Thanks for the question, Peter.
Asked: June 08, 2023 - 6:44 pm UTC
Last updated: July 03, 2023 - 11:27 am UTC
Version: 19c
Viewed 1000+ times
You Asked
When changing the value of the DBFIPS_140 parameter, either from true to false or from false to true, is it necessary to first decrypt a previously encrypted tablespace before making the change and then re-encrypt after since a different cryptographic library will be used? The level of encryption (E.g. 'AES256') would remain the same.
and Connor said...
No decrypt/re-encrypt is required, the same algorithm is used, it's only the FIPS-mandated checks of the library that differs.
Check out the Security office hours by Russ for great security content
Is this answer out of date? If it is, please let us know via a Comment