To change the default encryption key, enter:
alter encryption key key1 as default
If a default key already exists, it no longer has the default property. key1 becomes the default key.
If key1 is the default key, you can remove the default designation for key1 as follows:
alter encryption key key1 as not default
If key1 is not the default key, the command returns an error.
alter encryption key as default or not default can be executed only by the System Security Officer and cannot be granted to other users.