Securing Oracle Key Vault Keys in Thales Luna Network HSMs - Solution Brief

When customers opt for Oracle’s Transparent Data Encryption (TDE) to secure their databases and address their compliance obligations they also have the option to use Oracle Key Vault (OKV) for the associated key management. As a purpose-built solution, OKV simplifies an organization’s on-going encryption administration at the scale needed to support the large database installations across geographies that are typical of Oracle deployments. While these are important tools in protecting sensitive customer data, regulations and best practices often stipulate that organizations should store their encryption keys externally in a hardware appliance. In these scenarios, Oracle and Thales work together to integrate Thales’ Luna Network Hardware Security Module (HSM) with Oracle Key Vault for secure encryption key storage.