We have on-prem Exadata database (primary) with no TDE and standby on Oracle Exadata Database Service on Cloud@Customer (ExaCC) with no TDE. Now we are adding another standby database on Oracle Exadata Database Service on Dedicated Infrastructure where TDE is a must and tablespace_encryption = 'AUTO_ENABLE'. As a result we need to set tablespace_encryption = 'DECRYPT_ONLY' on on-prem and ExaCC databases. However ExaCC wouln't take it:
SQL> alter system set tablespace_encryption = 'DECRYPT_ONLY' scope=spfile sid='*';
System altered.
SQL> exit
Disconnected from Oracle Database 19c EE Extreme Perf Release 19.0.0.0.0 - Production
Version 19.26.0.0.0
[oracle@xdbld601 ~]$ srvctl stop database -d cihltmb
[oracle@xdbld601 ~]$ srvctl start database -d cihltmb
[oracle@xdbld601 ~]$ sqlplus / as sysdba
SQL*Plus: Release 19.0.0.0.0 - Production on Thu Jul 10 13:22:45 2025
Version 19.26.0.0.0
Copyright (c) 1982, 2024, Oracle. All rights reserved.
Connected to:
Oracle Database 19c EE Extreme Perf Release 19.0.0.0.0 - Production
Version 19.26.0.0.0
SQL> show parameter tablespace_encryption
NAME TYPE VALUE
------------------------------------ ----------- ------------------------------
tablespace_encryption string AUTO_ENABLE
It seems AUTO_ENABLE is always enforced even though it is customer cloud,
SY.