This section describes how to configure LOB signatures.

You can configure signature-based security for large object (LOB) locators using the LOB_SIGNATURE_ENABLE initialization parameter.

• To enable signature, set the LOB_SIGNATURE_ENABLE initialization parameter at init.ora, or using the following ALTER SYSTEM command. Also ensure that you have set the compatibility to 12.2.0.2 or above.

  ALTER SYSTEM SET LOB_SIGNATURE_ENABLE = [TRUE|FALSE];

• The following ALTER statement helps to encrypt, re-key, and delete the signature keys.

  ALTER DATABASE DICTIONARY [ENCRYPT|REKEY|DELETE] CREDENTIALS;

For more information, refer to the Oracle Database Security Guide.