My Oracle Support Banner

After Applying October 2018 CPU/PSU, Auto-Login Wallet Stops Working For TDE With FIPS Mode Enabled (Doc ID 2474806.1)

Last updated on SEPTEMBER 21, 2022

Applies to:

Advanced Networking Option - Version to [Release 11.2]
Information in this document applies to any platform.


After applying the October 2018 Critical Patch Update to, the auto-login wallet (cwallet.sso) stops working, and the database can no longer automatically open the encryption (TDE) wallet.  As a result, the database hits "ORA-28365: wallet is not open" errors.  Often times, the alert log contains messages such as "kcbztek_get_tbskey: decrypting encrypted key for tablespace 1 without opening the wallet".  

The errors stop if the encryption (TDE) wallet is manually opened; however, this does not address the underlying issue with the auto-login wallet.

Rolling back the October 2018 CPU/PSU, or disabling FIPS mode operation, allows the database to once again open the encryption wallet automatically.


The October 2018 PSU was applied to Oracle Database, and Transparent Data Encryption (TDE) was previously implemented.


To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!

In this Document

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.