B Running DVCA After Creating a Database Vault Database

You should run Database Vault Configuration Assistant (DVCA) after creating a new Oracle Database Vault database, if any of the following conditions is true:

• Database Vault is installed into an Oracle home that has more than one database. You need to run DVCA on the other databases in the Oracle home. This enables Database Vault security for those databases. The databases should meet the prerequisites for installing Oracle Database Vault, as discussed in "Preinstallation and Installation Tasks" .

• Database Configuration Assistant (DBCA) is used to create a new Database Vault database in an Oracle home that already has a Database Vault database. DVCA loads the Database Vault schema objects into the new database, creates the DV_OWNER and optional DV_ACCTMGR accounts, and deploys the Database Vault Administrator application for the database.

Use the following syntax to run the DVCA utility:

C:\> ORACLE_HOME\bin\dvca -action option [-racnode host_name] -oh oracle_home ^
-jdbc_str jdbc_connection_string -sys_passwd SYS_password -owner_account ^
DV_owner_account_name -owner_passwd DV_owner_account_password [-acctmgr_account ^
DV_account_manager_account_name] [-acctmgr_passwd DV_account_manager_password] ^
[-logfile ./dvca.log] [-silent] [-nodecrypt][-lockout] [-languages ^
{["en"],["de"],["es"],["fr"],["it"],["ja"],["ko"],["pt_BR"],["zh_CN"],["zh_TW"]}]

Where:

• action: The action to perform. option creates the Database Vault schema objects, creates the DV_OWNER account and the optional DV_ACCTMGR account, and deploys the Database Vault Administrator application.

• racnode: The host name of the Real Application Clusters (RAC) node on which the action is being performed. Do not include the domain name with the host name.Use this option if this is a RAC database.

• oh: The Oracle home for the database.

• jdbc_str: The JDBC connection string used to connect to the database. For example, jdbc:oracle:oci:@orcl1, where orcl1 is the net service name in the tnsnames.ora file ($ORACLE_HOME\network\admin\tnsnames.ora).

• sys_passwd: Password for user SYS

• owner_account: Oracle Database Vault Owner account name

• owner_passwd: Oracle Database Vault owner account password

• acctmgr_account: (Optional) Oracle Database Vault Account Manager user

• acctmgr_passwd: Oracle Database Vault Account Manager password (if a user name has been specified)

• logfile: Optionally, specify a log file name and location. You can enter an absolute path or a path that is relative to the location of the $ORACLE_HOME\bin directory

• silent: Required if you are not running DVCA in an xterm window

• nodecrypt: Reads plaintext passwords as passed on the command line. You must use this option if you are passing plaintext passwords to the command.

• lockout: Disables SYSDBA operating system authentication

• languages: Declares the language content to load, defaults to "en" (English). You can specify multiple languages. Include each language in quotation marks with commas separating different languages. Enclose the list of languages in braces. For example, -languages {"en","fr","ja"}.

  The following lists the language key:

  • de: German

  • en: English

  • es: Spanish

  • fr: French

  • it: Italian

  • ja: Japanese

  • ko: Korean

  • pt_BR: Brazilian Portuguese

  • zh_CN: Simplified Chinese

  • zh_TW: Traditional Chinese

If you have used the lockout option with the dvca command, then to successfully lockout SYSDBA connections, you also need to add the following values to your Microsoft Windows registry under HKEY_LOCAL_MACHINE\SOFTWARE\ORACLE\KEY_ORACLE_HOME_NAME:

For a RAC database, you also need to run the dvca -action optionrac command on all nodes other than the node on which the installation is performed. Refer to "Run DVCA to Set Instance Parameters and Lock Out SYSDBA Sessions (RAC Only)" for details.