OCI DB SYSTEM:Create tablespace error "ORA-28361: Master Key Not Yet Set" on migrated database (Doc ID 2716604.1)

Last updated on MARCH 09, 2023

Applies to:

Symptoms

migrated 11g database from on-premises to 18c database on OCI DB SYSTEM.

No TDE enabled on source on-premises database.

Customer is not using PDB on target database(OCI DB SYSTEM) too.

target database(OCI DB SYSTEM) is not reportig any issues with wallet keys and wallet keys health looks good.

select * from v$encryption_wallet;

WRL_TYPE
--------------------
WRL_PARAMETER
--------------------------------------------------------------------------------
STATUS WALLET_TYPE WALLET_OR KEYSTORE FULLY_BAC
------------------------------ -------------------- --------- -------- ---------
CON_ID
----------
FILE
/opt/oracle/dcs/commonstore/wallets/tde/<db_unique_name>/
OPEN AUTOLOGIN SINGLE NONE NO

SELECT con_id, key_id FROM v$encryption_keys;

CON_ID
----------
KEY_ID
------------------------------------------------------------------------------
0
AQTJaY2JbE/7v14DOSsYd0IAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

0
AWiShed+l08KvzeR4IxYQ74AAAAAAAAAAAAAAAAAAAAAAAAAAAAA

SQL>CREATE TABLESPACE <tablespace_name>;
*
ERROR at line 1:
ORA-28361: master key not yet set

alert log error
===

2020-09-23T18:26:38.122433+01:00
Master key not set for this container (0). Please ensure that wallet is configured and master key is set. <<<<<<============
ORA-28361 signalled during: alter tablespace users encryption online using 'aes128' encrypt... <<<<<<============
2020-09-23T18:32:23.844621+01:00
CREATE TABLESPACE testencrpt
2020-09-23T18:32:23.844788+01:00
Force tablespace TESTENCRPT to be encrypted
Master key not set for this container (0). Please ensure that wallet is configured and master key is set. <<<<<<============
ORA-28361 signalled during: CREATE TABLESPACE testencrpt ... <<<<<<============

===

Cause

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.