Oracle教程 2023-04-09

Oracle 参数 ENCRYPT_NEW_TABLESPACES 官方解释，作用，如何配置最优化建议

ENCRYPT_NEW_TABLESPACES参数是oracle数据库中新建表空间时是否自动加密的参数，值为TRUE或FALSE.

如果设置为TRUE，则新建的表空间将默认被加密，该参数仅在表空间被创建时有效。如果该参数设置为FALSE，新建的表空间不会自动加密。

要正确设置该参数，可以使用ALTER SYSTEM SET ENCRYPT_NEW_TABLESPACES = TRUE命令来将参数设置为TRUE，以便新建的表空间自动被加密。

ENCRYPT_NEW_TABLESPACES specifies whether to encrypt newly created user tablespaces.

Property	Description
Parameter type	String
Syntax	`ENCRYPT_NEW_TABLESPACES = { CLOUD_ONLY \| ALWAYS \| DDL }`
Default value	`CLOUD_ONLY`
Modifiable	`ALTER SYSTEM`
Modifiable in a PDB	Yes
Basic	No
Oracle RAC	The same value should be specified for all instances.

The values that can be specified for the ENCRYPT_NEW_TABLESPACES parameter have the following meanings:

CLOUD_ONLY:

When a user tablespace is created in the Oracle Cloud, it will be transparently encrypted if the ENCRYPTION … ENCRYPT clause for the SQL CREATE TABLESPACE statement is not specified. The encryption algorithm is determined by the value of the TABLESPACE_ENCRYPTION_DEFAULT_ALGORITHM initialization parameter. When a user tablespace is created in an on-premises database, the ENCRYPTION clause of the CREATE TABLESPACE statement determines if the tablespace is encrypted.

CLOUD_ONLY is the default value.
ALWAYS:

Whether the user tablespace is created in the Oracle Cloud or in an on-premises database, the tablespace will be transparently encrypted if the ENCRYPTION … ENCRYPT clause is not specified in the CREATE TABLESPACE statement. The encryption algorithm is determined by the value of the TABLESPACE_ENCRYPTION_DEFAULT_ALGORITHM initialization parameter.
DDL:

Whether the user tablespace is created in the Oracle Cloud or in an on-premises database, the CREATE TABLESPACE statement follows the specified DDL. If no ENCRYPTION clause is specified, then the tablespace will not be encrypted. If the ENCRYPTION USING … ENCRYPT clause is specified, then the specified algorithm will be used to encrypt the tablespace. If ENCRYPTION ENCRYPT is specified, but no algorithm is specified, then the encryption algorithm is determined by the value of the TABLESPACE_ENCRYPTION_DEFAULT_ALGORITHM initialization parameter.