Oracle 参数 DBFIPS_140 官方解释，作用，如何配置最优化建议
本站中文解释
DBFIPS_140参数是Oracle 11g新增的特定安全参数，用于控制Oracle启用FIPS 140的安全级别，它的取值有TRUE和FALSE。
当DBFIPS_140设为FALSE时，Oracle不再校验FIPS以外的安全功能；而当DBFIPS_140设为TRUE时，Oracle会根据FIPS 140标准进行各种安全验证、加密及签名等，以保护用户数据。
正确设置DBFIPS_140参数，需要考虑应用架构、安全级别、软件版本，以及业务系统的安全需求，并结合FIPS 140的要求来设置，以确保系统的安全性。
官方英文解释
DBFIPS_140 enables Transparent Data Encryption (TDE) and DBMS_CRYPTO PL/SQL package program units to run in a mode compliant to the Federal Information Processing Standard (subsequently known as “FIPS mode”).
| Property | Description |
|---|---|
|
Parameter type |
Boolean |
|
Default value |
|
|
Modifiable |
No |
|
Modifiable in a PDB |
No |
|
Range of values |
|
|
Basic |
No |
|
Oracle RAC |
All instances must use the same value. |
Set this parameter to true to use TDE and DBMS_CRYPTO in FIPS mode. This means that only FIPS-compliant algorithms may be used. By default, this parameter is set to false. When this parameter is set to false, all algorithms (FIPS-compliant or not) may be used.
See Also:
-
Oracle Database Security
Guide for information about configuring Oracle Database FIPS 140 settings -
Oracle Database Security
Guide for a table that describes the effect of setting the value ofDBFIPS_140totrueorfalseon different platforms
