12c PDB, TDE, HSM: After Migrating Keystore to HSM, Accessing Encrypted Data in the PDB Fails With ORA-28374

(Doc ID 2177215.1)

Last updated on APRIL 09, 2018

Applies to:

Advanced Networking Option - Version 12.1.0.1 and later
Oracle Database - Enterprise Edition - Version 12.1.0.1 and later
Information in this document applies to any platform.

Symptoms

After migrating an existing software keystore with to HSM, attempts to access encrypted data in a PDB fail with:

ORA-28374: typed master key not found in wallet

Changes

Previously, a software keystore and an auto-login keystore were used.
The auto-login keystore was moved on the filesystem.
The keystore was then migrated to HSM.

Cause

	Sign In with your My Oracle Support account
	Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms