DBAAS-51021 Error: Cannot verify the TDE password. The TDE password is incorrect or the stored TDE location is invalid
(Doc ID 2920068.1)
Last updated on APRIL 29, 2024
Applies to:
Gen 2 Exadata Cloud at Customer - Version N/A and laterInformation in this document applies to any platform.
Symptoms
When testing a 19c upgrade from 18c in the console and the pre-check fails due to error:
[FATAL] [DBAAS-51021] The TDE wallet of the following database(s) is not in AUTOLOGIN mode: <DB_NAME>.
ACTION: Verify the TDE wallet is in AUTOLOGIN on each node.
ACTION: Verify the TDE wallet is in AUTOLOGIN on each node.
When manually checking the database, encryption_wallet is open and autologin on each node
SQL> select * from v$encryption_wallet;
WRL_TYPE WRL_PARAMETER STATUS WALLET_TYP WALLET_OR KEYSTORE FULLY_BAC CON_ID
---------- -------------------------------------------------- ------ ---------- --------- -------- --------- ----------
FILE /var/opt/oracle/dbaas_acfs/<DB_NAME>/tde_wallet/ OPEN AUTOLOGIN SINGLE NONE NO 1
WRL_TYPE WRL_PARAMETER STATUS WALLET_TYP WALLET_OR KEYSTORE FULLY_BAC CON_ID
---------- -------------------------------------------------- ------ ---------- --------- -------- --------- ----------
FILE /var/opt/oracle/dbaas_acfs/<DB_NAME>/tde_wallet/ OPEN AUTOLOGIN SINGLE NONE NO 1
checked the creg files for the database and the wallet/tns_admin locations are correct
$ cat <DB_NAME>.ini | grep tde
tde_ks_bak=/u02/app/oracle/admin/<DB_NAME>/tde_wallet
tde_isolated_config=
tde_ks_login=auto
tde_status=enabled
tde_action=config
tde_ks_loc=/var/opt/oracle/dbaas_acfs/<DB_NAME>/tde_wallet
tde_ks_acfs=yes
$ cat <DB_NAME>.ini | grep wallet
tde_ks_bak=/u02/app/oracle/admin/<DB_NAME>/tde_wallet
wallet_loc_bak=/u02/app/oracle/admin/<DB_NAME>/db_wallet
wallet_loc=/var/opt/oracle/dbaas_acfs/<DB_NAME>/db_wallet
enable_wallet_root=0
sys_cred_loc=/var/opt/oracle/dbaas_acfs/<DB_NAME>/db_wallet
tde_ks_loc=/var/opt/oracle/dbaas_acfs/<DB_NAME>/tde_wallet
db_wallet_acfs=1
tde_ks_bak=/u02/app/oracle/admin/<DB_NAME>/tde_wallet
tde_isolated_config=
tde_ks_login=auto
tde_status=enabled
tde_action=config
tde_ks_loc=/var/opt/oracle/dbaas_acfs/<DB_NAME>/tde_wallet
tde_ks_acfs=yes
$ cat <DB_NAME>.ini | grep wallet
tde_ks_bak=/u02/app/oracle/admin/<DB_NAME>/tde_wallet
wallet_loc_bak=/u02/app/oracle/admin/<DB_NAME>/db_wallet
wallet_loc=/var/opt/oracle/dbaas_acfs/<DB_NAME>/db_wallet
enable_wallet_root=0
sys_cred_loc=/var/opt/oracle/dbaas_acfs/<DB_NAME>/db_wallet
tde_ks_loc=/var/opt/oracle/dbaas_acfs/<DB_NAME>/tde_wallet
db_wallet_acfs=1
Changes
None
Cause
To view full details, sign in with your My Oracle Support account. |
|
Don't have a My Oracle Support account? Click to get started! |
In this Document
Symptoms |
Changes |
Cause |
Solution |
References |