Advanced dSource creation options

Overview

With the release of DCT 15.0.0, advanced options when creating dSources in DCT have expanded.

Users can now select external backups from NetBackup or Commvault when adding a Microsoft SQL Server (MSSQL) dSource.
For MSSQL and Adaptive Server Enterprise (ASE) sources, the additional option to use a password vault for database authentication is available with the "Select Data Source" step.
Transparent Data Encryption (TDE) for Oracle Container Database (CDB) type staging push dSources can now be activated.
The option to use non-SYS login credentials when linking an Oracle Single Tenant (ST) database is now available, which enhances security and flexibility.

Prerequisites

To utilize these new features effectively, adhere to the following prerequisites:

The source database intended for linkage should already be registered within DCT.
For those opting to use NetBackup or Commvault as their external backup solution when linking an MSSQL source, the necessary backup credentials must be prepared in advance.

Linking Wizard changes

NetBackup/Commvault

In the Data Management phase of the Linking Wizard, a "show advanced" option is now available. This addition allows for the specification of external backup configurations, catering to users' preferences for NetBackup or Commvault solutions.

When selecting NetBackup as the external backup choice, users have the further opportunity to integrate NetBackup configuration templates. This is achieved by selecting the "Configure Netbackup Config Template" checkbox, available in the subsequent step.

Upon specifying the desired external backup configuration, it is essential for users to validate these settings to ensure accuracy and compatibility.

The final review of these configurations is available in the Summary step. This stage serves as a last checkpoint before the submission process, where users can verify all entered details are correct. Once satisfied, finish with the wizard to create the dSource, incorporating the selected external backup settings.

PasswordVault authentication

Upon reaching the Data Source step, users now have the choice to authenticate using a Password Vault. This update supports integration with leading vault solutions, including HashiCorp, CyberArk, and Azure. Selecting this authentication method leverages the security framework of the respective provider, in an effort to provide versatile, secure, and efficient tools for managing database connections within DCT.

TDE for Oracle CDB

The process of creating a Container Database (CDB) dSource within the Oracle Staging Push portion of the Linking Wizard now includes an option for enabling Transparent Data Encryption (TDE). This enhancement is designed to elevate data security by offering encryption at the storage level, thus safeguarding sensitive information.

Upon enabling TDE, users are presented with a choice among three KeyStore configuration types to best suit security needs:

File-based KeyStore: A traditional, file-based approach to store encryption keys securely on disk.
Hardware Security Module (HSM): A physical device that manages digital keys for strong authentication and provides a higher level of security.
Oracle Key Vault (OKV): A comprehensive key management solution that centralizes control over encryption keys and secrets.

Oracle ST non-SYS credentials

The Oracle Single-Tenant (ST) database linking process within the Linking Wizard now includes the ability for users to provide non-SYS login credentials, allowing for a more secure and restricted access approach. This would be particularly beneficial for organizations that adhere to strict security policies requiring minimal privilege use.

Furthermore, users can now view the nodes of their Oracle ST cluster directly in the Source Instances grid. This feature provides a clearer overview of the database topology.