Skip to Main Content

Oracle Database Free

Announcement

For appeals, questions and feedback about Oracle Forums, please email oracle-forums-moderators_us@oracle.com. Technical questions should be asked in the appropriate category. Thank you!

Fix messed up wallet configuration for tde

PericlesNov 21 2024

Hello

I have an oracle free db 23c where I have setup tde for some tablespaces. After rebooting the server I've found that the tables stored on the encrypted tablespaces are unavailable. If I issue a query the error ORA-28365: wallet is not open is shown.

After check the V$ENCRYPTION_WALLET on the CDB and in the FREEPDB db's have found something awkward. In the CDB I have three entries:

FILE /opt/oracle/product/23c/dbhomeXE/data/wallet/tde/ OPEN AUTOLOGIN SINGLE NONE NO 1
FILE OPEN AUTOLOGIN SINGLE UNITED NO 2
FILE /opt/oracle/product/23c/dbhomeXE/data/wallet/E4E5E888348C2619E0530100007F63E8/tde/ NOT_AVAILABLE UNKNOWN SINGLE ISOLATED UNDEFINED 3

But in the FREEPDB there is just one entry:

FILE /opt/oracle/product/23c/dbhomeXE/data/wallet/E4E5E888348C2619E0530100007F63E8/tde/ NOT_AVAILABLE UNKNOWN SINGLE ISOLATED UNDEFINED 3

This is weird because from the start I created the certificates on /opt/oracle/product/23c/dbhomeXE/data/wallet/tde/

In the sqlnet.ora there is only one entry for ENCRYPTION_WALLET_LOCATION and it is pointing to /opt/oracle/product/23c/dbhomeXE/data/wallet/tde/

I tried to copy the wallet located on /opt/oracle/product/23c/dbhomeXE/data/wallet/tde/ to a new directory /opt/oracle/product/23c/dbhomeXE/data/wallet/E4E5E888348C2619E0530100007F63E8/tde/ but even the wallet now is shown as CLOSED, not as NOT_AVAILABLE after restart the DB, still I can't open it. I assume that this is because both wallets have the same password.

Also tried to force the deletion of the faulty wallet with ADMINISTER KEY MANAGEMENT DROP KEYSTORE '/opt/oracle/product/23c/dbhomeXE/data/wallet/E4E5E888348C2619E0530100007F63E8/tde/' IDENTIFIED BY XXXX CONTAINER=ALL; but I get ORA-46600: invalid ADMINISTER KEY MANAGEMENT command

Can anyone please suggest how can I fix this mess?

Thanks in advance.

This post has been answered by Pericles on Nov 22 2024
Jump to Answer
Comments
Post Details
Added on Nov 21 2024
1 comment
838 views