ORA-28374 During DG Switchover on TEMP tablespace mkeyid (Doc ID 2254458.1)

Last updated on APRIL 23, 2017

Applies to:

Advanced Networking Option - Version 12.1.0.2 and later
Information in this document applies to any platform.

Symptoms

TDE seems to be properly configured on the primary and standby DB.
On both primary and Standby, masterkeyid in v$encrypted_tablespaces ( converted to Base64 format) matches with the mkeyid in the wallet file.

During the switchover operation, ORA-28374 is being received.

The trace file shows the following :

===================================
kztsmdumk: Neither Unified nor Typed TSE MK found!
kcbtse_decrypt_tskey: typed master key does not exist in wallet
input mkid is: 9e03abc6eb934f39bf2e49ead3e84e9f
current pdb 0 kcbtsemkloc 1, kcbtsemkid is: f1fefacd8be64f33bf0eae8fc8bee7e5
===================================

This key is somehow requested : input mkid is: 9e03abc6eb934f39bf2e49ead3e84e9f

and this key converted to base64 is : AZ4Dq8brk085vy5J6tPoTp8=

But this key AZ4Dq8brk085vy5J6tPoTp8 is not present in the wallet file.

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms