About Us Our Services The Pythian Advantage News Pythian has openings for MySQL and MS SQL Server DBAs in each of our offices in Ottawa, Canada Boston, USA Dubai, UAE ; and Hyderabad, India hr@pythian.com Oracle Grid Control: The Importance of Deleting the emkey December 13th, 2007 - by Gr©gory Guillou Oracle Grid Control documentation warns against leaving the emkey in the Grid Control repository. It says here After the emkey has been copied, you must remove it from the Management Repository as it is not considered secure. If it is not removed, data such as database passwords, server passwords and other sensitive information can be easily decrypted. You may wonder: how easily A Bit of Background Oracle Management Service 10.2 uses several ways to protect these sensitive data, including Virtual Private Database and Password Encryption. - To overcome the first one, you have to be able to connect to the database as the SYS user. To overcome the second one, you have to know the encrypted password form, the key, and the associated algorithm.
Obviously, the key used to cipher the password is the | |
|