.
Reagrds
Rehaan Khan
RehaanKhan. M

Let me start with a solution that may have been overlooked, but it is good to make sure we cover it. Have you considered using column-level permissions? It may not be a complete solution for your particular scenario if you need to give access to the column
for other reasons (after all, the group you are trying to restrict is probably developing applications on top of the column storing sensitive data) or if the developer group has permission to create objects that would render the sensitive data subject to ownership
chains. For more information on column-permissions look at
http://msdn.microsoft.com/en-us/library/ms186915.aspx
Assuming permissions alone will not solve the problem. By using encryption you should be able to limit access to the sensitive data to the developers, but it will also require some changes to your schema & application. TDE (Transparent Data Encryption)
will not help you in this scenario since you need to restrict access to the data and restricting access to the column is not sufficient.
The following links may be useful to get you started with SQL Encryption capabilities:
SQL Server Encryption (http://msdn.microsoft.com/en-us/library/bb510663.aspx)
Data Encryption in SQL Server (http://msdn.microsoft.com/en-us/library/bb669072(v=vs.110).aspx)
Encrypt a Column of data (http://msdn.microsoft.com/en-us/library/ms179331.aspx)
Cryptographic Functions (T-SQL) (http://msdn.microsoft.com/en-us/library/ms173744.aspx)
Older articles, but they may still be quite useful:
Indexing encrypted Data (http://blogs.msdn.com/b/raulga/archive/2006/03/11/549754.aspx)
SQL Server 2005: searching encrypted data (http://blogs.msdn.com/b/lcris/archive/2005/12/22/506931.aspx)
One recommendation may be to encrypt the data using an AES key, and protect the key using one or more certificates (I would recommend using a separate certificate per individual if possible), making sure that only authorized people have access to the keys.
Anyone else with access to the column, but not to the keys would not be able to decrypt the data.
BTW. I would also recommend using SQL Auditing (http://msdn.microsoft.com/en-us/library/cc280386.aspx) in order to keep honest people honest, by monitoring access to the keys & to the
sensitive data.
I hope this information helps,
-Raul Garcia
SQL Server Security
This posting is provided "AS IS" with no warranties, and confers no rights.

Transparent Data Encryption Configuration

Hi,
I want to configure Transparent Data Encryption on a Database which is protected with Database Vault.
Is there any document which talks about the integration of Database Vault with Transparent Data Encryption.
I want to create a common security administrator user (other than sys/system users) for Transparent Data Encryption configuration.
If i create a new administrator from Enterprise Manager console i am getting the following error:
SQL Error ORA-47401: Realm violation for grant system privilege on SELECT ANY DICTIONARY. ORA-06512: at "SYSMAN.MGMT_USER", line 9316 ORA-06512
How to avoid this error.
Any pointers on this is appreciated.
Thanks & regards,
Srikanth

Turning off DBVault is not needed to turn on TDE ... the DB user who wants to manage the DB through Enterprise Manager, needs to have the SELECT ANY DICTIONARY privilege (I think I remember this is done by logging into EM (not DVA) as DBV_OWNER, or DV_ACCT_MNGR if you have configured one).
If then the creation of the wallet fails, make the user an OWNER of the DATA DICTIONARY realm in DBVault. Note that the directory that you plan to use to store the wallet needs to exist before you create the wallet and master key for TDE.
Peter
Edited by: Peter Wahl on 03.07.2010 02:20

HT4865 Data encryption

How does iCloud encrypt my stored data? Does it use my own private key? Can anybody who has access to the iCloud storage and the software decrypt my data? Thanks, Lev.

From the Apple support document online:
Encrypting content that is stored in iCloud
Apple encrypts data that is stored to deliver the iCloud service. Encrypted data includes:
Photos in your Photo Stream
Documents in the Cloud
Backup data for your iOS device
Contacts
Calendars
Bookmarks
Reminders
Location data for Find My iPhone, iPad, iPod touch, and Mac
Location data for Find My Friends
Use of Secure Tokens for Authentication
When you access iCloud services using Apple’s built-in apps (for example, Mail, Contacts, and Calendar on iOS 5, and Mail, Address Book, and iCal on OS X Lion), authentication is done using a secure token. Using a secure token eliminates the need to store your iCloud password on devices and computers.
See for more: http://support.apple.com/kb/HT4865

JDBC Data Encryption.

Hello,
I was wondering if Oracle 10g provides a feature such that you put a setting to the oracle driver (i.e. a key). Later on when you are writing data to the db it automatically encrypts that data and when you are reading it, the driver decrypts the data. Also, when a regular user is in the database they will see encrypted data instead of the original.
I guess its something like
http://www.safelogic.com/en_api_jdbc_encryption_database_sql.html
Thank you,
Paul.

Still confused.. why not use TDE and only allow the application user to see the data. People logging in directly to the database don't log in with the same user the application does, do they? Easy to change if they do..
So, use TDE and encrypt your data. Give only the application user the ability to access that data. Everything is secure from normal users.
Java does have encryption/decryption processes, but last I knew they were pretty cumbersome to work with. I don't know of any features in Oracle JDBC that are doing what you are looking for, though you could probably plug in any 3rd party Java tools pretty easy.

Error while creating Data Form Definition report from Planning

Hi All,
Working on Planning 11.1.2 (x64)
I tried to generate a Data Form Definition report from Planning and found that I get an error if I select the option "Include member selection list". By going a bit deeper, I realised that it errors for some forms while works fine for others.
I have tried to find any differences in setting or selection between the forms but haven't been able to see anything that struck me as a reason for error.
Help please.
Thanks,
Abhishek

The Planning sysout log says:
[120910_091125126][oracle.apps.xdo.common.xml.XSLTWrapper][EXCEPTION] XSL error:
<Line 1, Column 1068>: XML-20100: (Fatal Error) Expected ';'.
<Line 1, Column 1068>: XML-20250: (Fatal Error) Missing entity 'ThisYear'.
<Line 1, Column 1075>: XML-20100: (Fatal Error) Expected ';'.
<Line 1, Column 1075>: XML-20250: (Fatal Error) Missing entity 'Year2'.
<Line 1, Column 1082>: XML-20100: (Fatal Error) Expected ';'.
<Line 1, Column 1082>: XML-20250: (Fatal Error) Missing entity 'Year3'.
<Line 1, Column 1089>: XML-20100: (Fatal Error) Expected ';'.
<Line 1, Column 1089>: XML-20250: (Fatal Error) Missing entity 'Year4'.
<Line 1, Column 1096>: XML-20100: (Fatal Error) Expected ';'.
<Line 1, Column 1096>: XML-20250: (Fatal Error) Missing entity 'Year5'.
<Line 1, Column 4586>: XML-20100: (Fatal Error) Expected ';'.
<Line 1, Column 4586>: XML-20250: (Fatal Error) Missing entity 'ThisYear'.
<Line 1, Column 4593>: XML-20100: (Fatal Error) Expected ';'.
<Line 1, Column 4593>: XML-20250: (Fatal Error) Missing entity 'Year2'.
<Line 1, Column 4600>: XML-20100: (Fatal Error) Expected ';'.
<Line 1, Column 4600>: XML-20250: (Fatal Error) Missing entity 'Year3'.
<Line 1, Column 4607>: XML-20100: (Fatal Error) Expected ';'.
<Line 1, Column 4607>: XML-20250: (Fatal Error) Missing entity 'Year4'.
<Line 1, Column 4614>: XML-20100: (Fatal Error) Expected ';'.
<Line 1, Column 4614>: XML-20250: (Fatal Error) Missing entity 'Year5'.
<Line 1, Column 12215>: XML-20100: (Fatal Error) Expected ';'.
<Line 1, Column 12215>: XML-20250: (Fatal Error) Missing entity 'ThisYear'.
<Line 1, Column 12222>: XML-20100: (Fatal Error) Expected ';'.
<Line 1, Column 12222>: XML-20250: (Fatal Error) Missing entity 'Year2'.
<Line 1, Column 12229>: XML-20100: (Fatal Error) Expected ';'.
<Line 1, Column 12229>: XML-20250: (Fatal Error) Missing entity 'Year3'.
<Line 1, Column 12236>: XML-20100: (Fatal Error) Expected ';'.
<Line 1, Column 12236>: XML-20250: (Fatal Error) Missing entity 'Year4'.
<Line 1, Column 12243>: XML-20100: (Fatal Error) Expected ';'.
<Line 1, Column 12243>: XML-20250: (Fatal Error) Missing entity 'Year5'.
<Line 1, Column 18528>: XML-20100: (Fatal Error) Expected ';'.
<Line 1, Column 18528>: XML-20250: (Fatal Error) Missing entity 'ThisYear'.
<Line 1, Column 18535>: XML-20100: (Fatal Error) Expected ';'.
<Line 1, Column 18535>: XML-20250: (Fatal Error) Missing entity 'Year2'.
<Line 1, Column 18542>: XML-20100: (Fatal Error) Expected ';'.
<Line 1, Column 18542>: XML-20250: (Fatal Error) Missing entity 'Year3'.
<Line 1, Column 18549>: XML-20100: (Fatal Error) Expected ';'.
<Line 1, Column 18549>: XML-20250: (Fatal Error) Missing entity 'Year4'.
<Line 1, Column 18556>: XML-20100: (Fatal Error) Expected ';'.
<Line 1, Column 18556>: XML-20250: (Fatal Error) Missing entity 'Year5'.
<Line 1, Column 39824>: XML-20100: (Fatal Error) Expected ';'.
<Line 1, Column 39824>: XML-20250: (Fatal Error) Missing entity 'Scenario'.
<Line 1, Column 39905>: XML-20100: (Fatal Error) Expected ';'.
<Line 1, Column 39905>: XML-20250: (Fatal Error) Missing entity 'PriorYear'.
<Line 1, Column 39985>: XML-20100: (Fatal Error) Expected ';'.
<Line 1, Column 39985>: XML-20250: (Fatal Error) Missing entity 'ThisYear'.
<Line 1, Column 39992>: XML-20100: (Fatal Error) Expected ';'.
<Line 1, Column 39992>: XML-20250: (Fatal Error) Missing entity 'Year2'.
<Line 1, Column 39999>: XML-20100: (Fatal Error) Expected ';'.
<Line 1, Column 39999>: XML-20250: (Fatal Error) Missing entity 'Year3'.
<Line 1, Column 40006>: XML-20100: (Fatal Error) Expected ';'.
<Line 1, Column 40006>: XML-20250: (Fatal Error) Missing entity 'Year4'.
<Line 1, Column 40013>: XML-20100: (Fatal Error) Expected ';'.
<Line 1, Column 40013>: XML-20250: (Fatal Error) Missing entity 'Year5'.
<Line 1, Column 41613>: XML-20100: (Fatal Error) Expected ';'.
<Line 1, Column 41613>: XML-20250: (Fatal Error) Missing entity 'CommentYearTarget'.
<Line 1, Column 41702>: XML-20100: (Fatal Error) Expected ';'.
<Line 1, Column 41702>: XML-20250: (Fatal Error) Missing entity 'CommentYearTarget'.
<Line 1, Column 41791>: XML-20100: (Fatal Error) Expected ';'.
<Line 1, Column 41791>: XML-20250: (Fatal Error) Missing entity 'CommentYearTarget'.
<Line 1, Column 41880>: XML-20100: (Fatal Error) Expected ';'.
<Line 1, Column 41880>: XML-20250: (Fatal Error) Missing entity 'CommentYearTarget'.
<Line 1, Column 41960>: XML-20100: (Fatal Error) Expected ';'.
<Line 1, Column 41960>: XML-20250: (Fatal Error) Missing entity 'ThisYear'.
<Line 1, Column 41967>: XML-20100: (Fatal Error) Expected ';'.
<Line 1, Column 41967>: XML-20250: (Fatal Error) Missing entity 'Year2'.
<Line 1, Column 41974>: XML-20100: (Fatal Error) Expected ';'.
<Line 1, Column 41974>: XML-20250: (Fatal Error) Missing entity 'Year3'.
<Line 1, Column 41981>: XML-20100: (Fatal Error) Expected ';'.
<Line 1, Column 41981>: XML-20250: (Fatal Error) Missing entity 'Year4'.
<Line 1, Column 41988>: XML-20100: (Fatal Error) Expected ';'.
<Line 1, Column 41988>: XML-20250: (Fatal Error) Missing entity 'Year5'.
<Line 1, Column 46124>: XML-20100: (Fatal Error) Expected ';'.
<Line 1, Column 46124>: XML-20250: (Fatal Error) Missing entity 'CostCentre'.
<Line 1, Column 47563>: XML-20100: (Fatal Error) Expected ';'.
<Line 1, Column 47563>: XML-20250: (Fatal Error) Missing entity 'Scenario'.
<Line 1, Column 47644>: XML-20100: (Fatal Error) Expected ';'.
<Line 1, Column 47644>: XML-20250: (Fatal Error) Missing entity 'PriorYear'.
<Line 1, Column 47724>: XML-20100: (Fatal Error) Expected ';'.
<Line 1, Column 47724>: XML-20250: (Fatal Error) Missing entity 'ThisYear'.
<Line 1, Column 47731>: XML-20100: (Fatal Error) Expected ';'.
<Line 1, Column 47731>: XML-20250: (Fatal Error) Missing entity 'Year2'.
<Line 1, Column 47738>: XML-20100: (Fatal Error) Expected ';'.
<Line 1, Column 47738>: XML-20250: (Fatal Error) Missing entity 'Year3'.
<Line 1, Column 47745>: XML-20100: (Fatal Error) Expected ';'.
<Line 1, Column 47745>: XML-20250: (Fatal Error) Missing entity 'Year4'.
<Line 1, Column 47752>: XML-20100: (Fatal Error) Expected ';'.
<Line 1, Column 47752>: XML-20250: (Fatal Error) Missing entity 'Year5'.
<Line 1, Column 49431>: XML-20100: (Fatal Error) Expected ';'.
<Line 1, Column 49431>: XML-20250: (Fatal Error) Missing entity 'Scenario'.
<Line 1, Column 49512>: XML-20100: (Fatal Error) Expected ';'.
<Line 1, Column 49512>: XML-20250: (Fatal Error) Missing entity 'PriorYear'.
<Line 1, Column 49592>: XML-20100: (Fatal Error) Expected ';'.
<Line 1, Column 49592>: XML-20250: (Fatal Error) Missing entity 'ThisYear'.
<Line 1, Column 49599>: XML-20100: (Fatal Error) Expected ';'.
<Line 1, Column 49599>: XML-20250: (Fatal Error) Missing entity 'Year2'.
<Line 1, Column 49606>: XML-20100: (Fatal Error) Expected ';'.
<Line 1, Column 49606>: XML-20250: (Fatal Error) Missing entity 'Year3'.
<Line 1, Column 49613>: XML-20100: (Fatal Error) Expected ';'.
<Line 1, Column 49613>: XML-20250: (Fatal Error) Missing entity 'Year4'.
Most of these are Substitution Variables. I dont know why it is showing a few lines for "Scenario" as well.
The Planning syserr log says
java.net.SocketException: socket write error: Connection reset by peer.
     at jrockit.net.SocketNativeIO.writeBytesPinned(Native Method)
     at jrockit.net.SocketNativeIO.socketWrite(SocketNativeIO.java:73)
     at java.net.SocketOutputStream.write(SocketOutputStream.java:136)
     at weblogic.utils.io.ChunkedOutputStream.writeTo(ChunkedOutputStream.java:193)
     at weblogic.servlet.internal.ResponseHeaders.writeHeaders(ResponseHeaders.java:443)
     at weblogic.servlet.internal.ServletResponseImpl.writeHeaders(ServletResponseImpl.java:1291)
     at weblogic.servlet.internal.ServletOutputStreamImpl.sendHeaders(ServletOutputStreamImpl.java:260)
     at weblogic.servlet.internal.ServletOutputStreamImpl.flush(ServletOutputStreamImpl.java:108)
     at weblogic.servlet.internal.ServletResponseImpl.sendRedirect(ServletResponseImpl.java:907)
     at HspValidatingHttpResponse.sendRedirect(Unknown Source)
     at jsp_servlet.__planninglogoff._jspService(__planninglogoff.java:1411)
     at weblogic.servlet.jsp.JspBase.service(JspBase.java:35)
     at weblogic.servlet.internal.StubSecurityHelper$ServletServiceAction.run(StubSecurityHelper.java:227)
     at weblogic.servlet.internal.ServletStubImpl.execute(ServletStubImpl.java:292)
     at weblogic.servlet.internal.TailFilter.doFilter(TailFilter.java:27)
     at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:57)
     at HspValidationFilter.doFilter(Unknown Source)
     at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.run(WebAppServletContext.java:3592)
     at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:321)
     at weblogic.security.service.SecurityManager.runAs(SecurityManager.java:121)
     at weblogic.servlet.internal.WebAppServletContext.securedExecute(WebAppServletContext.java:2202)
     at weblogic.servlet.internal.WebAppServletContext.execute(WebAppServletContext.java:2108)
     at weblogic.servlet.internal.ServletRequestImpl.run(ServletRequestImpl.java:1432)
     at weblogic.work.ExecuteThread.execute(ExecuteThread.java:201)
     at weblogic.work.ExecuteThread.run(ExecuteThread.java:173)
oracle.xml.parser.v2.XMLParseException: Expected ';'.
     at oracle.xml.parser.v2.XMLError.flushErrors1(XMLError.java:323)
     at oracle.xml.parser.v2.NonValidatingParser.parseDocument(NonValidatingParser.java:335)
     at oracle.xml.parser.v2.XMLParser.parse(XMLParser.java:318)
     at oracle.apps.xdo.common.xml.XSLTClassic.transform(Unknown Source)
     at oracle.apps.xdo.common.xml.XSLTWrapper.transform(Unknown Source)
     at oracle.apps.xdo.template.fo.util.FOUtility.generateFO(Unknown Source)
     at oracle.apps.xdo.template.fo.util.FOUtility.generateFO(Unknown Source)
     at oracle.apps.xdo.template.fo.util.FOUtility.generateFO(Unknown Source)
     at oracle.apps.xdo.template.FOProcessor.createFO(Unknown Source)
     at oracle.apps.xdo.template.FOProcessor.generate(Unknown Source)
     at HspReportingServlet.Handle(Unknown Source)
     at HspHttpServlet.initialize(Unknown Source)
     at HspHttpServlet.doGet(Unknown Source)
     at javax.servlet.http.HttpServlet.service(HttpServlet.java:707)
     at javax.servlet.http.HttpServlet.service(HttpServlet.java:820)
     at weblogic.servlet.internal.StubSecurityHelper$ServletServiceAction.run(StubSecurityHelper.java:227)
     at weblogic.servlet.internal.StubSecurityHelper.invokeServlet(StubSecurityHelper.java:125)
     at weblogic.servlet.internal.ServletStubImpl.execute(ServletStubImpl.java:292)
     at weblogic.servlet.internal.TailFilter.doFilter(TailFilter.java:26)
     at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
     at HspValidationFilter.doFilter(Unknown Source)
     at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
     at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.run(WebAppServletContext.java:3592)
     at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:321)
     at weblogic.security.service.SecurityManager.runAs(SecurityManager.java:121)
     at weblogic.servlet.internal.WebAppServletContext.securedExecute(WebAppServletContext.java:2202)
     at weblogic.servlet.internal.WebAppServletContext.execute(WebAppServletContext.java:2108)
     at weblogic.servlet.internal.ServletRequestImpl.run(ServletRequestImpl.java:1432)
     at weblogic.work.ExecuteThread.execute(ExecuteThread.java:201)
     at weblogic.work.ExecuteThread.run(ExecuteThread.java:173)
Would be great if you could interpret these log and let me know how I can resolve this.
Cheers

Listener Start Problem with TDE (Transparent Data Encryption)

i am testing Transparent Data Encryption in Oracle 10g by using the following link
http://oracle-base.com/articles/10g/TransparentDataEncryption_10gR2.php
Before Implementing the TDE listener was running fine but after implementation of TDE the listener was unable to start
Please check the steps which i follow
Step1-
specify the ENCRYPTION_WALLET_LOCATION parameter in the sqlnet.ora file, now SQLNET.ora file looks like the following
SQLNET.AUTHENTICATION_SERVICES= (NTS)
NAMES.DIRECTORY_PATH= (TNSNAMES, EZCONNECT)
ENCRYPTION_WALLET_LOCATION=
(SOURCE=(METHOD=FILE)(METHOD_DATA=
(DIRECTORY=D:\oracle\product\10.2.0\wallet\)))
please check the contents of listener.ora file,i didn't make any configuration changes for listener before or after implementation of TDE
SID_LIST_LISTENER =
(SID_LIST =
(SID_DESC =
(SID_NAME = PLSExtProc)
(ORACLE_HOME = D:\oracle\product\10.2.0\db_1)
(PROGRAM = extproc)
LISTENER =
(DESCRIPTION_LIST =
(DESCRIPTION =
(ADDRESS = (PROTOCOL = IPC)(KEY = EXTPROC1))
(ADDRESS = (PROTOCOL = TCP)(HOST = shakeel-pc.lhr.inov8.com.pk)(PORT = 1521))
Step2-
CONN sys/password AS SYSDBA
ALTER SYSTEM SET ENCRYPTION KEY AUTHENTICATED BY "myPassword";
TDE implemented successfuly implemented.
But when i try to stop/start listener
C:\>lsnrctl status
LSNRCTL for 32-bit Windows: Version 10.2.0.1.0 - Production on 06-JUN-2008 05:44
:30
Copyright (c) 1991, 2005, Oracle. All rights reserved.
Connecting to (DESCRIPTION=(ADDRESS=(PROTOCOL=IPC)(KEY=EXTPROC1)))
STATUS of the LISTENER
Alias LISTENER
Version TNSLSNR for 32-bit Windows: Version 10.2.0.1.0 - Produ
ction
Start Date 05-JUN-2008 22:40:14
Uptime 0 days 7 hr. 4 min. 16 sec
Trace Level off
Security ON: Local OS Authentication
SNMP OFF
Listener Parameter File D:\oracle\product\10.2.0\db_1\network\admin\listener.o
ra
Listener Log File D:\oracle\product\10.2.0\db_1\network\log\listener.log
Listening Endpoints Summary...
(DESCRIPTION=(ADDRESS=(PROTOCOL=ipc)(PIPENAME=\\.\pipe\EXTPROC1ipc)))
(DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=shakeel-pc.lhr.inov8.com.pk)(PORT=15
21)))
Services Summary...
Service "PLSExtProc" has 1 instance(s).
Instance "PLSExtProc", status UNKNOWN, has 1 handler(s) for this service...
Service "orcl" has 1 instance(s).
Instance "orcl", status READY, has 1 handler(s) for this service...
Service "orclXDB" has 1 instance(s).
Instance "orcl", status READY, has 1 handler(s) for this service...
Service "orcl_XPT" has 1 instance(s).
Instance "orcl", status READY, has 1 handler(s) for this service...
The command completed successfully
C:\>lsnrctl stop
LSNRCTL for 32-bit Windows: Version 10.2.0.1.0 - Production on 06-JUN-2008 05:44
:35
Copyright (c) 1991, 2005, Oracle. All rights reserved.
Connecting to (DESCRIPTION=(ADDRESS=(PROTOCOL=IPC)(KEY=EXTPROC1)))
The command completed successfully
C:\>lsnrctl start
[i]LSNRCTL for 32-bit Windows: Version 10.2.0.1.0 - Production on 06-JUN-2008 05:44
:40
Copyright (c) 1991, 2005, Oracle. All rights reserved.
Starting tnslsnr: please wait...
TNSLSNR for 32-bit Windows: Version 10.2.0.1.0 - Production
System parameter file is D:\oracle\product\10.2.0\db_1\network\admin\listener.or
a
Log messages written to D:\oracle\product\10.2.0\db_1\network\log\listener.log
Error listening on: (ADDRESS=(PROTOCOL=tcp)(HOST=127.0.0.1)(PARTIAL=yes)(QUEUESI
ZE=1))
No longer listening on: (DESCRIPTION=(ADDRESS=(PROTOCOL=ipc)(PIPENAME=\\.\pipe\E
XTPROC1ipc)))
TNS-12560: TNS:protocol adapter error
TNS-00583: Valid node checking: unable to parse configuration parameters
Listener failed to start. See the error message(s) above...
To start the listener i have to close wallet as
1- SQL>conn sys as sysdba
ALTER SYSTEM SET WALLET CLOSE;
2- Replace the SQLNET.ora file as previous ,now SQLNET.ora contains
SQLNET.AUTHENTICATION_SERVICES= (NTS)
NAMES.DIRECTORY_PATH= (TNSNAMES, EZCONNECT)
Now if i start the listener then the listener was started succesfuly
Please suggest why listener is not being start with TDE?

I have the same problem. I'm testing TDE using Oracle 11gR1. After setting the parameter encryption_wallet_location and restart the listener, the listener failed to start. The error is exactly the same
TNS-12560: TNS:protocol adapter error
TNS-00583: Valid node checking: unable to parse configuration parameters
By removing the parameter encryption_wallet_location, the listner can be started successfully.
Anyone can help?

IS Transperent Data Encryption is secure from DBA?

Similar Messages

Maybe you are looking for