Open your browser and enter the following URL.

https://<hostname>:1158/em

Login as the system user.

Select the Server tab.

Under Security, click Transparent Data Encryption.

To change the wallet location to a location outside of the Oracle installation (to avoid that it ends up on a backup tape together with encrypted data), click Change.

Since the directory that you want to change to doesn't exist yet, you need to create it. Open a terminal window and execute the following commands to create the directory and change the owner to the oracle user:

cd /etc
su <root>
mkdir ORACLE
cd ORACLE
mkdir WALLETS
cd WALLETS
mkdir oracle
chown oracle:oinstall /etc/ORACLE/WALLETS/oracle

Now that the directory is created, switch back to Enterprise Manager. Select Network Profile from the list under Administer and click Go.

Login with your Oracle software owner Username and Password and click Login.

Expand Advanced Security Options.

Select Wallet Location.

Copy and paste the default /etc/ORACLE/WALLETS/oracle location into the Encryption Wallet Location field and click OK.

It takes some time for the system to pick up the change; to force the update, logout and log back in. Click Logout.

Click Login.

Login as system again.

Select the Server tab.

Under Security, click Transparent Data Encryption.

Notice that the directory name has changed. Enter a strong password that protects the Wallet and click OK. Optionally, this password can be known only to a Security DBA, enforcing separation of duty. The password is not stored anywhere, so it can under no circumstances be recovered.

Your wallet is now open.

Under Related Links, click Tables.

Enter OE in the Schema field and click Go.

Select the radio button in front of CUSTOMERS and click Edit.

You can specify a different encryption algorithm and the key seed to be used for all encrypted columns in this table. Click Encryption Options.

Review the options and click Continue.

Select the checkbox in the Encryption column for CREDIT_LIMIT and click Apply.

A job was submitted to encrypt the column. Click the link to the job.

The job succeeded. Click the Database breadcrumb.

From the Server tab in Enterprise Manager Database Control, under Storage, select Tablespaces.

Click Create.

Enter OBE for the name of the tablespace and click Add under Datafiles.

Enter OBE for the File Name and click Continue.

Tablespace encryption protects all the objects in a tablespace by storing data in encrypted format on disk. An Oracle wallet must exist and needs to be in open state. Click Encryption Options.

Review the options and click Continue.

Select the Encryption checkbox and click OK.

Your tablespace was created successfully. Select the OBE link from the list of Tablespaces.

Note: If you receive an error, switch to a terminal window, login to sqlplus as system and execute the following command:

CREATE TABLESPACE OBE DATAFILE '/u01/app/oracle/oradata/orcl/obe' SIZE 100M
   ENCRYPTION DEFAULT STORAGE (ENCRYPT);

Notice that the Encryption option is set to YES. Click the Database breadcrumb.

Open SQLDeveloper. On Linux, open a terminal window and execute the following commands:

cd $ORACLE_HOME/sqldeveloper/sqldeveloper/bin
./sqldeveloper

If you receive a message asking you if you want to migrate your previous connections, click No.

Create a Connection. Right-click Connections and select New Connection.

Enter OE for the Connection Name, Username and Password. Enter orcl for the SID and click Test.

Your test was successful. Click Connect.

You first want to create a copy of the CUSTOMERS table. From the SQL Worksheet, enter the following command and click Execute.

CREATE TABLE customers_obe AS SELECT * FROM customers 

Now you can move the table into the OBE tablespace (that is encrypted). Expand Tables and right-clickCUSTOMERS_OBE and select Storage then Move Tablespace.

Select the OBE tablespace from the list and click Apply.

The table was moved to the OBE tablespace successfully. Click OK.

Now you can create an index on the DATE_OF_BIRTH column. Enter the following command in the SQL Worksheet area and click Execute.

CREATE INDEX customers_obe_idx ON customers_obe(date_of_birth) 

You can now select some data from the DATE_OF_BIRTH column. Enter the following command in the SQL Worksheet area and click Execute.

SELECT cust_last_name, date_of_birth FROM customers_obe
WHERE date_of_birth > '04-FEB-59'
AND date_of_birth < '06-FEB-59'

The data is selected. So what explain plan did it use. Click the Explain Plan icon.

Notice that it used the index and did an index(range scan) to retrieve the data rather than a full table scan.

From the Server tab in Enterprise Manager Database Control, under Security, select Transparent Data Encryption. .

Click the + in front of Advanced Options.

Under Regenerate Master Database Key, click Regenerate. Enter the same strong password you used when initially creating the wallet; both the old and new master keys are not related to the wallet password at all; click OK.

Your Master Database Key was regenerated.