Skip to Main Content

Oracle Database Free

Announcement

For appeals, questions and feedback about Oracle Forums, please email oracle-forums-moderators_us@oracle.com. Technical questions should be asked in the appropriate category. Thank you!

Interested in getting your voice heard by members of the Developer Marketing team at Oracle? Check out this post for AppDev or this post for AI focus group information.

Fix messed up wallet configuration for tde

PericlesNov 21 2024

Hello

I have an oracle free db 23c where I have setup tde for some tablespaces. After rebooting the server I've found that the tables stored on the encrypted tablespaces are unavailable. If I issue a query the error ORA-28365: wallet is not open is shown.

After check the V$ENCRYPTION_WALLET on the CDB and in the FREEPDB db's have found something awkward. In the CDB I have three entries:

FILE /opt/oracle/product/23c/dbhomeXE/data/wallet/tde/ OPEN AUTOLOGIN SINGLE NONE NO 1
FILE OPEN AUTOLOGIN SINGLE UNITED NO 2
FILE /opt/oracle/product/23c/dbhomeXE/data/wallet/E4E5E888348C2619E0530100007F63E8/tde/ NOT_AVAILABLE UNKNOWN SINGLE ISOLATED UNDEFINED 3

But in the FREEPDB there is just one entry:

FILE /opt/oracle/product/23c/dbhomeXE/data/wallet/E4E5E888348C2619E0530100007F63E8/tde/ NOT_AVAILABLE UNKNOWN SINGLE ISOLATED UNDEFINED 3

This is weird because from the start I created the certificates on /opt/oracle/product/23c/dbhomeXE/data/wallet/tde/

In the sqlnet.ora there is only one entry for ENCRYPTION_WALLET_LOCATION and it is pointing to /opt/oracle/product/23c/dbhomeXE/data/wallet/tde/

I tried to copy the wallet located on /opt/oracle/product/23c/dbhomeXE/data/wallet/tde/ to a new directory /opt/oracle/product/23c/dbhomeXE/data/wallet/E4E5E888348C2619E0530100007F63E8/tde/ but even the wallet now is shown as CLOSED, not as NOT_AVAILABLE after restart the DB, still I can't open it. I assume that this is because both wallets have the same password.

Also tried to force the deletion of the faulty wallet with ADMINISTER KEY MANAGEMENT DROP KEYSTORE '/opt/oracle/product/23c/dbhomeXE/data/wallet/E4E5E888348C2619E0530100007F63E8/tde/' IDENTIFIED BY XXXX CONTAINER=ALL; but I get ORA-46600: invalid ADMINISTER KEY MANAGEMENT command

Can anyone please suggest how can I fix this mess?

Thanks in advance.

This post has been answered by Pericles on Nov 22 2024
Jump to Answer
Comments
Post Details
Added on Nov 21 2024
1 comment
44 views