Connection To Repository Database With Sqlnet Encryption Failing with ORA-12650 (Doc ID 2376633.1)

Last updated on SEPTEMBER 05, 2019

Applies to:

Symptoms

After setting the following values on the repository database in sqlnet.ora file:

SQLNET.ENCRYPTION_SERVER = REQUIRED
SQLNET.ENCRYPTION_TYPES_SERVER = AES256
SQLNET.CRYPTO_CHECKSUM_SERVER = REQUIRED
SQLNET.CRYPTO_CHECKSUM_TYPES_SERVER = SHA256

The OMS is failing to start with:

[oracle@myserver ~]$ emctl start oms
Oracle Enterprise Manager Cloud Control 13c Release 2
Copyright (c) 1996, 2016 Oracle Corporation. All rights reserved.
Starting Oracle Management Server...
WebTier Successfully Started
Oracle Management Server is not functioning because of the following reason:
Connection to the repository failed. Verify that the repository connection information provided is correct.

The following errors are seen in emoms.trc:
-----------------------
Invalid Connection Pool. ERROR = Oracle Error ORA-12650
Fetched repository credentials from Credential Store
Invalid Connection Pool. ERROR = Oracle Error ORA-12650
Got connection service status as: 2

The following parameters are already set on the OMS according to the documentation:

emctl set property -name oracle.sysman.core.conn.enableEncryption -value 'true'
emctl set property -name oracle.net.encryption_client -value 'REQUIRED'
emctl set property -name oracle.sysman.core.conn.encryption_types_client -value '( AES256 )'
emctl set property -name oracle.net.crypto_checksum_client -value 'REQUIRED'
emctl set property -name oracle.sysman.core.conn.crypto_checksum_types_client -value '( SHA256 )'

Ref.: https://docs.oracle.com/cd/E73210_01/EMSEC/GUID-5DD3B11A-1159-40BD-8AEB-41EDE664AB12.htm#GUID-68F5E05E-8B3A-489D-860B-1F1E57D02CA8

Cause

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.