Oracle Data Masking on 12C for EBS Afaq Kardekar

Oracle Data Masking on 12C for EBS

Oracle Data Masking on 12C for EBS Afaq Kardekar

Contents

Introduction ......................................................................................................1
Installation Process for OEM 12C....................................................................2
Installation Requirements...........................................................................2
De configuring Enterprise Manager............................................................2
Database Parameter Requirements..............................................................2
Agent Deployment and Target Identification.................................................11
Data Masking Process.....................................................................................13
Masking Pre-requirements........................................................................13
Oracle Data Masking on 12C for EBS Afaq Kardekar

Introduction
Oracle Data Masking helps organizations comply with data privacy and protection mandates
that restrict the use and sharing of private, sensitive or personally identifiable information
(PII). With Oracle Data Masking, sensitive information such as credit card or social security
numbers can be replaced with realistic values, allowing production data to be safely used for
development, testing, or sharing with out-sourcing partners or off-shore teams for other non-
production purposes.

Reference Documents and Links

http://docs.oracle.com/cd/E24628_01/install.121/e22624/toc.htm

http://www.oracle.com/us/products/database/data-masking-best-practices-161213.pdf

Note: Data masking is done only on Non-Production environments and is irreversible

process

1
Oracle Data Masking on 12C for EBS Afaq Kardekar

1. Installation Process for 12C OEM:

Installation requirements

RPM’s

# OL 5.x and 6.x

make-3*,binutils-2*,gcc-4*,libaio-0*,glibc-common-2*,libstdc++-4*,sysstat-5*

DE configure Enterprise Manager

$ emca -deconfig dbcontrol db -repos drop -SYS_PWD <sys pasword> -

SYSMAN_PWD <sysman password>

Database Parameters for repository database

ALTER SYSTEM SET processes=300 SCOPE=SPFILE;

ALTER SYSTEM SET session_cached_cursors=200 SCOPE=SPFILE;

ALTER SYSTEM SET sga_target=2G SCOPE=SPFILE;

ALTER SYSTEM SET shared_pool_size=600M SCOPE=SPFILE;

ALTER SYSTEM SET pga_aggregate_target=1G SCOPE=SPFILE;

ALTER SYSTEM SET job_queue_processes=20 SCOPE=SPFILE;

-- May be required if using older versions of DB.

--ALTER SYSTEM SET log_buffer=10485760 SCOPE=SPFILE;

--ALTER SYSTEM SET open_cursors=300 SCOPE=SPFILE;

2
Oracle Data Masking on 12C for EBS Afaq Kardekar

1. Copy the 12C grid software and invoke the runInstaller

2. Provide your Oracle support details to get updates or click next

3
Oracle Data Masking on 12C for EBS Afaq Kardekar

3. Skip the software updates

4
Oracle Data Masking on 12C for EBS Afaq Kardekar

4. Check the system pre-requisites and click next to continue

5. Select Simple installation and click next

5
Oracle Data Masking on 12C for EBS Afaq Kardekar

6. Choose the Middleware and Agent directory

7. Choose administration password and database details

6
Oracle Data Masking on 12C for EBS Afaq Kardekar

8. Click Install to proceed with installation

9. Installation in progress

7
Oracle Data Masking on 12C for EBS Afaq Kardekar

10.Run below as root user

11.Installation completed

8
Oracle Data Masking on 12C for EBS Afaq Kardekar

12.Login to server via putty and start the services

13. Default port for OEM is 7799 accept the terms and proceed

9
Oracle Data Masking on 12C for EBS Afaq Kardekar

2. Agent Deployment and Target Identification

1. Login to OEM as sysman and goto setup Add target  Add target
Manually

2. Click on Add host targets

10
Oracle Data Masking on 12C for EBS Afaq Kardekar

3. Click on Add and enter Host details click next to proceed

4. Provide Agent location details on target and click next

11
Oracle Data Masking on 12C for EBS Afaq Kardekar

5. Click on Deploy Agent

Once Agent is deployed start the Agent services on target as below

3. Data Masking Process

 Masking Pre-requirements

o User Access and grant

 SELECT_CATALOG_ROLE
 SELECT ANY DICTIONARY

12
Oracle Data Masking on 12C for EBS Afaq Kardekar

 EXECUTE on DBMS_CRYPTO, DBMS_RANDOM

packages
 ALTER SYSTEM
 CREATE, DROP, ALTER, SELECT, INSERT, and
COMPILE the objects being masked

o Root/sudo Access and Grants

o Schema Access

o Table to be masked

Data Masking on PER_ALL_PEOPLE_F table in HR schema on columns

email_address, Work_telephone

1. Click on Enterprise go to Application Data modelling

2. Click on create new data model with required data

13
Oracle Data Masking on 12C for EBS Afaq Kardekar

Click on continue

3. Schedule the job to create new data model click on submit

14
Oracle Data Masking on 12C for EBS Afaq Kardekar

4. Click on view job details to see the status

15
Oracle Data Masking on 12C for EBS Afaq Kardekar

5. Go to Application data modelling and select your data model click on

Edit

6. Provide your credentials

16
Oracle Data Masking on 12C for EBS Afaq Kardekar

7. Select Schema and click on Sensitive column

17
Oracle Data Masking on 12C for EBS Afaq Kardekar

8. Either run discovery job or add the columns manually by clicking Add

9. Manual Method/Discovery job for column identification

18
Oracle Data Masking on 12C for EBS Afaq Kardekar

10.Create a job and click on submit for column discovery

19
Oracle Data Masking on 12C for EBS Afaq Kardekar

11.Got to Enterprise  Quality Management  Data Modelling Definitions

20
Oracle Data Masking on 12C for EBS Afaq Kardekar

12.Create Masking job by select your data model

13.Add the discovered columns and mark the as sensitive with required
masking format

21
Oracle Data Masking on 12C for EBS Afaq Kardekar

22
Oracle Data Masking on 12C for EBS Afaq Kardekar

23
Oracle Data Masking on 12C for EBS Afaq Kardekar

14.Click on Generate Script to generate masking script

15.Select same tablespace for masking as present schema resides in it

24
Oracle Data Masking on 12C for EBS Afaq Kardekar

16.Select database credentials

17.Schedule the masking Script generation job

25
Oracle Data Masking on 12C for EBS Afaq Kardekar

26
Oracle Data Masking on 12C for EBS Afaq Kardekar

18. Start the actual Masking job

27
Oracle Data Masking on 12C for EBS Afaq Kardekar

Masking completed.

Verify the column masked against your format via select command from
database.

28