You create the Oracle TDE keys in Oracle Server using the PKCS11 API.

You can view the TDE keys in Cryptographic Security Platform Vault.