Administrators usually use "rman" for backup and restore with Oracle server. However, if the database is encrypted with TDE using Cryptographic Security Platform Vault for Databases as the master key provider, then the administrator must first open the HSM keystore on the node where you plan to restore. This document describes the simplest backup and restore method to be used when integrated with the CSP Vault for Databases.

This process has been tested on Oracle Database 19c.

• Backing Up Oracle TDE on an Encrypted Database
• Restoring Oracle TDE Using Scripts