My Oracle Support Banner

OCI DB SYSTEM:Create tablespace error "ORA-28361: Master Key Not Yet Set" on migrated database (Doc ID 2716604.1)

Last updated on MARCH 12, 2021

Applies to:

Oracle Cloud Infrastructure - Database Service - Version N/A and later
Information in this document applies to any platform.

Symptoms

migrated 11g database from on-premises to 18c database on OCI DB SYSTEM.

No TDE enabled on source on-premises database.

Customer is not using PDB on target database(OCI DB SYSTEM) too.

target database(OCI DB SYSTEM) is not reportig any issues with wallet keys and wallet keys health looks good.

select * from v$encryption_wallet;

WRL_TYPE
--------------------
WRL_PARAMETER
--------------------------------------------------------------------------------
STATUS WALLET_TYPE WALLET_OR KEYSTORE FULLY_BAC
------------------------------ -------------------- --------- -------- ---------
CON_ID
----------
FILE
/opt/oracle/dcs/commonstore/wallets/tde/<db_unique_name>/
OPEN AUTOLOGIN SINGLE NONE NO

SELECT con_id, key_id FROM v$encryption_keys;

CON_ID
----------
KEY_ID
------------------------------------------------------------------------------
0
AQTJaY2JbE/7v14DOSsYd0IAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

0
AWiShed+l08KvzeR4IxYQ74AAAAAAAAAAAAAAAAAAAAAAAAAAAAA

SQL>CREATE TABLESPACE <tablespace_name>;
*
ERROR at line 1:
ORA-28361: master key not yet set

alert log error
===

2020-09-23T18:26:38.122433+01:00
Master key not set for this container (0). Please ensure that wallet is configured and master key is set. <<<<<<============
ORA-28361 signalled during: alter tablespace users encryption online using 'aes128' encrypt... <<<<<<============
2020-09-23T18:32:23.844621+01:00
CREATE TABLESPACE testencrpt
2020-09-23T18:32:23.844788+01:00
Force tablespace TESTENCRPT to be encrypted
Master key not set for this container (0). Please ensure that wallet is configured and master key is set. <<<<<<============
ORA-28361 signalled during: CREATE TABLESPACE testencrpt ... <<<<<<============

===

Cause

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!


In this Document
Symptoms
Cause
Solution
References


My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.