My Oracle Support Banner

ORA-28374 During DG Switchover on TEMP tablespace mkeyid (Doc ID 2254458.1)

Last updated on JULY 18, 2021

Applies to:

Advanced Networking Option - Version and later
Information in this document applies to any platform.


TDE seems to be properly configured on the primary and standby DB.
On both primary and Standby, masterkeyid in v$encrypted_tablespaces ( converted to Base64 format) matches with the mkeyid in the wallet file.

During the switchover operation, ORA-28374 is being received.

The trace file shows the following :

kztsmdumk: Neither Unified nor Typed TSE MK found!
kcbtse_decrypt_tskey: typed master key does not exist in wallet
input mkid is: 9e03xxxxxxxxxxxxxxxxxxxxxx84e9f
current pdb 0 kcbtsemkloc 1, kcbtsemkid is: F1FEFACDxxxxxxxxxxxxxxxxxxxxxxE7E5

This key is somehow requested : input mkid is: 9e03xxxxxxxxxxxxxxxxxxxxxx84e9f

and this key converted to base64 is : AZ4xxxxxxxxxxxxxxxxxxxxxxoTp8=

But this key AZ4xxxxxxxxxxxxxxxxxxxxxxoTp8 is not present in the wallet file.


To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!

In this Document

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.