oracle_11g_database1. Introduction
First, you need to make sure that you have enough space. As space was never a big concern for Oracle (but performance yes), make sure that you have at least 10 GB free disk space.
Second, make sure that you have the latest Windows SP and loopback adapter installed and configured if you are using DHCP. How? See this.

Download the latest 11g release ( now) and don’t be scared about the size 🙂
If you have a Metalink account, you can also download the last update ( now, patchset 6890831) and don’t be scared about the size 🙂

2. Install database release
First, install the
I’m not gonna describe this process here as it’s out of the scope. But there is very well documented on Oracle By Example.
After checking that everything is OK, like running SQL*Plus or SQL Developer and Enterprise Manager Database Console, you should close all the services for upgrading it to

3. Upgrade the software to by applying the patch
Stopping the services can be done on Windows in 2 ways:

  • Go to Services and stop OracleDBConsole[SID], OracleService[SID] and Oracle[ORACLE_HOME]TNSListener.
  • start a console and run the following commands:
    sqlplus / as sysdba
    SQL>    EXIT
    emctl stop dbconsole
    lsnrctl stop

Now that the database is down, we can upgrade it to
Start the patch installer and upgrade the software.
Start the listener, you can do this in 2 ways:

  • go to Services and start Oracle[ORACLE_HOME]TNSListener.
  • start a console and run the following command:
    lsnrctl start

4. Upgrade the database to by using DBUA
Now we should start the Database Upgrade Assistant (DBUA). It will find the database to be upgraded and automatically upgrade it.
In the end, you should start the listener, database and EM console by starting the corresponding services (see above) OR by running the following console commands:

lsnrctl start
sqlplus / as sysdba
emctl start dbconsole

Congratulations, your database is patched. If you don’t want Database Vault you can stop here.

4.1. (alternatively) Upgrade the databse to manually
If for any reasons you can’t use DBUA or you don’t want to do this (rolling upgrades, no UI), you can do the DB upgrade from the console as following:

SQL> SPOOL patch.log
SQL> @ORACLE_BASE\ORACLE_HOME\rdbms\admin\catupgrd.sql
SQL> @ORACLE_BASE\ORACLE_HOME\rdbms\admin\utlrp.sql

The last thing to upgrade would be the EM Console by running the following command:

emca -upgrade db

Congratulations, your database is manually patched.

5. Install Database Vault
Until 11g, the Database Vault was a stand-alone product. Lots of people are confused and think that the latest version is, which is FALSE.
THERE IS A 11G VERSION, shipped with the big installation kit. Now you have one reason for such a big installation kit (another reasons are: Real Application Testing or RAT and Warehouse builder server-side components)

Let’s see how to use it: stop all the 3 services (DB Console, database and listener) OR stop them manually:

sqlplus / as sysdba
emctl stop dbconsole
lsnrctl stop

Start Oracle Universal Installer and choose Advanced Installation, then pick Custom Edition. Pay attention that Custom always installs an Enterprise Edition !!
Then make sure you are choosing an existing Oracle Home, this is not chosen by default!
Select “Oracle Database Vault” checkbox. You must also install Oracle Label Security (if you haven’t it yet). OUI is also checking by default Oracle Services For Microsoft Transaction Server, but this is not mandatory, you can uncheck it.
Review the components to be installed and proceed to install them.

Open the database by starting all 3 services (listener, database and DB Console) OR start them manually:

lsnrctl start
sqlplus / as sysdba
emctl start dbconsole

6. Register your database with Database Vault
Start Database Configuration Assistant from Start->Programs->Oracle – ORACLE_HOME->Configuration and Migration tools OR alternatively from console by running the following command:


Choose “Configure Database Options” and select Oracle Database Vault (and Oracle Label Security) and proceed to credentials page.
Pick a password for DBVOWNER and DBVACCTMGR accounts (you might find this very difficult as Database Vault has very strict password requirements) and proceed. The database is automatically restarted by DBCA.

Go to https://host_name:port/dva and you’re done.

Be aware, some people are making the database just too secure and neither themselves can access it! 🙂

Good luck!

Related posts:

Tags: , , , , , , ,
2 Responses to “Install Oracle Database Vault on patched 11g database ( on Windows”
  1. MitraNo Gravatar says:

    Can I install the DB vault on Release without upgrading it to

  2. andreiashNo Gravatar says:

    Yes, absolutely. just do a custom install and select DB Vault from the list out there.

Leave a Reply