In the PowerExchange Express CDC configuration file, enter the TDEKEYSTORE parameter in the DATABASE statement to specify the keystore type, location, and password so that PowerExvhange can access the encryption keys for encryption and decryption of data. The keystore can be in ASM, a file, or a hardware security module (HSM).

Grant the following privilege to the ORACAPTL user to get information about the default wallet type, status, and location, when it is not specified in the TDEKEYSTORE parameter of the DATABASE statement in the PowerExchange Express CDC configuration file:

GRANT SELECT ON "PUBLIC"."V$ENCRYPTION_WALLET" TO "ORACAPTL";

If you store the TDE wallet in a file system, ensure that PowerExchange Express CDC can access the file with Read file permissions. If you do NOT run PowerExchange on the Oracle database server, use NFS to mount the TDE wallet directory to the machine where PowerExchange is running, or copy the wallet to a file-system location that PowerExchange can access and specify the WALLETDIR option in the TDEKEYSTORE parameter in the DATABASE statement to point to that location.

Verify that the Oracle TDE wallet is open in the database