The keystore and security provider protect database credentials and prevent unauthorized access to the target database. When you configure a database, you can choose to use either the default keystore or a custom keystore and security provider. If you choose the default keystore, Dynamic Data Masking also uses the default security provider. Both the default keystore and default security provider are pre-configured for use in Dynamic Data Masking. If you choose a custom keystore and security provider, you must configure Dynamic Data Masking for use with the custom keystore and security provider.