Oracle Secure Backup User Manual

Host Authentication and Communication
6-12 Oracle Secure Backup Installation and Configuration Guide
Figure 6–4 Oracle Wallets
Oracle Secure Backup Encryption Wallet
The administrative server has a second wallet that is used to store the master keys
that encrypt secure data, such as the passwords for Network Data Management
Protocol (NDMP) servers and the backup encryption key store. This wallet is separate
from the wallet used for a host identity certificate. The key wallet is named
ewallet.p12 and is located in OSB_HOME/admin/encryption/wallet.
It is a best practice to use Oracle Secure Backup catalog recovery to back up the wallet.
If you do not use Oracle Secure Backup catalog recovery to back up the wallet, then
Oracle recommends that the ewallet.p12 encryption wallet not be backed up on the
same media as encrypted data. Encryption wallets are not excluded from backup
operations automatically. You must use the exclude dataset statement to specify
what files to skip during a backup:
SSL
Administrative
Server
(Host B)
Issues and Signs
Media
Server
or
Client
(Host A)
Chain of Trust
Certification
Authority
observiced
Obfuscated
Wallet
Wallet
Host A
Identity
Certificate
Host A
Private Key
Obfuscated
Wallet
Wallet
CA Signing
Certificate
Host B
Identity
Certificate
Host B
Private Key
Trusted
Certificate
from CA

Oracle Secure Backup Specifications

General

Compression	Yes
Tape Library Support	Yes
Web Interface	Yes
Command Line Interface	Yes
Scheduling	Yes
Reporting	Yes
Role-Based Access Control	Yes
NDMP Support	Yes
Virtual Tape Library Support	Yes
Operating Systems Supported	Linux, Windows, Solaris, AIX, HP-UX
Backup Methods	Full, Incremental, Differential
Media Support	Tape, Disk
Database Support	Oracle Database
Encryption	AES 256-bit
Centralized Management	Yes
Cloud Integration	Oracle Cloud