Why Does the TDE Wallet's Tablespace (TS) Encryption Key Look Different Than The Tablespace Master Key In 12c Database Queries?
(Doc ID 2489623.1)
Last updated on APRIL 17, 2023
Applies to:
Advanced Networking Option - Version 12.1.0.2 and laterInformation in this document applies to any platform.
Symptoms
A TDE wallet being used by a 12c database, being the original TDE wallet for the database, seems to be "inconsistent" with the TDE metadata stored in the database.
Specifically, the tablespace (TS) encryption key is similar, but not identical.
The wallet looks like the following example:
In this example:
- ORACLE.SECURITY.TS.ENCRYPTION looks like: BTxiCnXBLj2N6bB6HQO3A/ACAwAAAAAAAAAAAAAAAAAAAAAAAAAA
- Whereas the tablespace master key looks like: ATxiCnXBLj2N6bB6HQO3A/AAAAAAAAAAAAAAAAAAAAAAAAAAA
What could cause this apparent discrepancy or "mismatch"?
Changes
The database was originally 11gR1 (11.1), then later upgraded to 11gR2 (11.2), and finally 12c (12.1).
TDE was originally implemented on 11gR1, and the wallet has not been updated since.
Cause
To view full details, sign in with your My Oracle Support account. |
|
Don't have a My Oracle Support account? Click to get started! |
In this Document
| Symptoms |
| Changes |
| Cause |
| Solution |
| References |