Broadcom API Gateway 10.1 - Connect to an external Oracle Database that has Transparent Transparent Data Encryption (TDE) turned on

Products

• CA API Gateway

Issue/Introduction

Can API Gateway 10.1 connect to an external Oracle DB that has TDE enabled?

Environment

Release: 10.1

Cause

Transparent Data Encryption (often abbreviated to TDE) is a technology employed by Microsoft, IBM and Oracle to encrypt database files. TDE offers encryption at the file level. TDE solves the problem of protecting data at rest, encrypting databases both on the hard drive and consequently on backup media. It does not protect data in transit nor data in use. Enterprises typically employ TDE to solve compliance issues such as PCI DSS which require the protection of data at rest.

Resolution

Regarding connection to an external Oracle that has TDE configured:

This should be okay as TDE is a transparent encryption and shouldn't affect client connectivity. However, for Oracle DB JDBC connections, Gateway Appliance uses by default third-party JDBC drivers: Progress DataDirect Connect and the vendor states the following:

"Oracle Transparent Data Encryption (TDE) has not been officially certified with the DataDirect ODBC, JDBC and ADO.NET Oracle drivers/providers. Initial investigation indicates there should not be any issues using the DataDirect ODBC, JDBC Oracle drivers or the Connect for ADO.NET Oracle providers with Oracle TDE."

Reference: https://community.progress.com/s/article/7587