My Oracle Support Banner

12c PDB, TDE, HSM: After Migrating Keystore to HSM, Accessing Encrypted Data in the PDB Fails With ORA-28374 (Doc ID 2177215.1)

Last updated on SEPTEMBER 14, 2021

Applies to:

Oracle Database Cloud Schema Service - Version N/A and later
Gen 1 Exadata Cloud at Customer (Oracle Exadata Database Cloud Machine) - Version N/A and later
Oracle Cloud Infrastructure - Database Service - Version N/A and later
Oracle Database Cloud Exadata Service - Version N/A and later
Oracle Database Exadata Express Cloud Service - Version N/A and later
Information in this document applies to any platform.

Symptoms

After migrating an existing software keystore with to HSM, attempts to access encrypted data in a PDB fail with:  

ORA-28374: typed master key not found in wallet

Changes

Previously, a software keystore and an auto-login keystore were used.  
The auto-login keystore was moved on the filesystem.
The keystore was then migrated to HSM.

Cause

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!

In this Document
Symptoms
Changes
Cause
Solution
References


My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.