Oracle Data Safe supports TCP and TLS connections to target databases.
During target database registration, you configure a connection between Oracle Data Safe and a target database. Oracle Data Safe is considered a client of a target database. The connection type can be Transmission Control Protocol (TCP) or Transport Layer Security (TLS). A TLS connection is a TCPS connection that uses TLS cryptographic protocol. Oracle Data Safe supports version 1.2 of the TLS protocol, but not the Secure Sockets Layer (SSL) cryptographic protocol.
Using a TLS connection to a target database provides privacy and data integrity, plus the identity of the communicating parties can be authenticated by using public key cryptography. Although authentication can be optional, the server typically requires it. Oracle Data Safe automatically connects to Autonomous Databases (Autonomous Data Warehouse and Autonomous Transaction Processing databases) by using a TLS connection. For a Bare Metal, Virtual Machine, or Exadata DB system, you can choose either a TCP or TLS connection. If your DB system has TLS configured, then you should use TLS over TCP.
Configuring a TLS connection requires an understanding of wallets, public keys, private keys, and certificates. You may find the following resources useful: