Oracle TDE features comes with various limitations such as not being able to encrypt columns which are used in foreign key constraints. And probably is available only with enterprise edition which costs upwards of 100 thousand dollars.

Why would one want to pay and use TDE instead of simply using file system encryption with the OS? This is free and byepasses various limitations regarding FKs etc.

Am I missing some advantages that it provides?


1 Answer 1


Transparent data encryption guarantees the data is always encrypted at rest, implying even the backups are encrypted, no matter where they are physically stored, be it tape, disk, a DVD, etc.

Encrypting data at rest is a great way to control who sees the data, even if someone misplaced an entire copy of the database or a steals a database backup.

  • Backup encryption doesn't look like a big feature. One can put the backup on mounted network, external drive with file system encryption or simply pass backup files through gpg. I've done that with MySQL backups. Jun 5, 2016 at 18:34
  • Yes, but for those under secrecy restrictions or PCI DSS, the requirement to ensure that encryption is always maintained, TDE can be indispensable.
    – Hannah Vernon
    Jun 5, 2016 at 19:57

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.