Oracle Data Masking on 12C for EBS Afaq Kardekar
Oracle Data Masking on 12C for EBS
Oracle Data Masking on 12C for EBS Afaq Kardekar
Contents
Introduction ......................................................................................................1
Installation Process for OEM 12C....................................................................2
Installation Requirements...........................................................................2
De configuring Enterprise Manager............................................................2
Database Parameter Requirements..............................................................2
Agent Deployment and Target Identification.................................................11
Data Masking Process.....................................................................................13
Masking Pre-requirements........................................................................13
Oracle Data Masking on 12C for EBS Afaq Kardekar
Introduction
Oracle Data Masking helps organizations comply with data privacy and protection mandates
that restrict the use and sharing of private, sensitive or personally identifiable information
(PII). With Oracle Data Masking, sensitive information such as credit card or social security
numbers can be replaced with realistic values, allowing production data to be safely used for
development, testing, or sharing with out-sourcing partners or off-shore teams for other non-
production purposes.
Reference Documents and Links
http://docs.oracle.com/cd/E24628_01/install.121/e22624/toc.htm
http://www.oracle.com/us/products/database/data-masking-best-practices-161213.pdf
Note: Data masking is done only on Non-Production environments and is irreversible
process
1
Oracle Data Masking on 12C for EBS Afaq Kardekar
1. Installation Process for 12C OEM:
Installation requirements
RPM’s
# OL 5.x and 6.x
make-3*,binutils-2*,gcc-4*,libaio-0*,glibc-common-2*,libstdc++-4*,sysstat-5*
DE configure Enterprise Manager
$ emca -deconfig dbcontrol db -repos drop -SYS_PWD <sys pasword> -
SYSMAN_PWD <sysman password>
Database Parameters for repository database
ALTER SYSTEM SET processes=300 SCOPE=SPFILE;
ALTER SYSTEM SET session_cached_cursors=200 SCOPE=SPFILE;
ALTER SYSTEM SET sga_target=2G SCOPE=SPFILE;
ALTER SYSTEM SET shared_pool_size=600M SCOPE=SPFILE;
ALTER SYSTEM SET pga_aggregate_target=1G SCOPE=SPFILE;
ALTER SYSTEM SET job_queue_processes=20 SCOPE=SPFILE;
-- May be required if using older versions of DB.
--ALTER SYSTEM SET log_buffer=10485760 SCOPE=SPFILE;
--ALTER SYSTEM SET open_cursors=300 SCOPE=SPFILE;
2
Oracle Data Masking on 12C for EBS Afaq Kardekar
1. Copy the 12C grid software and invoke the runInstaller
2. Provide your Oracle support details to get updates or click next
3
Oracle Data Masking on 12C for EBS Afaq Kardekar
3. Skip the software updates
4
Oracle Data Masking on 12C for EBS Afaq Kardekar
4. Check the system pre-requisites and click next to continue
5. Select Simple installation and click next
5
Oracle Data Masking on 12C for EBS Afaq Kardekar
6. Choose the Middleware and Agent directory
7. Choose administration password and database details
6
Oracle Data Masking on 12C for EBS Afaq Kardekar
8. Click Install to proceed with installation
9. Installation in progress
7
Oracle Data Masking on 12C for EBS Afaq Kardekar
10.Run below as root user
11.Installation completed
8
Oracle Data Masking on 12C for EBS Afaq Kardekar
12.Login to server via putty and start the services
13. Default port for OEM is 7799 accept the terms and proceed
9
Oracle Data Masking on 12C for EBS Afaq Kardekar
2. Agent Deployment and Target Identification
1. Login to OEM as sysman and goto setup Add target Add target
Manually
2. Click on Add host targets
10
Oracle Data Masking on 12C for EBS Afaq Kardekar
3. Click on Add and enter Host details click next to proceed
4. Provide Agent location details on target and click next
11
Oracle Data Masking on 12C for EBS Afaq Kardekar
5. Click on Deploy Agent
Once Agent is deployed start the Agent services on target as below
3. Data Masking Process
Masking Pre-requirements
o User Access and grant
SELECT_CATALOG_ROLE
SELECT ANY DICTIONARY
12
Oracle Data Masking on 12C for EBS Afaq Kardekar
EXECUTE on DBMS_CRYPTO, DBMS_RANDOM
packages
ALTER SYSTEM
CREATE, DROP, ALTER, SELECT, INSERT, and
COMPILE the objects being masked
o Root/sudo Access and Grants
o Schema Access
o Table to be masked
Data Masking on PER_ALL_PEOPLE_F table in HR schema on columns
email_address, Work_telephone
1. Click on Enterprise go to Application Data modelling
2. Click on create new data model with required data
13
Oracle Data Masking on 12C for EBS Afaq Kardekar
Click on continue
3. Schedule the job to create new data model click on submit
14
Oracle Data Masking on 12C for EBS Afaq Kardekar
4. Click on view job details to see the status
15
Oracle Data Masking on 12C for EBS Afaq Kardekar
5. Go to Application data modelling and select your data model click on
Edit
6. Provide your credentials
16
Oracle Data Masking on 12C for EBS Afaq Kardekar
7. Select Schema and click on Sensitive column
17
Oracle Data Masking on 12C for EBS Afaq Kardekar
8. Either run discovery job or add the columns manually by clicking Add
9. Manual Method/Discovery job for column identification
18
Oracle Data Masking on 12C for EBS Afaq Kardekar
10.Create a job and click on submit for column discovery
19
Oracle Data Masking on 12C for EBS Afaq Kardekar
11.Got to Enterprise Quality Management Data Modelling Definitions
20
Oracle Data Masking on 12C for EBS Afaq Kardekar
12.Create Masking job by select your data model
13.Add the discovered columns and mark the as sensitive with required
masking format
21
Oracle Data Masking on 12C for EBS Afaq Kardekar
22
Oracle Data Masking on 12C for EBS Afaq Kardekar
23
Oracle Data Masking on 12C for EBS Afaq Kardekar
14.Click on Generate Script to generate masking script
15.Select same tablespace for masking as present schema resides in it
24
Oracle Data Masking on 12C for EBS Afaq Kardekar
16.Select database credentials
17.Schedule the masking Script generation job
25
Oracle Data Masking on 12C for EBS Afaq Kardekar
26
Oracle Data Masking on 12C for EBS Afaq Kardekar
18. Start the actual Masking job
27
Oracle Data Masking on 12C for EBS Afaq Kardekar
Masking completed.
Verify the column masked against your format via select command from
database.
28