The keystore and security provider protect database credentials and prevent unauthorized access to the target database. When you configure a database, you can choose to use either the default keystore or a custom keystore and security provider. If you choose the default keystore, Dynamic Data Masking also uses the default security provider. Both the default keystore and default security provider are preconfigured for use in Dynamic Data Masking. If you choose a custom keystore and security provider, you must configure Dynamic Data Masking for use with the custom keystore and security provider.