For more flexibility, you can change the database master key in a pending state and activate the key later.

To change the database master key and DB policy cipher in a pending state, enter: 

proutil db-name -C epolicy manage dbpolicy rekey pending [-Cipher <CipherName>] -Passphrase < pass.txt>

PROUTIL EPOLICY MANAGE requires Database Administrator and keystore admin privileges.

Note: While a DB policy or object policy is pending, you can use PROUTIL EPOLICY MANAGE commands to change the cipher for an object, but you cannot use ABL or SQL to change object ciphers.
Before you activate a pending master key:
  1. Back up your database (online or offline).
  2. Copy the keystore (.ks) file at the same time so that you can return your database to the previous state if necessary.

To activate the new database master key, enter a command like the following: 

proutil db-name -C epolicy manage dbpolicy activate -Passphrase <pass.txt>

Activating the key creates a new database master key at the keystore. The command changes the pending DB and object policies to current and changes the current DB and object policies to previous.

For syntax details, see PROUTIL EPOLICY MANAGE qualifier.