TESTPDB(3):ALTER PLUGGABLE DATABASE OPEN detects that an encrypted tablespace has been restored but the master key has not been set for the database, or the database has been flashback'ed prior to first set key of the master key (pdb 3). TESTPDB(3):Completed: create tablespace enctest datafile size 10m ENCRYPTION USING 'AES256' ENCRYPTThen restarted the database and could see the following on the alert log. TESTPDB(3):create tablespace enctest datafile size 10m ENCRYPTION USING 'AES256' ENCRYPT TESTPDB(3):New database key and new master key created successfully TESTPDB(3):Creating new database key with the new master key TESTPDB(3):Creating new database key for new master key and wallet Setup TDE and auto login wallet (below output from alert log). To confirm this a new database was created using 19.3 base release and 19.11 DBRU. So it appears this is something introduced with the DBRU 19.11 patch. Rolling back the DBRU 19.11 (DB went back to 19.10) resolved the issue. It seems when auto login wallet is involved for some reason the correct master key is not identified. Keystore altered.There was no tablespace restore or flashback on it. SQL> ADMINISTER KEY MANAGEMENT CREATE local AUTO_LOGIN KEYSTORE FROM KEYSTORE IDENTIFIED BY asanga321 SELECT con_id,MASTERKEY_ACTIVATED FROM V$DATABASE_KEY_INFO alter session set container=devpdb ĪDMINISTER KEY MANAGEMENT SET ENCRYPTION KEY IDENTIFIED BY asanga321 WITH BACKUP Below steps were carried out but still the message remains. Setting the encryption key or recreating the auto login wallet has no effect on it. Message is shown with respect to the user created PDB.Įven when the above message is shown, there's no issue in accessing the encrypted tablespaces and querying data. Message is not shown when auto login wallet is removed and key store is opened manually after CDB start. Doesn't matter if the wallet is local auto login or not message still appears. This error is shown only when an auto login wallet is in place. If TDE is not used then no such message is shown. Please execute ADMINISTER KEY MANAGEMENT SET ENCRYPTION KEY command, or select the latest master key from V$ENCRYPTION_KEYS and execute ADMINISTER KEY MANAGEMENT USE KEY command if the SET ENCRYPTION KEY command cannot find and decide the master key to use. ĭEVPDB(3): Resetting the master key is required. DEVPDB(3):ALTER PLUGGABLE DATABASE OPEN detects that an encrypted tablespace has been restored but the master key has not been set for the database, or the database has been flashback'ed prior to first set key of the master key (pdb 3).
0 kommentar(er)
