Updates on encrypted column (TDE oracle10g)
Hello All:
Is there any way to speed up the updates on on a large encrypted column table having 40mil records .
My experience is it is taking unusally long time and my understanding is oracle has to use decryption algorithm for each row updates.
Any ideas appreciated.
Thanks
S~
Run a trace and post the results.
The question I would ask is whether the encryption has anything to do with it. Might a poor design cause the exact same thing without encryption? Do you know?
Similar Messages
-
Hi ,
we are planning to implement Transparent Data Encryption for 11.2.0.4 11g DB .
My Query is Whether SYS DB user will be able to Decrypt all encrypted Columns.
we have tested for Virtual Private Database Policy, and found out that it applies Policy for all DB Users except SYS.
so now we have a query whether encryption will be applied for all DB users except for SYS.?
regards
Abdulrahman
(P.S: attached is document how we tested for Virtual Private Database , if we can somehow disable SYS access to specific tables also our compliance requirement will be met thanks )http://docs.oracle.com/cd/E11882_01/network.112/e40393/asotrans.htm#ASOAG600
"Transparent Data Encryption(TDE) enables you to encrypt sensitive data, such as credit card numbers, stored in tables and tablespaces. Encrypted data is transparently decrypted for a database user or application that has access to data. TDE helps protect data stored on media in the event that the storage media or data file gets stolen."
TDE encrypts data blocks.
Users are not aware that the objects they query are encrypted - this is the reason it is called 'transparent'. -
how can Encrypted column in Oracle 9i?
Oracle 9i (9.2.0.8)
Windows 2003 32bitYou can encrypt column data in Oracle 9i using the provided Oracle encryption package: DBMS_OBFUSCATION_TOOLKIT
This makes encryption and decryption an application/code feature rather than the true database feature, transparent data encryption, provided in 10g and mentioned by oradba.
10g also provides the superior DBMS_CRYPTO package where you need column level encryption of the data since TDE by itself often does not provide enough security to meet requirements for sensitive data.
HTH -- Mark D Powell -- -
How to make a dmp file for a table contains encrypted column/s?
Hi All,
I've created a table with encrypted columns using TDE (Wallet). When I tried to make a dmp file by this command:
exp system/password file=<path>\ex.dmp owner=ex
the command pormpt gives this error: Feature (COLUMN ENCRYPTION) of column EMP_SSN in table EX.EMPLOYEES is not supported. the table will not be exported.
How to solve this problem?
I want to make a dmp file which export data of encrypted column in an encrypted format not clear format. How?
Note:
there is a parameter: ENCRYPTED_COLUMNS_ONLY: Encrypted columns are written to the dump file set in encrypted formatStart by reading the manual :-
http://download.oracle.com/docs/cd/B19306_01/server.102/b14215/dp_overview.htm#SUTIL100
Or you can run in interactive mode :-
[oracle@dev-oranode-221 ~]$ expdp
Export: Release 11.2.0.1.0 - Production on Mon Nov 23 13:08:00 2009
Copyright (c) 1982, 2009, Oracle and/or its affiliates. All rights reserved.
Username: a
Password:
Connected to: Oracle Database 11g Enterprise Edition Release 11.2.0.1.0 - 64bit Production
With the Partitioning, OLAP, Data Mining, Oracle Database Vault
and Real Application Testing options
FLASHBACK automatically enabled to preserve database integrity.
Starting "A"."SYS_EXPORT_SCHEMA_01": a/********
Estimate in progress using BLOCKS method...
Processing object type SCHEMA_EXPORT/TABLE/TABLE_DATA
Total estimation using BLOCKS method: 192 KB
Processing object type SCHEMA_EXPORT/USER
Processing object type SCHEMA_EXPORT/SYSTEM_GRANT
Processing object type SCHEMA_EXPORT/ROLE_GRANT
Processing object type SCHEMA_EXPORT/DEFAULT_ROLE
Processing object type SCHEMA_EXPORT/TABLESPACE_QUOTA
Processing object type SCHEMA_EXPORT/PRE_SCHEMA/PROCACT_SCHEMA
Processing object type SCHEMA_EXPORT/TABLE/TABLE
Processing object type SCHEMA_EXPORT/TABLE/INDEX/INDEX
Processing object type SCHEMA_EXPORT/TABLE/CONSTRAINT/CONSTRAINT
Processing object type SCHEMA_EXPORT/TABLE/INDEX/STATISTICS/INDEX_STATISTICS
Processing object type SCHEMA_EXPORT/TABLE/COMMENT
Processing object type SCHEMA_EXPORT/TABLE/STATISTICS/TABLE_STATISTICS
Processing object type SCHEMA_EXPORT/TABLE/POST_TABLE_ACTION
Processing object type SCHEMA_EXPORT/MATERIALIZED_VIEW
Processing object type SCHEMA_EXPORT/TABLE/MATERIALIZED_VIEW_LOG
Processing object type SCHEMA_EXPORT/POST_SCHEMA/PROCACT_SCHEMA
. . exported "A"."EMP" 5.421 KB 1 rows
. . exported "A"."EMP_MV" 5.429 KB 1 rows
. . exported "A"."TEST" 5.023 KB 1 rows
. . exported "A"."MLOG$_EMP" 0 KB 0 rows
. . exported "A"."SOURCE" 0 KB 0 rows
Master table "A"."SYS_EXPORT_SCHEMA_01" successfully loaded/unloaded
Dump file set for A.SYS_EXPORT_SCHEMA_01 is:
/opt/oracle/product/admin/db1122/dpdump/expdat.dmp
Job "A"."SYS_EXPORT_SCHEMA_01" successfully completed at 13:09:23 -
Access for update only one column in table?
Hi all,
My need is to grant access for update only one column c1 in table t1.
I guess I should use view, could you please give me some example? Maybe other ideas?Hi,
You can grant privileges on individual columns.
GRANT UPDATE (c1)
ON t1
TO grantee_name;Look up GRANT in the SQL language manual. Annoyingly, in recent editions of the manual, GRANT is not indexed, but it's in alphabetic order with all the other statements:
http://docs.oracle.com/cd/E11882_01/server.112/e26088/statements_9013.htm#i2155015 -
Tabular Report for Update a single column
Hello Everyone,
I have a tabular report which will display 1 column (apart from primary key),
1. I will display a edit icon (on primary key)
2. when the user selects this icon, this only row must become updatable (only one column must become text item, so that user can modify the value).
3. Next this text item, i would like to display save button and cancel button so that user can click one of these buttons next to that particular row.
Any help would be appreciated.
Regards
AnilThere is no easy way to do this without some incredibly lengthy javascript. Tabular forms still do not give much declarative control to the developer.
If you are looking to click a button and update one column on one row, it's easiest to change your design to two pages using report and form. Make the first page the report with an Edit button, click the button (nothing more than a link) and it goes to a basic form with only one updateable field. After submit, branch back to the first page. Easy.
For the end user, there are no more mouse clicks involved in this than what you described originally so it's likely it'll be an acceptable application design change. -
Update a single column of a table
Hi Champs,
I want to update a single column of table PA0000.
Following is ABAp code I am using:
UPDATE pa0000 SET massn = wa_upd_actn71-massn
WHERE pernr = wa_upd_actn71-pernr AND
massn = c_crct_entry.
where in current scenario wa_upd_actn71-massn = 54,
wa_upd_actn71-pernr = 10005092,
c_crct_entry = 71.
But this code is not working and note updating the DB table PA0000.
Can you help me out?
Edited by: Nishant Khimesra on Apr 7, 2009 2:00 PM
Edited by: Nishant Khimesra on Apr 7, 2009 2:00 PMhiii,
If u want to update it thr program then write the query as update <dbtablename> set fld = value where <condn>. make sure that the values u pass are converted as per the values in database.
2nd way is goto se16n
specify table name and then enter &sap_edit on command line. sap editing function will be edited. specify the filter parameters on the field and then execute the transaction. u can change thd data instantly as the data appears in editable alv.
Regards,
Anil N. -
Need to update a single column in a table with some other column value
Hi experts,
I was about to change one column data type in a table. Then I renamed that column name to "old_column_name" . Later I added new column name with required datatype( My case its NCLOB). Now I want to update the new column value with old column value.I mean i have to copy the data. But data amount is very huge. Its more than 1.5 crores of data. But on promote day, I have only 1 hr of outage. Please suggest the effective solution to achieve this.Hi Stew
I have 1 primary key in my table and 11 foreign keys in my table.there are 20 check constraints as well.
If i go for an online redefine of a table, these objects will be created back automatically?
Please clarify.
This is my table. Here Remarks is the column with CLOB datatype. To support multi language, I need to change it to NCLOB. That column having data so i cant rename it.
So I added new column , after renaming that remarks to old_remarks. Now new column remarks is ready with NCLOB data type, but no data in it.
To copy the old remarks column into new remarks column, i thought to write one script. But how it is achievable using "DBMS_REDEFINITION". Please explain me,
create table XXXXXXXXXX
ID NUMBER(8),
COMPLETED_DATE DATE,
COMMUNICATION_MEDIUM VARCHAR2(32),
REMARKS1 VARCHAR2(4000),
COPY VARCHAR2(1),
IO_MARKER VARCHAR2(3),
EVENT_DATE DATE,
CON_REF_NO NUMBER(8),
DEP_CODE VARCHAR2(6),
SFM_STAFF_NO NUMBER(8),
CRPD_ID NUMBER(8),
CRPD_ID_COPY NUMBER(8),
STATUS VARCHAR2(2),
COMEBACK_NO NUMBER(2),
ADD_ADD_ID NUMBER(10),
AEV_ID NUMBER(8),
OLAY_ID NUMBER(8),
COE_TYPE VARCHAR2(3),
CET_CODE VARCHAR2(6),
DEP_CODE_RAISED_BY VARCHAR2(6),
SFM_STAFF_NO_RAISED_BY NUMBER(8),
USR_CREATED VARCHAR2(30),
CREATED DATE,
USR_CHANGED VARCHAR2(30),
CHANGED DATE,
EXT_REF_ID VARCHAR2(150),
REPLY_EXPECTED_DATE DATE,
SEC_ID VARCHAR2(8) not null,
PROTECTED VARCHAR2(1),
APPROVED_BY NUMBER(8),
DOCUMENT BLOB,
OLD_REMARKS CLOB,
CTS_ID NUMBER(8),
MESSAGE_STATUS VARCHAR2(4),
WORD_DOCUMENT NCLOB,
REMARKS NCLOB
Edited by: Hema on Jul 2, 2012 8:31 AM
Edited by: Hema on Jul 2, 2012 8:31 AM -
Guys,
I need to update table A columns col3, col4, col5 and col6 by table b columns col3, col4, col5 and col6 however table b col5 and col6 values need to come from table c col1.
Means table b col5 and col6 have values in it however i need to replace them with value from table c col1 and need to update table a col5 and col6 accordingly.
table a and table b has col1 and col2 in common.
i am trying something like this.
Update a
a.col3 = b.col3,
a.col4 = b.col4,
a.col5 = (select col1 from table_c c where c.col2=b.col5),
a.col6 = (select col1 from table_c c where c.col2=b.col6)
from table_A a inner join table_b
on a.col1=b.col1 and a.col2=b.col2
can someone help me reframe above update query?
thanks in advance for your help.Try the below:(If you have multiple values, then you may need to use TOP 1 as commented code in the below script)
create Table tableA(Col1 int,Col2 int,Col3 int,Col4 int,Col5 int,Col6 int)
Insert into tableA values(1,2,3,4,5,6)
create Table tableB(Col1 int,Col2 int,Col3 int,Col4 int,Col5 int,Col6 int)
Insert into tableB values(1,2,30,40,50,60)
create Table tableC(Col1 int,Col2 int,Col3 int,Col4 int,Col5 int,Col6 int)
Insert into tableC values(100,50,30,40,2,2)
--Insert into tableC values(200,50,30,40,2,2)
Insert into tableC values(100,60,30,40,2,2)
Select * From tablea
Update a Set
a.col3 = b.col3,
a.col4 = b.col4,
a.col5 = (select col1 from tablec c where c.col2=b.col5 ),
a.col6 = (select col1 from tablec c where c.col2=b.col6 )
from tableA a inner join tableb b
on a.col1=b.col1 and a.col2=b.col2
--Update a Set
--a.col3 = b.col3,
--a.col4 = b.col4,
--a.col5 = (select Top 1 col1 from tablec c where c.col2=b.col5 Order by c.Col1 asc),
--a.col6 = (select Top 1 col1 from tablec c where c.col2=b.col6 Order by c.Col1 asc)
--from tableA a inner join tableb b
--on a.col1=b.col1 and a.col2=b.col2
Select * From tablea
Drop table tablea,Tableb,TableC -
How to Update a clob column..it gives error string literal too long
I am trying to update a clob column of a table but it gives error string literal too long plz tell me what's the issue
ORA-01704: string literal too longPeeyush wrote:
I am trying to update a clob column of a table but it gives error string literal too long plz tell me what's the issue
ORA-01704: string literal too longThere's a problem with my car. It won't start. Why won't it start? Please tell me!
Oh wait, you can't, because I haven't given you nearly enough information...
In other words, if you would like help in trying to work out where you've gone wrong, you should provide a small enough example of your code that demonstrates the error. We might then actually stand a chance of being able to help you! -
Hi I have a requirement to create a list item in Contracts List when a document is uploaded in Contracts Vendor library.
Contracts List will
have columns - Contract Name ( title column), Contract Number, Contract Start date and end date.
Contracts Vendor library will have Contract
Name,Contract NUmber.
User will select the Contract Name from drop down ( this is look up column linked to Contract Name in Contract
List).When user uploads document in Contract Vendor library then item should be created in Contract List with selected Contract Name and
Contract number .
Contracts and Contracts Vendor are related by look up Contract Name. Contract Name is internally a title column in
Contracts List.
Issue1 :
Since Contract number is look up column, while I am creating item the Contract name is not getting updated in
Contracts List. I have to use sharepoint designer workflow to achieve this task. Title colum or Contract Name shows no title.
Issue 2:
One
more issue I am facing is that Contracts List has Section and Division cascaded drop downs when i select values from section and division
dropdowns and save item in Contracts list the values are getting saved in Contract List.
Could anyone suggest me how to handle this ? I am
attaching the screenshots of the list and library structure. TRuly appreciate your help.
Below are screenshots of the list structureHi,
According to your post, my understanding is that you wanted to update a title column in list that is a lookup column to document library in sharepoint designer workflow 2010.
I try to reproduce the issues as follows:
Create a custom list named Contracts List, add columns: Contract Name ( title column), Contract Number(Number), Contract Start date(Data and Time) and Contract End date (Data and Time).
Create a document library named Contracts Vendor library, add columns: Contract Name(Lookup), Contract NUmber(Lookup).
Create a workflow associated to the Contracts Vendor library.
Add action: Create List Item.
5. Start the workflow automatically when an item is created.
6. Upload a document, select the Contract Name and Contract NUmber, the workflow will be started automatically.
7. Open the Contracts List, an item will be added with the Contract Name and Contract Number in the Contracts Vendor library.
Thank you for your understanding.
Best Regards,
Linda Li
Linda Li
TechNet Community Support -
How to update managed metadata column for all file in document library using powershell
Hi,
How to update managed metadata column for all file in document library using powershell?
Any help on it.
Thanks & REgards
Poomani SankaranHi TanPart,
I have changed the code which you have give in order to get the files from SharePoint 2010 Foundation Document Library.But i am getting below error in powershell.
Property 'ListItemCollectionPosition' cannot be found on this object; make sure it exists and is settable.
Could you tell me which is the issues in it?
See the code below.
$web = Get-SPWeb http://ntmoss2010:9090/Site
$list = $web.Lists["DocLib"]
$query = New-Object Microsoft.SharePoint.SPQuery
$query.ViewAttributes = "Scope='Recursive'";
$query.RowLimit = 2000
$caml = '<Where><Contains><FieldRef Name="Title" /><Value Type="Text">Process Documents/Delivery</Value></Contains></Where>' +
'<OrderBy Override="TRUE"><FieldRef Name="ID"/></OrderBy>'
$query.Query = $caml
do
$listItems = $list.GetItems($query)
$spQuery.ListItemCollectionPosition = $listItems.ListItemCollectionPosition
foreach($item in $listItems)
#Cast to SPListItem to avoid ambiguous overload error
$spItem = [Microsoft.SharePoint.SPListItem]$item;
Write-Host $spItem.Title
while ($spQuery.ListItemCollectionPosition -ne $null)
Thanks & Regards
Poomani Sankaran -
How to encrypt column of some table with the single method on oracle7/814?
How to encrypt column of some table with the single method on oracle7/814?
How to encrypt column of some table with the single method on oracle7/814?
-
How to encrypt column of some table with the single method ?
How to encrypt column of some table with the single method ?
How to encrypt column of some table with the single
method ?How to encrypt column of some table with the single
method ?
using dbms_crypto package
Assumption: TE is a user in oracle 10g
we have a table need encrypt a column, this column SYSDBA can not look at, it's credit card number.
tha table is
SQL> desc TE.temp_sales
Name Null? Type
CUST_CREDIT_ID NOT NULL NUMBER
CARD_TYPE VARCHAR2(10)
CARD_NUMBER NUMBER
EXPIRY_DATE DATE
CUST_ID NUMBER
1. grant execute on dbms_crypto to te;
2. Create a table with a encrypted columns
SQL> CREATE TABLE te.customer_credit_info(
2 cust_credit_id number
3 CONSTRAINT pk_te_cust_cred PRIMARY KEY
4 USING INDEX TABLESPACE indx
5 enable validate,
6 card_type varchar2(10)
7 constraint te_cust_cred_type_chk check ( upper(card_type) in ('DINERS','AMEX','VISA','MC') ),
8 card_number blob,
9 expiry_date date,
10 cust_id number
11 constraint fk_te_cust_credit_to_cust references te.customer(cust_id) deferrable
12 )
13 storage (initial 50k next 50k pctincrease 0 minextents 1 maxextents 50)
14 tablespace userdata_Lm;
Table created.
SQL> CREATE SEQUENCE te.customers_cred_info_id
2 START WITH 1
3 INCREMENT BY 1
4 NOCACHE
5 NOCYCLE;
Sequence created.
Note: Credit card number is blob data type. It will be encrypted.
3. Loading data encrypt the credit card number
truncate table TE.customer_credit_info;
DECLARE
input_string VARCHAR2(16) := '';
raw_input RAW(128) := UTL_RAW.CAST_TO_RAW(CONVERT(input_string,'AL32UTF8','US7ASCII'));
key_string VARCHAR2(8) := 'AsDf!2#4';
raw_key RAW(128) := UTL_RAW.CAST_TO_RAW(CONVERT(key_string,'AL32UTF8','US7ASCII'));
encrypted_raw RAW(2048);
encrypted_string VARCHAR2(2048);
BEGIN
for cred_record in (select upper(CREDIT_CARD) as CREDIT_CARD,
CREDIT_CARD_EXP_DATE,
to_char(CREDIT_CARD_NUMBER) as CREDIT_CARD_NUMBER,
CUST_ID
from TE.temp_sales) loop
dbms_output.put_line('type:' || cred_record.credit_card || 'exp_date:' || cred_record.CREDIT_CARD_EXP_DATE);
dbms_output.put_line('number:' || cred_record.CREDIT_CARD_NUMBER);
input_string := cred_record.CREDIT_CARD_NUMBER;
raw_input := UTL_RAW.CAST_TO_RAW(CONVERT(input_string,'AL32UTF8','US7ASCII'));
dbms_output.put_line('> Input String: ' || CONVERT(UTL_RAW.CAST_TO_VARCHAR2(raw_input),'US7ASCII','AL32UTF8'));
encrypted_raw := dbms_crypto.Encrypt(
src => raw_input,
typ => DBMS_CRYPTO.DES_CBC_PKCS5,
key => raw_key);
encrypted_string := rawtohex(UTL_RAW.CAST_TO_RAW(encrypted_raw)) ;
dbms_output.put_line('> Encrypted hex value : ' || encrypted_string );
insert into TE.customer_credit_info values
(TE.customers_cred_info_id.nextval,
cred_record.credit_card,
encrypted_raw,
cred_record.CREDIT_CARD_EXP_DATE,
cred_record.CUST_ID);
end loop;
commit;
end;
4. Check credit card number script
DECLARE
input_string VARCHAR2(16) := '';
raw_input RAW(128) := UTL_RAW.CAST_TO_RAW(CONVERT(input_string,'AL32UTF8','US7ASCII'));
key_string VARCHAR2(8) := 'AsDf!2#4';
raw_key RAW(128) := UTL_RAW.CAST_TO_RAW(CONVERT(key_string,'AL32UTF8','US7ASCII'));
encrypted_raw RAW(2048);
encrypted_string VARCHAR2(2048);
decrypted_raw RAW(2048);
decrypted_string VARCHAR2(2048);
cursor cursor_cust_cred is select CUST_CREDIT_ID, CARD_TYPE, CARD_NUMBER, EXPIRY_DATE, CUST_ID
from TE.customer_credit_info order by CUST_CREDIT_ID;
v_id customer_credit_info.CUST_CREDIT_ID%type;
v_type customer_credit_info.CARD_TYPE%type;
v_EXPIRY_DATE customer_credit_info.EXPIRY_DATE%type;
v_CUST_ID customer_credit_info.CUST_ID%type;
BEGIN
dbms_output.put_line('ID Type Number Expiry_date cust_id');
dbms_output.put_line('-----------------------------------------------------');
open cursor_cust_cred;
loop
fetch cursor_cust_cred into v_id, v_type, encrypted_raw, v_expiry_date, v_cust_id;
exit when cursor_cust_cred%notfound;
decrypted_raw := dbms_crypto.Decrypt(
src => encrypted_raw,
typ => DBMS_CRYPTO.DES_CBC_PKCS5,
key => raw_key);
decrypted_string := CONVERT(UTL_RAW.CAST_TO_VARCHAR2(decrypted_raw),'US7ASCII','AL32UTF8');
dbms_output.put_line(V_ID ||' ' ||
V_TYPE ||' ' ||
decrypted_string || ' ' ||
v_EXPIRY_DATE || ' ' ||
v_CUST_ID);
end loop;
close cursor_cust_cred;
commit;
end;
/ -
Hi Guys,
I have a With CTE table expression ,this cte gets the value from startdate and enddate
I need to insert this startdate and enddate into a table ,while inserting into table,i got the below error,
Derived table 'Datematrix' is not updatable because a column of the derived table is derived or constant.
below is the query i used,
declare @StartDate date='01/01/2013'
declare @EndDate date='12/31/2013'
;WITH Datematrix(AllocationDate)
As
SELECT @StartDate AS AllocationDate
UNION ALL
SELECT DATEADD(D,1,AllocationDate) AS AllocationDate
FROM Datematrix WHERE AllocationDate<@EndDate
Insert into Datematrix(AllocationDate)
select * from Datematrix
any guys update this solution.
Thanks
Bhupesh.R;WITH Datematrix(AllocationDate)
As
SELECT @StartDate AS AllocationDate
UNION ALL
SELECT DATEADD(D,1,AllocationDate) AS AllocationDate
FROM Datematrix WHERE AllocationDate<@EndDate
Insert into Datematrix(AllocationDate)
select * from Datematrix
Hello,
Your CTE bases only on fix value = @StartDate , not on a table/view; here do you want to insert data to? This don't work in any way.
Olaf Helper
[ Blog] [ Xing] [ MVP]
Maybe you are looking for
-
Problem with setMnemonic after upgrading to 1.4.2
Hi, setMnemonic doesnt seem to work properly for JButtons after upgrading from 1.3.1 to 1.4.1. Hot Key works but underlining doesnt show. In our app, we have our own controls which are basically derived from Swing controls. In this case JButton. I ha
-
How to get configuration file name of WLC2112 to carry out a backup
Hi, I need to get a backup of configuration file from AIR-WLC2112-K9 (7.0.98.0), checking the procedure (uploading configuration file) I need the name of the configuration file. I try to get the file's name by command but I could not find any comman
-
How can I get my call/text sounds to work?
My ring tones/alerts are not working with an incoming call or text on my iPhone 4 (Verizon). Everything is set to ON - works when testing but NOT when I get a call or text?
-
How do I change my Dell PC screen resolution back to the original setting after itune resolution changes
-
Is there a way to avoid the message "Wrote file xxx" ?