Before you start

6 min

verify your environment meets these requirements supported hardware {{k3}} , application version 6 3 1 x or later, with initial setup completed (including loading a platform master key and network configuration) supported operating systems linux (rocky linux 8 for this example – gui not required) https //rockylinux org/download/ https //rockylinux org/download/ windows 10 or later required access an account on the kmes with administrator permissions to create roles, identities, tls pki, and update system settings local administrator/root access on the machine where oracle db is installed network and firewall allow outbound tcp port 2001 (default host api port) from the machine running oracle database to the kmes series 3, specified by fqdn (for example, kmes example com ) or cidr (for example, 10 0 0 0/24 ) tls inspection or ssl proxies can break mutual tls handshakes exempt the kmes fqdn(s) from inspection configure the kmes series 3 with an fqdn so the exemption applies other openssl for linux (if using linux) oracle database 19c installation guide for oracle database 19c https //docs oracle com/en/database/oracle/oracle database/19/index html https //docs oracle com/en/database/oracle/oracle database/19/index html oracle guide to securing data with oracle tde (general concepts – how to enable tde) https //docs oracle com/en/database/oracle/oracle database/19/asoag/introduction to transparent data encryption html https //docs oracle com/en/database/oracle/oracle database/19/asoag/introduction to transparent data encryption html oracle guide to use hsm with tde https //docs oracle com/en/database/oracle/oracle database/19/asoag/configuring transparent data encryption html#guid 753c4808 cc51 4da1 a5c3 980417fdab14 https //docs oracle com/en/database/oracle/oracle database/19/asoag/configuring transparent data encryption html#guid 753c4808 cc51 4da1 a5c3 980417fdab14 this guide assumes that you run the server, have root permissions, and have already installed the oracle database with the necessary configurations to support tde